Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/gN3Nowhe85UcuV5XnKH-qwIomSc.roa
File: gN3Nowhe85UcuV5XnKH-qwIomSc.roa (raw, json)
Hash identifier: tmzqi1JydVLqXGHB2fsl8j+WYv301V0/bFa4DS9rDwM=
Subject key identifier: 80:DD:CD:A3:08:5E:F3:95:1C:B9:5E:57:9C:A1:FE:AB:02:28:99:27
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 018DD356F6F67E8479B79D65CB2B6B574147
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/gN3Nowhe85UcuV5XnKH-qwIomSc.roa
Signing time: Fri 23 Feb 2024 00:21:48 +0000
ROA not before: Fri 23 Feb 2024 00:21:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60446
IP address blocks: 31.210.37.0/24 maxlen: 24
31.210.38.0/24 maxlen: 24
31.210.39.0/24 maxlen: 24
31.210.40.0/24 maxlen: 24
78.135.75.0/24 maxlen: 24
78.135.76.0/24 maxlen: 24
188.132.224.0/24 maxlen: 24
188.132.239.0/24 maxlen: 24
188.132.241.0/24 maxlen: 24
188.132.242.0/24 maxlen: 24
188.132.243.0/24 maxlen: 24
188.132.250.0/24 maxlen: 24
188.132.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 04:53:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:d3:56:f6:f6:7e:84:79:b7:9d:65:cb:2b:6b:57:41:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Feb 23 00:21:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=80ddcda3085ef3951cb95e579ca1feab02289927
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b1:70:38:c9:cb:92:b1:50:be:40:66:d5:78:
92:21:b1:59:41:1d:32:3c:4f:91:42:cf:e7:25:18:
f0:d5:af:18:45:2d:70:1e:6d:fb:72:18:b5:32:cc:
ef:60:ea:68:19:88:04:60:bb:ca:6c:d0:0e:50:fd:
01:df:dd:54:39:8a:9d:02:8d:87:62:36:9a:0a:05:
d1:aa:50:e9:2d:35:d8:8f:24:74:98:c2:9a:9d:70:
2d:c9:38:69:de:4b:1d:08:c0:54:e5:7e:85:6a:32:
3d:ad:9c:f5:54:98:b5:8a:9b:06:aa:2e:0b:a2:16:
ab:3d:30:5b:a9:83:80:8a:2c:e2:7b:3e:d9:b1:b9:
b1:69:54:ef:b0:ee:7a:54:4e:fd:55:fb:36:2f:c8:
2a:5d:56:79:c3:87:8c:1a:23:e3:90:0f:28:d4:a5:
25:cb:66:f7:c4:ea:fd:36:2d:7d:7f:8e:50:84:98:
f3:38:7d:1d:2b:f2:bc:28:47:59:48:dd:5b:a0:db:
5b:60:1f:48:c0:20:e0:e7:b3:18:b6:1d:5e:72:e8:
ea:c7:cb:39:4e:3a:54:59:44:7c:fa:3e:c7:6f:e2:
0f:25:51:db:2d:8d:e3:c2:80:84:18:95:7a:c1:8d:
25:40:d5:f8:7b:8d:32:7d:05:be:9e:fc:e0:52:39:
fd:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:DD:CD:A3:08:5E:F3:95:1C:B9:5E:57:9C:A1:FE:AB:02:28:99:27
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/gN3Nowhe85UcuV5XnKH-qwIomSc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.210.37.0-31.210.40.255
78.135.75.0-78.135.76.255
188.132.224.0/24
188.132.239.0/24
188.132.241.0-188.132.243.255
188.132.250.0/23
Signature Algorithm: sha256WithRSAEncryption
6a:84:97:01:99:63:34:50:11:e0:f5:c3:62:f0:68:91:1b:f9:
12:e0:f1:a9:07:28:9e:96:db:ee:39:44:ae:53:90:b6:00:30:
f3:ad:bd:f6:c6:49:5f:36:5c:4d:0e:bf:f1:f9:a0:e9:a8:78:
e6:51:57:42:48:90:10:47:23:92:49:38:9d:67:1a:a6:08:84:
f8:ac:93:b4:e3:8d:9b:09:65:71:7c:85:5d:f2:1b:41:4a:54:
a0:72:77:f2:3e:50:9f:18:32:45:97:68:c2:8d:d1:90:04:7e:
5e:74:b6:66:db:58:fa:1c:c0:62:78:68:c7:5b:84:b8:25:c4:
1c:0e:8b:17:84:a9:2f:b0:dd:7c:57:45:32:f8:56:01:a1:1c:
2c:d0:dc:6e:9d:d5:88:60:b5:50:c7:00:4d:11:2b:45:63:fc:
63:3d:6c:27:91:22:76:ae:23:ce:3f:f8:69:b3:41:2c:d3:c8:
d6:e6:0b:8b:5f:57:4d:7f:81:6e:d0:3b:47:7e:e0:8e:ad:01:
fc:fc:50:ae:69:5b:71:75:10:73:d0:a8:e7:c3:6a:9b:0a:5a:
c5:28:35:17:09:55:b0:51:23:38:30:e7:d6:a4:25:cc:0e:49:
5e:91:d6:98:7d:16:fa:8e:35:d0:b4:39:bc:b5:be:8e:84:b6:
fc:b4:23:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 08:31:27 2024 by rpki-client on console-ams.rpki-client.org