Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/39081f-5003-41ed-b80a-3fae034c489e/1/XVG9h0xBViuBGvpEX5G5oV8a2Ug.roa
File: XVG9h0xBViuBGvpEX5G5oV8a2Ug.roa (raw, json)
Hash identifier: vHVdCDvmZpYQx6BMfbdZa54cr9pns6thg245xosJlnY=
Subject key identifier: 5D:51:BD:87:4C:41:56:2B:81:1A:FA:44:5F:91:B9:A1:5F:1A:D9:48
Certificate issuer: /CN=b169a49700e0c3b8e39a79130c987a5000ccffe2
Certificate serial: 018CC94CF3388AD9EBDEBA3E8DA7D6F64EF2
Authority key identifier: B1:69:A4:97:00:E0:C3:B8:E3:9A:79:13:0C:98:7A:50:00:CC:FF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sWmklwDgw7jjmnkTDJh6UADM_-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/39081f-5003-41ed-b80a-3fae034c489e/1/XVG9h0xBViuBGvpEX5G5oV8a2Ug.roa
Signing time: Tue 02 Jan 2024 08:31:52 +0000
ROA not before: Tue 02 Jan 2024 08:31:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16302
IP address blocks: 83.142.72.0/21 maxlen: 21
217.119.32.0/20 maxlen: 20
77.246.192.0/20 maxlen: 20
79.134.96.0/19 maxlen: 19
80.248.240.0/20 maxlen: 20
185.163.14.0/23 maxlen: 23
188.127.192.0/19 maxlen: 19
185.9.8.0/22 maxlen: 22
2a00:1190::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/39081f-5003-41ed-b80a-3fae034c489e/1/sWmklwDgw7jjmnkTDJh6UADM_-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/39081f-5003-41ed-b80a-3fae034c489e/1/sWmklwDgw7jjmnkTDJh6UADM_-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/sWmklwDgw7jjmnkTDJh6UADM_-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 09 Jun 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4c:f3:38:8a:d9:eb:de:ba:3e:8d:a7:d6:f6:4e:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b169a49700e0c3b8e39a79130c987a5000ccffe2
Validity
Not Before: Jan 2 08:31:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5d51bd874c41562b811afa445f91b9a15f1ad948
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:2a:77:71:66:ea:6b:ae:ce:30:89:6c:a7:83:
13:c4:5c:4b:00:a9:5c:b4:a7:9e:a0:d9:d9:b5:82:
0a:b8:f5:96:ad:94:b5:92:00:3c:2e:39:ce:ce:a6:
9b:39:74:f8:1f:a3:18:d6:19:92:6c:7e:85:b5:de:
fb:7b:d8:c0:99:5e:b2:d0:96:7d:65:06:9b:1f:75:
3a:39:bf:2c:a0:22:bf:9c:d5:fb:11:13:6d:dc:e0:
79:c6:d2:04:8a:e2:2c:de:25:bd:c3:56:34:8f:b2:
ab:d7:c5:16:b3:a3:06:4a:1a:03:07:31:5b:bc:f5:
88:78:99:8e:a7:72:33:25:d2:e0:e6:49:76:f9:7c:
69:c7:6e:41:a4:4d:64:2e:f8:d7:9c:8e:4b:99:ad:
17:d9:e6:b3:14:dd:03:c2:3c:17:cc:ce:dd:64:32:
b1:d8:73:46:bf:8c:ae:bd:2a:51:7c:99:16:10:ec:
33:57:e6:a2:1f:a8:f4:a6:ac:c3:36:9a:41:46:8c:
9a:4f:1f:2b:6a:e5:be:dd:57:e3:4d:42:bc:0b:20:
23:2f:2e:3c:3a:bb:56:7b:cb:14:eb:c7:dc:09:59:
5c:c1:f7:fc:98:d1:0f:76:e8:34:54:85:b1:fd:3a:
af:a7:5d:c3:8b:6d:16:53:b8:cc:cb:7f:12:de:aa:
ac:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:51:BD:87:4C:41:56:2B:81:1A:FA:44:5F:91:B9:A1:5F:1A:D9:48
X509v3 Authority Key Identifier:
keyid:B1:69:A4:97:00:E0:C3:B8:E3:9A:79:13:0C:98:7A:50:00:CC:FF:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sWmklwDgw7jjmnkTDJh6UADM_-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/39081f-5003-41ed-b80a-3fae034c489e/1/XVG9h0xBViuBGvpEX5G5oV8a2Ug.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/39081f-5003-41ed-b80a-3fae034c489e/1/sWmklwDgw7jjmnkTDJh6UADM_-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.246.192.0/20
79.134.96.0/19
80.248.240.0/20
83.142.72.0/21
185.9.8.0/22
185.163.14.0/23
188.127.192.0/19
217.119.32.0/20
IPv6:
2a00:1190::/32
Signature Algorithm: sha256WithRSAEncryption
75:b7:37:9d:15:e6:91:c0:fa:42:20:85:b9:d5:d4:be:c1:8d:
e5:a4:7b:e0:85:9d:cb:da:f4:c7:35:13:d3:12:c0:0e:56:d6:
58:a2:c5:73:a0:77:1f:b2:af:c7:90:4f:bb:2e:06:2f:15:dd:
ef:9b:25:4c:13:89:da:a3:fe:67:ca:37:6d:9b:6f:77:1a:95:
56:14:5b:95:50:79:2a:81:20:51:33:45:d9:87:d5:f2:69:08:
cb:82:db:d7:4f:4e:d0:27:ae:e3:86:52:58:ad:81:63:73:47:
32:8d:32:e7:20:5e:1a:b5:e9:b6:18:a7:33:6a:52:69:2c:59:
da:e2:d6:bc:2f:09:b9:28:01:ab:9d:93:a2:79:fd:66:c3:44:
6d:40:57:36:f5:57:7d:9b:49:20:9d:1e:91:c3:39:c2:c2:df:
7c:14:c4:89:9e:e7:60:8f:83:2a:b1:46:e6:65:68:0b:6b:da:
fe:65:2c:41:f1:13:e7:ea:1c:7c:9d:0e:68:3d:e2:8a:24:36:
0a:0f:2a:39:ec:f9:b0:a5:2b:18:88:4f:2d:66:b8:d1:56:7a:
fa:dc:a3:78:ec:cb:c5:1d:47:2d:b2:51:b0:ca:c2:12:40:ae:
57:58:95:41:cc:0a:9b:2f:7d:72:52:24:f5:7e:28:d1:a0:2e:
d3:37:82:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 10:25:37 2024 by rpki-client on console-ams.rpki-client.org