Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/drGycoCjFZpiaBETqqTsTvtNmYU.roa
File: drGycoCjFZpiaBETqqTsTvtNmYU.roa (raw, json)
Hash identifier: ilnWuFckkCZOi6nFIQVcfv/JK8c2CTYUbcPx1fzLY94=
Subject key identifier: 76:B1:B2:72:80:A3:15:9A:62:68:11:13:AA:A4:EC:4E:FB:4D:99:85
Certificate issuer: /CN=6f5e0230be799e44829c8720ca38347045494e20
Certificate serial: 018CC56EF765ADA1198BA39F29AE36CB5474
Authority key identifier: 6F:5E:02:30:BE:79:9E:44:82:9C:87:20:CA:38:34:70:45:49:4E:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/drGycoCjFZpiaBETqqTsTvtNmYU.roa
Signing time: Mon 01 Jan 2024 14:30:33 +0000
ROA not before: Mon 01 Jan 2024 14:30:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39651
IP address blocks: 83.177.232.0/21 maxlen: 21
83.188.0.0/18 maxlen: 18
90.144.64.0/19 maxlen: 19
213.102.64.0/19 maxlen: 19
90.141.0.0/19 maxlen: 19
77.218.32.0/19 maxlen: 19
193.150.192.0/18 maxlen: 18
83.177.192.0/19 maxlen: 19
83.177.200.0/21 maxlen: 21
83.177.224.0/19 maxlen: 19
90.143.0.0/19 maxlen: 19
188.148.0.0/14 maxlen: 14
83.190.64.0/18 maxlen: 18
193.14.192.0/20 maxlen: 20
213.102.80.0/20 maxlen: 20
87.227.0.0/17 maxlen: 17
178.218.152.0/22 maxlen: 22
83.191.160.0/19 maxlen: 19
213.100.192.0/19 maxlen: 19
90.141.40.0/21 maxlen: 21
90.141.48.0/20 maxlen: 20
213.89.0.0/16 maxlen: 16
83.182.32.0/19 maxlen: 19
83.188.224.0/19 maxlen: 19
91.130.0.0/18 maxlen: 18
85.194.0.0/18 maxlen: 18
90.143.128.0/17 maxlen: 17
213.200.128.0/18 maxlen: 18
193.13.160.0/20 maxlen: 20
151.177.0.0/16 maxlen: 16
90.129.224.0/19 maxlen: 19
91.128.160.0/19 maxlen: 19
83.248.0.0/13 maxlen: 13
83.180.224.0/19 maxlen: 19
90.142.32.0/19 maxlen: 19
90.142.48.0/20 maxlen: 20
91.128.192.0/19 maxlen: 19
213.103.128.0/19 maxlen: 19
83.177.160.0/19 maxlen: 19
83.181.0.0/19 maxlen: 19
90.133.128.0/19 maxlen: 19
80.216.0.0/15 maxlen: 15
91.128.128.0/19 maxlen: 19
90.133.160.0/19 maxlen: 19
2a04:ae00::/26 maxlen: 26
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:f7:65:ad:a1:19:8b:a3:9f:29:ae:36:cb:54:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f5e0230be799e44829c8720ca38347045494e20
Validity
Not Before: Jan 1 14:30:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=76b1b27280a3159a62681113aaa4ec4efb4d9985
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:29:fb:65:e1:7c:1d:c5:19:2f:9d:f5:b2:a5:
ea:d1:b0:dd:bb:18:d0:1e:a7:45:ed:38:53:6b:e6:
10:15:25:63:4d:7d:d7:14:87:20:b0:9f:b3:4c:a7:
64:14:0e:f1:59:ab:dc:09:b7:46:92:41:e2:f8:86:
