Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/79733f-5332-451b-86af-142a2b98f4c8/1/12y-MmmWpSv2GWOd1v0iZICHr8M.roa
File: 12y-MmmWpSv2GWOd1v0iZICHr8M.roa (raw, json)
Hash identifier: jiSyFOz7ms7zzGyI/Qx3rRa2Xt4fe0Hui2tHD/jCAWk=
Subject key identifier: D7:6C:BE:32:69:96:A5:2B:F6:19:63:9D:D6:FD:22:64:80:87:AF:C3
Certificate issuer: /CN=1c020297839c7390df20251a5c0930e6a672bee3
Certificate serial: 018DC32BFE1E470E520BEA5E902F3D13C7B3
Authority key identifier: 1C:02:02:97:83:9C:73:90:DF:20:25:1A:5C:09:30:E6:A6:72:BE:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HAICl4Occ5DfICUaXAkw5qZyvuM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/79733f-5332-451b-86af-142a2b98f4c8/1/12y-MmmWpSv2GWOd1v0iZICHr8M.roa
Signing time: Mon 19 Feb 2024 21:00:56 +0000
ROA not before: Mon 19 Feb 2024 21:00:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50558
IP address blocks: 37.32.112.0/20 maxlen: 20
37.32.112.0/21 maxlen: 21
37.32.120.0/21 maxlen: 24
37.32.120.0/24 maxlen: 24
37.32.124.0/24 maxlen: 24
37.32.126.0/24 maxlen: 24
185.49.96.0/22 maxlen: 24
2a01:9180::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/79733f-5332-451b-86af-142a2b98f4c8/1/HAICl4Occ5DfICUaXAkw5qZyvuM.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/79733f-5332-451b-86af-142a2b98f4c8/1/HAICl4Occ5DfICUaXAkw5qZyvuM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HAICl4Occ5DfICUaXAkw5qZyvuM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 04:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:c3:2b:fe:1e:47:0e:52:0b:ea:5e:90:2f:3d:13:c7:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c020297839c7390df20251a5c0930e6a672bee3
Validity
Not Before: Feb 19 21:00:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d76cbe326996a52bf619639dd6fd22648087afc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e1:0f:5b:02:21:af:70:0e:9b:6f:4b:15:3f:
92:de:fe:d0:2c:b3:03:61:b8:cb:1e:2e:26:68:3f:
93:a5:5d:c3:10:bc:02:a1:b1:1d:4e:16:f6:e2:cc:
a2:70:89:63:7e:d2:aa:c8:84:48:db:e1:02:ee:39:
d1:1e:6a:f5:3c:12:7f:7e:ad:4e:77:fe:20:ff:92:
46:2d:c8:50:8f:7f:0e:9f:1b:4f:c0:b2:ce:b0:7f:
b1:94:8a:6e:68:49:d9:ec:04:4d:41:63:1d:14:dc:
70:ca:28:e3:3c:fa:ce:ac:7f:79:50:f9:14:b7:d0:
c8:ae:5a:f3:62:dd:65:de:46:39:46:3f:13:9e:c0:
9e:39:ef:42:00:38:49:c0:6c:e0:cf:ca:b3:ad:6e:
0a:6e:01:27:e5:32:de:26:80:7c:bb:0f:42:1e:bf:
82:c5:53:d5:c6:b7:4a:a5:14:c1:df:23:04:9a:36:
4a:a5:b0:c9:ea:b3:82:32:fd:72:55:05:12:66:e2:
23:20:ee:d3:99:87:10:39:ea:c5:65:54:91:fd:6e:
33:17:85:8f:63:fc:f8:4e:e3:c4:59:5f:d9:83:10:
e9:2d:40:7d:e1:fb:3a:54:20:bc:91:94:45:48:94:
29:25:20:54:a3:c8:50:65:fa:ee:c0:a6:5f:1c:a4:
da:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:6C:BE:32:69:96:A5:2B:F6:19:63:9D:D6:FD:22:64:80:87:AF:C3
X509v3 Authority Key Identifier:
keyid:1C:02:02:97:83:9C:73:90:DF:20:25:1A:5C:09:30:E6:A6:72:BE:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HAICl4Occ5DfICUaXAkw5qZyvuM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/79733f-5332-451b-86af-142a2b98f4c8/1/12y-MmmWpSv2GWOd1v0iZICHr8M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/79733f-5332-451b-86af-142a2b98f4c8/1/HAICl4Occ5DfICUaXAkw5qZyvuM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.32.112.0/20
185.49.96.0/22
IPv6:
2a01:9180::/32
Signature Algorithm: sha256WithRSAEncryption
17:00:8a:46:8f:5f:d6:9c:49:c4:34:79:47:26:a0:26:fc:af:
44:1e:59:88:d8:fc:42:02:c5:d6:05:d2:60:cd:41:87:00:3a:
a2:ff:dd:88:65:d7:ca:8d:63:67:7a:cb:83:ce:39:b9:52:50:
e6:c6:17:61:d4:3b:6e:55:09:13:23:89:67:94:1b:78:48:b4:
98:1b:c5:05:7e:00:90:49:67:2e:20:74:a3:48:d0:a3:d7:1b:
e0:c9:d6:39:c4:f4:76:00:ab:10:11:5f:30:d9:cc:89:21:90:
93:e1:03:5f:ee:f9:4e:c1:34:97:e5:cb:26:b2:a9:d9:13:72:
e3:f0:f4:28:f0:ba:d2:68:04:5e:7a:e2:9b:d1:24:d3:7e:e4:
b1:65:be:29:6d:fa:02:7b:4a:da:f9:e5:45:1c:fb:0b:f0:fc:
59:e7:d1:3d:62:e9:8e:55:d5:29:84:77:9b:e9:ff:5f:65:e1:
29:1b:57:be:2a:59:d0:a9:21:8e:2e:34:59:76:ca:2b:05:94:
93:58:87:d7:d2:88:44:23:10:75:f6:13:7b:be:3e:82:ef:76:
2e:f1:98:3c:1f:5c:23:be:b2:3f:29:92:b2:38:8c:09:25:a2:
01:f0:d4:9f:84:a9:34:ef:68:38:db:d2:b1:ff:90:e6:dc:51:
79:e3:57:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 06:10:12 2024 by rpki-client on console-fra.rpki-client.org