Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/gXerzGosUeyLbpex_Jhr6_Nd0w0.roa
File: gXerzGosUeyLbpex_Jhr6_Nd0w0.roa (raw, json)
Hash identifier: L6bbr8MKm/QYwvSTkDIJPsHiwqvptbqvwow2/uebcbc=
Subject key identifier: 81:77:AB:CC:6A:2C:51:EC:8B:6E:97:B1:FC:98:6B:EB:F3:5D:D3:0D
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 018F054D630C46639CCCBB84B9FDA3D716A9
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/gXerzGosUeyLbpex_Jhr6_Nd0w0.roa
Signing time: Mon 22 Apr 2024 10:15:08 +0000
ROA not before: Mon 22 Apr 2024 10:15:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 62.72.162.0/23 maxlen: 23
62.72.164.0/22 maxlen: 22
62.72.164.0/23 maxlen: 23
62.72.176.0/24 maxlen: 24
62.72.183.0/24 maxlen: 24
62.72.189.0/24 maxlen: 24
81.21.2.0/23 maxlen: 23
81.21.4.0/22 maxlen: 24
81.21.8.0/24 maxlen: 24
81.21.9.0/24 maxlen: 24
81.21.10.0/23 maxlen: 23
81.21.12.0/22 maxlen: 24
81.21.14.0/23 maxlen: 24
176.57.59.0/24 maxlen: 24
176.57.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 14:10:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:05:4d:63:0c:46:63:9c:cc:bb:84:b9:fd:a3:d7:16:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Apr 22 10:15:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8177abcc6a2c51ec8b6e97b1fc986bebf35dd30d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:24:56:32:9d:20:6d:73:79:6d:3f:3b:55:98:
49:d2:2e:9b:e2:fc:68:1b:cc:21:96:4c:c8:19:0f:
b7:ae:f9:37:cb:8d:8c:89:5f:a2:1a:63:10:12:64:
f3:50:01:d2:17:e4:cf:c6:4f:e4:47:91:24:17:13:
8e:11:78:c7:c4:ca:92:ca:75:7f:b3:a0:36:13:b1:
04:33:b9:ce:bb:d0:24:b0:3e:ba:b1:51:37:97:bc:
e3:67:f2:0b:a3:01:0c:b0:28:a9:4b:6d:e2:63:47:
27:ad:d7:72:4e:db:37:f2:c7:3a:4d:ba:42:c4:8e:
d5:db:51:c8:0b:a0:9b:da:af:1f:25:de:27:49:cd:
bf:78:0b:5c:5e:a4:1e:8f:cf:32:1b:64:e0:e0:b3:
68:24:fb:1d:34:18:e9:ea:0e:f3:08:7d:95:9c:39:
c3:92:5a:c5:c1:04:f4:bc:8f:89:01:f4:a8:db:4a:
56:06:e0:a2:ff:cb:33:7b:4c:e2:cd:8e:e8:17:1f:
86:3f:db:4c:e8:99:f6:e5:39:a7:ea:7e:ab:63:9c:
3d:0a:a9:18:f0:14:4c:59:68:31:18:94:b7:ca:61:
86:57:ad:a2:28:cc:a4:2e:b0:ff:53:2d:97:4e:61:
9a:b8:a8:5a:46:0c:3c:52:49:ca:44:97:55:4c:ab:
b1:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:77:AB:CC:6A:2C:51:EC:8B:6E:97:B1:FC:98:6B:EB:F3:5D:D3:0D
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/gXerzGosUeyLbpex_Jhr6_Nd0w0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.162.0-62.72.167.255
62.72.176.0/24
62.72.183.0/24
62.72.189.0/24
81.21.2.0-81.21.15.255
176.57.59.0/24
176.57.63.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:4a:7c:85:c0:31:f6:5b:c4:4b:c5:ab:71:87:76:83:fd:5d:
07:7e:4a:e1:73:cf:30:df:e2:ad:69:19:55:42:ce:4e:44:1d:
4e:1b:88:64:6f:e0:e3:5a:52:f5:49:ed:bf:e8:b9:ca:68:88:
fd:87:f1:b7:59:6e:a3:9c:54:77:5f:d8:59:d6:8b:b0:c3:03:
1e:54:25:be:11:34:61:99:da:54:41:65:16:81:1e:5f:9d:0a:
c6:df:97:76:16:aa:79:f1:2f:0d:05:f2:f1:9c:d9:ea:81:c6:
88:bc:28:2e:06:63:96:11:10:6e:39:47:9c:51:99:9b:94:a1:
34:1d:39:aa:6a:13:81:34:f5:ab:65:7a:ea:41:0b:eb:92:ee:
75:90:f0:c8:bf:69:1c:b3:bf:49:85:3c:60:c8:16:45:18:b1:
b2:55:3d:66:0f:1b:8a:39:15:02:68:3d:15:34:93:e9:dd:8a:
f6:26:66:e7:26:3b:4f:bb:cf:47:73:e5:29:a7:a8:a7:6f:f9:
97:9f:ce:d5:d4:33:54:c3:d0:29:8f:b6:48:32:ab:7a:e3:d4:
49:72:bf:ed:44:30:31:d7:62:10:8a:1f:ec:65:8f:b5:e3:ae:
10:65:60:cc:09:32:27:fd:57:71:44:f8:7c:27:72:75:26:fe:
84:c0:b6:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 23:06:48 2024 by rpki-client on console-fra.rpki-client.org