Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/vHYP4M8z0CLWHbTGXn4wPDeqYig.roa
File: vHYP4M8z0CLWHbTGXn4wPDeqYig.roa (raw, json)
Hash identifier: rsElQMAi6mo2GaTYEo8xkA8tUcMTBB9iZ4FMTkthLGE=
Subject key identifier: BC:76:0F:E0:CF:33:D0:22:D6:1D:B4:C6:5E:7E:30:3C:37:AA:62:28
Certificate issuer: /CN=76a75826e991225a429ff8a1e7ffdc80466420df
Certificate serial: 018CC80137F38FD136F30AAA868B2D868366
Authority key identifier: 76:A7:58:26:E9:91:22:5A:42:9F:F8:A1:E7:FF:DC:80:46:64:20:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dqdYJumRIlpCn_ih5__cgEZkIN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/vHYP4M8z0CLWHbTGXn4wPDeqYig.roa
Signing time: Tue 02 Jan 2024 02:29:32 +0000
ROA not before: Tue 02 Jan 2024 02:29:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200943
IP address blocks: 192.44.9.0/24 maxlen: 24
153.96.64.0/22 maxlen: 22
153.96.62.0/23 maxlen: 23
153.96.160.0/21 maxlen: 21
192.102.149.0/24 maxlen: 24
192.102.146.0/23 maxlen: 23
192.102.157.0/24 maxlen: 24
192.102.154.0/23 maxlen: 23
153.96.186.0/23 maxlen: 23
192.102.166.0/24 maxlen: 24
192.88.97.0/24 maxlen: 24
192.102.173.0/24 maxlen: 24
129.233.202.0/24 maxlen: 24
129.233.200.0/23 maxlen: 23
153.96.142.0/24 maxlen: 24
2a03:db80:5470::/48 maxlen: 48
2a03:db80:5460::/48 maxlen: 48
2001:67c:61c::/48 maxlen: 48
2a03:db80:5474::/48 maxlen: 48
2a03:db80:5464::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/dqdYJumRIlpCn_ih5__cgEZkIN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/dqdYJumRIlpCn_ih5__cgEZkIN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/dqdYJumRIlpCn_ih5__cgEZkIN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:37:f3:8f:d1:36:f3:0a:aa:86:8b:2d:86:83:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76a75826e991225a429ff8a1e7ffdc80466420df
Validity
Not Before: Jan 2 02:29:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bc760fe0cf33d022d61db4c65e7e303c37aa6228
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:8f:d0:25:85:21:44:11:c1:8e:f2:b3:75:7e:
16:81:b8:62:fb:dd:85:80:36:c9:cd:21:6c:e2:6e:
f1:69:51:c5:d0:f5:06:e3:03:b3:fa:b2:21:21:f1:
08:9b:15:57:12:8b:45:be:67:56:44:be:bb:e9:07:
46:61:bb:fc:13:40:5e:6d:75:04:8d:63:62:b1:48:
7c:6e:b1:03:49:9c:5b:3d:22:26:82:bc:5c:88:2c:
ad:eb:ec:e1:d8:2e:41:d3:44:bb:4a:18:a1:a5:12:
99:ad:64:dd:af:72:ec:c1:9a:92:1f:79:c2:29:21:
99:81:f1:fa:50:71:40:51:e8:a7:5a:b5:04:71:01:
bf:ec:fd:85:fc:d7:16:a3:2c:cd:30:73:5c:a8:21:
2a:be:dc:99:23:1c:f5:25:ea:21:62:09:e1:75:e9:
d0:72:cc:68:94:62:2e:f4:49:c3:56:94:e8:14:5a:
46:b1:fd:c8:9d:8f:c8:d9:8b:4b:05:eb:ac:0a:c8:
62:d6:cd:8c:d7:25:b9:1c:c6:dd:a1:eb:8d:0c:7b:
3e:89:0e:c3:d6:e2:09:ff:d4:0b:0e:84:95:2e:cc:
bf:8f:61:70:06:fb:57:85:47:6a:a1:73:f5:40:f3:
35:47:df:eb:69:e0:08:73:e9:69:49:0a:10:73:37:
21:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:76:0F:E0:CF:33:D0:22:D6:1D:B4:C6:5E:7E:30:3C:37:AA:62:28
X509v3 Authority Key Identifier:
keyid:76:A7:58:26:E9:91:22:5A:42:9F:F8:A1:E7:FF:DC:80:46:64:20:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dqdYJumRIlpCn_ih5__cgEZkIN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/vHYP4M8z0CLWHbTGXn4wPDeqYig.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/dqdYJumRIlpCn_ih5__cgEZkIN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
129.233.200.0-129.233.202.255
153.96.62.0-153.96.67.255
153.96.142.0/24
153.96.160.0/21
153.96.186.0/23
192.44.9.0/24
192.88.97.0/24
192.102.146.0/23
192.102.149.0/24
192.102.154.0/23
192.102.157.0/24
192.102.166.0/24
192.102.173.0/24
IPv6:
2001:67c:61c::/48
2a03:db80:5460::/48
2a03:db80:5464::/48
2a03:db80:5470::/48
2a03:db80:5474::/48
Signature Algorithm: sha256WithRSAEncryption
39:33:f3:b4:f9:92:6e:7a:bd:f7:ab:be:a3:1f:df:cf:c0:d3:
47:c0:3c:ef:79:2b:08:c9:cc:b2:94:9e:11:29:2b:5f:b9:88:
c9:38:13:5c:95:d8:3d:e8:74:8e:93:07:f1:77:1f:8b:c3:ba:
05:d5:c7:6d:71:39:9d:2d:33:1f:d5:27:d2:b9:3d:37:4f:9e:
5f:0b:ab:5c:f5:8f:77:de:ee:5b:c3:84:ef:c7:4f:c0:4c:bb:
20:cd:73:34:12:93:50:8a:f4:a9:cf:64:58:1d:95:e5:c1:28:
ff:d5:8a:79:14:a8:35:de:c1:a1:58:1b:64:c1:b6:b0:c7:f6:
e4:61:4f:86:3e:73:c3:c0:d8:3b:cf:02:9c:02:32:7b:b0:67:
3b:13:ed:5b:85:67:c1:a4:4b:70:90:76:cf:45:73:2a:8c:b5:
c3:09:3d:33:b9:f6:7b:e9:dd:c7:59:a4:1c:c3:93:84:02:98:
2a:b0:bd:0c:43:9c:13:05:76:6f:38:fd:7b:76:d0:57:93:a0:
b2:23:f3:4d:58:3b:c6:b9:1e:d7:80:73:89:51:e6:49:fc:74:
84:8a:6c:44:c9:cf:ed:40:13:9b:46:42:77:a1:a8:68:d9:a5:
53:64:dd:b2:9e:c7:f9:b6:6d:b2:7e:56:5d:51:42:a0:4d:3e:
08:b4:07:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 17:11:07 2024 by rpki-client on console-fra.rpki-client.org