Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/9ff43e-f817-4ebe-a0d9-7a18931d985b/1/nHcxX7fzpuG9kzP24HfAbvAEfL4.roa
File: nHcxX7fzpuG9kzP24HfAbvAEfL4.roa (raw, json)
Hash identifier: b7gcEuqPMKFIn6f+Z3lfh+i7hq2r35eT+n79MCE4UB4=
Subject key identifier: 9C:77:31:5F:B7:F3:A6:E1:BD:93:33:F6:E0:77:C0:6E:F0:04:7C:BE
Certificate issuer: /CN=b67f1b87e6752f45439b8528cc968b4770a5a0fb
Certificate serial: 018CC5DC75B2601C3EF228D0DB30C89801F9
Authority key identifier: B6:7F:1B:87:E6:75:2F:45:43:9B:85:28:CC:96:8B:47:70:A5:A0:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tn8bh-Z1L0VDm4UozJaLR3CloPs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/9ff43e-f817-4ebe-a0d9-7a18931d985b/1/nHcxX7fzpuG9kzP24HfAbvAEfL4.roa
Signing time: Mon 01 Jan 2024 16:30:08 +0000
ROA not before: Mon 01 Jan 2024 16:30:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61232
IP address blocks: 195.242.164.0/23 maxlen: 23
195.242.163.0/24 maxlen: 24
185.152.17.0/24 maxlen: 24
185.152.16.0/24 maxlen: 24
185.152.19.0/24 maxlen: 24
185.152.18.0/24 maxlen: 24
2a07:7cc6::/32 maxlen: 32
2a07:7cc3::/32 maxlen: 32
2a07:7cc7::/32 maxlen: 32
2a07:7cc1::/32 maxlen: 32
2a07:7cc4::/32 maxlen: 32
2a07:7cc0::/32 maxlen: 32
2a07:7cc2::/32 maxlen: 32
2a07:7cc5::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/9ff43e-f817-4ebe-a0d9-7a18931d985b/1/tn8bh-Z1L0VDm4UozJaLR3CloPs.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/9ff43e-f817-4ebe-a0d9-7a18931d985b/1/tn8bh-Z1L0VDm4UozJaLR3CloPs.mft
rsync://rpki.ripe.net/repository/DEFAULT/tn8bh-Z1L0VDm4UozJaLR3CloPs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 13:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:75:b2:60:1c:3e:f2:28:d0:db:30:c8:98:01:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b67f1b87e6752f45439b8528cc968b4770a5a0fb
Validity
Not Before: Jan 1 16:30:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9c77315fb7f3a6e1bd9333f6e077c06ef0047cbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:98:4a:14:83:7b:b9:a7:e9:c4:de:d7:c3:34:
2f:ab:c1:e6:f4:dc:ac:2f:0c:66:b9:58:a5:95:16:
9a:9b:d3:4a:36:11:52:ce:6d:92:4b:c8:fc:0b:5b:
b6:d0:5a:b7:ce:c1:fb:d6:59:eb:c9:87:13:6d:33:
aa:75:e8:cb:a9:56:09:ae:76:81:d7:78:9d:ae:5f:
23:40:c9:62:96:70:3d:d6:bf:ff:32:16:dc:a4:1a:
cf:c3:86:29:dc:95:1e:2f:5a:61:10:3a:35:23:43:
e8:ab:89:7e:08:4d:cf:73:d2:e1:a9:98:93:55:43:
7c:f6:6a:71:95:18:6f:30:ba:83:0c:f7:8d:01:52:
93:a1:db:86:30:85:9f:92:fc:87:1c:ef:14:fc:bb:
31:6e:79:eb:f9:bc:22:f1:87:6b:29:53:6e:6d:a2:
a1:8d:90:62:40:fe:5a:c4:03:c1:b0:81:75:12:3b:
c6:a6:b6:73:65:66:70:5e:31:ff:96:c4:1b:28:88:
dc:1a:a4:c2:7b:f1:02:1f:0b:f8:ca:25:54:63:03:
9f:f8:6f:f1:4b:49:23:84:7c:3e:20:6c:e8:b3:18:
79:e1:60:1e:b0:61:57:ae:bc:24:12:e7:ed:02:c6:
be:70:ce:09:6c:94:28:68:a5:f5:9c:56:50:03:12:
fb:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:77:31:5F:B7:F3:A6:E1:BD:93:33:F6:E0:77:C0:6E:F0:04:7C:BE
X509v3 Authority Key Identifier:
keyid:B6:7F:1B:87:E6:75:2F:45:43:9B:85:28:CC:96:8B:47:70:A5:A0:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tn8bh-Z1L0VDm4UozJaLR3CloPs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9ff43e-f817-4ebe-a0d9-7a18931d985b/1/nHcxX7fzpuG9kzP24HfAbvAEfL4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9ff43e-f817-4ebe-a0d9-7a18931d985b/1/tn8bh-Z1L0VDm4UozJaLR3CloPs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.152.16.0/22
195.242.163.0-195.242.165.255
IPv6:
2a07:7cc0::/29
Signature Algorithm: sha256WithRSAEncryption
46:9e:e0:67:f9:b2:54:19:a7:38:a1:19:72:b6:c7:3c:15:ae:
4d:ba:28:7b:f2:de:f5:30:b9:26:4c:c6:6b:52:0d:a7:bb:02:
b4:58:81:cb:2b:d9:02:ec:4b:14:db:15:dc:4b:68:d2:3e:6a:
3a:61:d6:59:6e:3b:77:1d:5a:5e:ea:1a:71:c9:59:30:74:6b:
2f:fd:3c:e4:f5:45:eb:5a:d6:d3:bc:64:11:f8:49:e9:25:bc:
ac:f8:d1:69:b9:5a:3b:52:48:dd:06:fd:95:1e:e9:02:ee:d8:
f5:ce:c8:6c:de:be:d2:fc:50:cb:42:7c:7e:b6:e2:2c:5c:7d:
a9:e5:df:1c:88:a2:63:49:15:84:e0:40:dd:e9:65:0d:1d:5a:
ef:4f:93:f8:a7:ae:16:36:56:36:6a:e5:61:bb:a5:67:d2:22:
ff:de:47:35:b8:5d:32:42:bc:b4:55:3c:dc:0c:74:ac:94:2c:
7f:5a:57:1f:71:90:8b:38:16:e9:3e:26:35:6a:4b:20:76:c2:
10:bb:7b:28:9d:08:e0:ba:4e:d7:cf:bd:ff:6f:c5:54:42:2a:
b5:47:42:b2:a3:28:80:26:08:26:31:84:05:b5:d9:b4:d9:ea:
23:60:84:5d:81:24:34:ae:2f:00:d0:9e:49:bc:ba:69:50:04:
69:f4:22:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 20:23:20 2024 by rpki-client on console-fra.rpki-client.org