Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/geUpGnL2SSaQlhB6eVP5jByia-E.roa
File: geUpGnL2SSaQlhB6eVP5jByia-E.roa (raw, json)
Hash identifier: RwM5/A40z7Itp+EYyh5vePCqg3gjLSiUILY/+2TgZCM=
Subject key identifier: 81:E5:29:1A:72:F6:49:26:90:96:10:7A:79:53:F9:8C:1C:A2:6B:E1
Certificate issuer: /CN=ac7cc334f51d2b6eb4e27d6d56b9bce3e85560cc
Certificate serial: 018CC64B446B52844C7A5FCA22314B6C23BA
Authority key identifier: AC:7C:C3:34:F5:1D:2B:6E:B4:E2:7D:6D:56:B9:BC:E3:E8:55:60:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rHzDNPUdK2604n1tVrm84-hVYMw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/geUpGnL2SSaQlhB6eVP5jByia-E.roa
Signing time: Mon 01 Jan 2024 18:31:10 +0000
ROA not before: Mon 01 Jan 2024 18:31:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 28716
IP address blocks: 217.19.151.0/24 maxlen: 24
217.19.156.0/24 maxlen: 24
77.95.136.0/21 maxlen: 24
77.95.136.0/24 maxlen: 24
80.94.116.0/24 maxlen: 24
80.94.112.0/20 maxlen: 24
217.19.144.0/20 maxlen: 24
78.159.216.0/21 maxlen: 24
185.61.12.0/22 maxlen: 24
45.89.180.0/22 maxlen: 24
185.41.212.0/22 maxlen: 22
78.159.192.0/21 maxlen: 24
46.243.32.0/21 maxlen: 24
46.243.38.0/24 maxlen: 24
2001:1bd0::/29 maxlen: 48
2a01:5d20::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.mft
rsync://rpki.ripe.net/repository/DEFAULT/rHzDNPUdK2604n1tVrm84-hVYMw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 03 Jul 2024 23:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:44:6b:52:84:4c:7a:5f:ca:22:31:4b:6c:23:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac7cc334f51d2b6eb4e27d6d56b9bce3e85560cc
Validity
Not Before: Jan 1 18:31:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=81e5291a72f649269096107a7953f98c1ca26be1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:54:37:9e:f9:04:a8:cc:40:5a:48:51:fb:0f:
f7:25:6d:dd:41:33:17:3f:d3:bf:e0:04:da:c9:2b:
9d:be:ab:29:37:ec:54:8c:14:c4:2a:f8:26:ee:01:
53:b9:b2:97:8d:c3:e9:bf:7a:d9:59:a4:b9:b9:ec:
a3:bb:6a:99:6f:cf:72:63:3f:fb:b5:72:f9:2c:74:
d3:9f:ca:71:63:58:84:d7:8b:10:3f:93:66:52:76:
00:0c:85:f8:84:be:c9:9a:8e:69:a1:0d:06:0f:b2:
f0:a7:66:9a:e6:7e:3e:c2:4b:af:d2:bb:70:f4:be:
c4:8c:c3:3a:69:9d:1f:52:83:47:2b:33:fb:11:3f:
ac:aa:7d:51:18:98:7c:ec:4e:2d:58:a4:cd:f9:27:
fd:07:86:04:5b:a5:7f:82:25:4c:b0:e7:1d:04:66:
fc:9c:82:f8:1f:76:95:ca:1c:52:c5:76:b5:71:a1:
74:18:96:b9:0c:35:d4:f9:40:5e:25:e3:ee:37:11:
04:6c:71:1f:00:b1:4f:45:ab:33:cc:21:21:33:6f:
57:b7:c4:f7:79:c7:e6:a9:bf:9e:5a:c7:a5:dc:97:
fb:0b:14:c9:8c:01:cb:7a:b2:ec:f1:9d:00:5e:0f:
a3:3f:10:33:f1:be:2f:06:6b:80:49:7a:95:a4:dd:
42:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:E5:29:1A:72:F6:49:26:90:96:10:7A:79:53:F9:8C:1C:A2:6B:E1
X509v3 Authority Key Identifier:
keyid:AC:7C:C3:34:F5:1D:2B:6E:B4:E2:7D:6D:56:B9:BC:E3:E8:55:60:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rHzDNPUdK2604n1tVrm84-hVYMw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/geUpGnL2SSaQlhB6eVP5jByia-E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.180.0/22
46.243.32.0/21
77.95.136.0/21
78.159.192.0/21
78.159.216.0/21
80.94.112.0/20
185.41.212.0/22
185.61.12.0/22
217.19.144.0/20
IPv6:
2001:1bd0::/29
2a01:5d20::/29
Signature Algorithm: sha256WithRSAEncryption
31:7b:4e:70:f4:71:9e:f1:5d:ff:2a:56:c1:03:75:f1:94:e5:
e2:59:df:b9:54:34:21:4c:8e:3c:cb:84:48:8d:78:a6:9d:74:
3f:33:ea:9d:bc:ab:67:cb:24:5b:13:8a:77:53:33:f6:26:45:
ad:11:a6:ce:3e:50:ad:2f:9c:8b:40:8e:e5:12:6c:91:45:0c:
ef:85:2d:15:ce:1a:38:9e:d0:88:57:be:d4:bf:0e:85:43:b0:
2f:d1:18:27:81:cf:4a:50:e4:8c:c9:6c:04:b2:7e:70:61:a9:
93:21:bc:91:45:d3:e4:d6:a3:61:7a:85:6f:4f:54:b1:28:d6:
9e:9b:c4:32:7a:3a:5f:be:a3:8d:6e:3c:e9:3c:2d:da:c6:8e:
03:1f:ce:3a:96:13:5a:c6:74:5b:10:56:d5:96:cd:fd:8d:1c:
2b:32:64:aa:a5:e9:3b:a9:10:73:23:36:c8:bd:b0:81:c0:a3:
5d:b6:17:59:91:98:7d:23:f6:66:53:f0:13:5e:ee:78:7b:f2:
5b:5e:d5:46:2a:45:78:44:ed:bb:45:cc:23:e4:99:9b:1f:e2:
5f:69:7a:d7:d0:5c:ba:5c:f9:df:05:99:a7:a1:30:dd:91:ee:
66:9c:fb:c9:be:0a:03:e5:35:c8:cd:24:e8:96:28:ec:b5:20:
4e:f8:a5:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 3 08:19:04 2024 by rpki-client on console-fra.rpki-client.org