7a:1e:a3:08:44:8c:85:6b:d9:7c:a7:f3:f4:19:cd:
88:45:bf:bd:2b:f6:69:f7:74:f4:03:cc:46:91:79:
a0:b5:3b:95:2a:bc:45:3b:03:09:38:a5:67:3c:b5:
57:e5:85:9b:2f:e5:82:74:eb:42:53:5b:c1:4e:9b:
0d:cc:4d:93:31:fa:50:31:cc:b7:4b:bb:5a:99:11:
58:3b:e8:11:f5:96:46:9f:aa:57:84:a9:bf:d6:e3:
e3:a7:8b:f9:df:b4:63:13:91:54:9c:00:f5:e9:99:
09:aa:76:9e:dd:b7:30:cf:a7:ac:5d:c5:82:52:72:
55:69:1d:3e:0c:5b:6a:fa:75:47:20:ad:1a:58:32:
96:b0:63:a4:07:9f:a1:ab:63:a8:7a:4b:d0:6c:de:
47:a2:72:0b:5c:52:67:71:15:13:74:49:47:ce:fd:
79:68:a2:37:24:a4:df:2f:81:4b:93:d0:53:45:6c:
3c:81:25:ca:44:91:0e:0e:81:5a:be:f5:39:2a:ae:
46:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:B1:B2:72:80:A3:15:9A:62:68:11:13:AA:A4:EC:4E:FB:4D:99:85
X509v3 Authority Key Identifier:
keyid:6F:5E:02:30:BE:79:9E:44:82:9C:87:20:CA:38:34:70:45:49:4E:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/drGycoCjFZpiaBETqqTsTvtNmYU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.218.32.0/19
80.216.0.0/15
83.177.160.0-83.177.255.255
83.180.224.0-83.181.31.255
83.182.32.0/19
83.188.0.0/18
83.188.224.0/19
83.190.64.0/18
83.191.160.0/19
83.248.0.0/13
85.194.0.0/18
87.227.0.0/17
90.129.224.0/19
90.133.128.0/18
90.141.0.0/19
90.141.40.0-90.141.63.255
90.142.32.0/19
90.143.0.0/19
90.143.128.0/17
90.144.64.0/19
91.128.128.0-91.128.223.255
91.130.0.0/18
151.177.0.0/16
178.218.152.0/22
188.148.0.0/14
193.13.160.0/20
193.14.192.0/20
193.150.192.0/18
213.89.0.0/16
213.100.192.0/19
213.102.64.0/19
213.103.128.0/19
213.200.128.0/18
IPv6:
2a04:ae00::/26
Signature Algorithm: sha256WithRSAEncryption
50:df:28:01:74:34:47:ea:9c:bd:5a:1f:43:a9:b6:76:6c:e7:
a7:1d:f9:90:3c:a6:65:05:ac:9c:a5:f9:09:80:cc:00:35:56:
0c:31:1d:70:90:d1:b4:b0:8d:80:2a:7a:67:71:cc:56:57:fe:
67:e1:5e:4a:07:f7:a5:be:db:18:b5:84:ab:8d:f1:0c:3b:77:
40:fd:09:0b:3c:9c:a0:e2:bb:95:7c:de:31:e7:e3:04:12:87:
fe:aa:a7:09:51:e0:d6:65:23:71:ba:86:f2:a5:a6:09:97:7c:
ed:b6:c5:a8:cb:f5:58:1b:5a:15:c5:6a:34:c4:38:3e:40:9a:
b2:9d:e9:34:04:2a:12:54:2e:72:7d:ec:a6:a0:bd:35:75:56:
c7:35:ac:77:38:b8:7a:ad:24:bf:08:4b:43:6d:a3:28:bf:8a:
cb:91:62:ff:2c:0e:3f:af:a1:54:2b:04:06:28:7e:8e:ec:c7:
6e:57:3c:09:14:5e:35:d8:0b:26:65:aa:91:82:33:c2:4f:57:
8a:51:ef:1c:77:69:b0:0f:12:95:64:49:f5:fa:20:88:24:57:
68:6e:93:04:33:de:2d:2b:f6:03:c3:32:ef:a3:4d:a7:41:d4:
22:7b:be:58:f2:d7:80:3c:d9:8f:d0:94:31:15:1a:c5:ff:d0:
b8:d1:ec:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 13:09:52 2024 by rpki-client on console-ams.rpki-client.org