Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/e58e27-cafd-417c-95d0-870544caafab/1/9bPGNtKShWxSVGxvvwEJV7GVBko.roa
File: 9bPGNtKShWxSVGxvvwEJV7GVBko.roa (raw, json)
Hash identifier: OdpA7SAjb8zio/08bXjleqQmiSBMbfXb8W6j4+tsGh0=
Subject key identifier: F5:B3:C6:36:D2:92:85:6C:52:54:6C:6F:BF:01:09:57:B1:95:06:4A
Certificate issuer: /CN=614e19a2275816a28e5e80c8f9a28cc5a1d9c0d5
Certificate serial: 018CC3B67FD1ECB1D661654347F6F4A615C7
Authority key identifier: 61:4E:19:A2:27:58:16:A2:8E:5E:80:C8:F9:A2:8C:C5:A1:D9:C0:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YU4ZoidYFqKOXoDI-aKMxaHZwNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/e58e27-cafd-417c-95d0-870544caafab/1/9bPGNtKShWxSVGxvvwEJV7GVBko.roa
Signing time: Mon 01 Jan 2024 06:29:26 +0000
ROA not before: Mon 01 Jan 2024 06:29:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43567
IP address blocks: 188.164.136.0/21 maxlen: 21
188.164.160.0/19 maxlen: 19
37.157.24.0/22 maxlen: 22
37.157.28.0/23 maxlen: 23
37.157.30.0/24 maxlen: 24
77.73.88.0/22 maxlen: 22
77.73.92.0/24 maxlen: 24
31.25.200.0/21 maxlen: 21
77.73.94.0/24 maxlen: 24
77.73.93.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/e58e27-cafd-417c-95d0-870544caafab/1/YU4ZoidYFqKOXoDI-aKMxaHZwNU.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/e58e27-cafd-417c-95d0-870544caafab/1/YU4ZoidYFqKOXoDI-aKMxaHZwNU.mft
rsync://rpki.ripe.net/repository/DEFAULT/YU4ZoidYFqKOXoDI-aKMxaHZwNU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:7f:d1:ec:b1:d6:61:65:43:47:f6:f4:a6:15:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=614e19a2275816a28e5e80c8f9a28cc5a1d9c0d5
Validity
Not Before: Jan 1 06:29:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f5b3c636d292856c52546c6fbf010957b195064a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:a7:eb:0c:86:f2:f3:d8:f2:f6:db:52:a9:b5:
a8:9a:b7:15:a2:eb:01:10:37:77:17:af:64:59:6b:
b1:c5:69:a5:40:08:88:4e:90:17:0e:21:65:24:b7:
20:9e:c8:73:fb:e3:a6:77:0c:3d:95:1f:ff:df:1d:
76:6c:3c:ba:99:0f:dc:a7:b6:20:c7:f9:02:ce:23:
b9:52:e8:d0:6a:a1:8b:81:a2:f1:e3:52:bc:0e:cd:
3c:99:db:2a:2b:c8:31:db:ce:7c:34:1a:1f:9b:28:
66:98:a3:cb:8f:be:bb:f1:97:d7:e2:e0:48:15:eb:
45:5e:6d:20:e3:1a:a2:69:d8:a8:53:62:43:00:68:
ee:3d:c7:53:2f:ba:5c:8e:71:64:b2:b7:fd:66:4e:
5f:dd:32:fe:be:34:7c:d5:bc:63:32:c4:99:0a:33:
f9:fb:5c:4d:8f:7c:ea:7b:78:ee:0f:d6:5b:e0:16:
cd:74:63:8b:c2:ea:ec:e7:06:10:5e:ba:fe:76:8f:
e0:7f:71:04:f6:c1:71:b6:6b:57:f5:e0:0f:e9:17:
4b:4e:be:3b:77:6f:6c:87:75:54:42:2f:75:b0:a1:
d4:1e:5c:66:e4:f2:19:7d:4f:00:e7:77:b5:61:e4:
a9:0c:ac:67:f7:1a:6d:af:81:48:45:3a:c3:b2:fc:
f2:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:B3:C6:36:D2:92:85:6C:52:54:6C:6F:BF:01:09:57:B1:95:06:4A
X509v3 Authority Key Identifier:
keyid:61:4E:19:A2:27:58:16:A2:8E:5E:80:C8:F9:A2:8C:C5:A1:D9:C0:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YU4ZoidYFqKOXoDI-aKMxaHZwNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/e58e27-cafd-417c-95d0-870544caafab/1/9bPGNtKShWxSVGxvvwEJV7GVBko.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/e58e27-cafd-417c-95d0-870544caafab/1/YU4ZoidYFqKOXoDI-aKMxaHZwNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.25.200.0/21
37.157.24.0-37.157.30.255
77.73.88.0-77.73.94.255
188.164.136.0/21
188.164.160.0/19
Signature Algorithm: sha256WithRSAEncryption
d1:be:1e:24:a9:10:39:85:ef:d2:17:0c:cf:70:78:6a:11:61:
36:6c:3b:bd:60:7a:5d:15:21:91:dc:13:19:2d:81:35:a3:6f:
a4:26:f2:2d:fd:70:16:45:63:3c:f4:bf:c2:c9:d4:d7:96:24:
d8:8e:a0:67:0e:f2:ee:92:c0:62:b1:bf:c9:c6:6a:a0:3a:17:
3f:a4:00:fe:8a:3e:9f:3a:c6:a8:59:c8:0b:d1:69:56:a0:c4:
8a:9d:af:59:f4:f2:6f:44:52:51:b4:f7:66:12:de:85:4e:75:
5e:73:bb:9d:7c:86:72:a7:52:00:cc:a8:01:74:dd:f0:d9:aa:
78:ec:eb:c4:95:92:f5:4a:a7:74:c2:5e:f4:20:93:d0:9f:9f:
fa:cc:79:46:62:e3:bf:b2:19:e3:1e:03:82:d8:06:7f:5a:0d:
eb:cd:a7:87:ee:a3:59:13:c1:ba:17:56:0b:02:dc:e2:82:07:
55:95:6b:f3:6b:02:6b:44:d2:6c:7f:c3:28:6d:09:50:0f:5c:
8b:dc:f8:fc:61:6b:97:52:66:41:4f:3a:5e:38:07:37:49:e0:
e8:8b:26:9c:05:da:06:12:f3:41:6c:cb:c9:fb:21:a0:01:ed:
f1:2d:eb:e3:ae:d0:e6:77:15:77:7a:c3:f6:02:7a:4d:f7:5f:
9d:ff:08:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 15:04:27 2024 by rpki-client on console-fra.rpki-client.org