Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/8e7d77-89c8-452c-a9bf-bc5f897c724a/1/NndVN6CULy5KSVA1Xn-4ry5Vk78.roa
File: NndVN6CULy5KSVA1Xn-4ry5Vk78.roa (raw, json)
Hash identifier: 8jBAwbfbfM8dbxd58h0oG2WPP9YyTaFwIXxbFNW7Ens=
Subject key identifier: 36:77:55:37:A0:94:2F:2E:4A:49:50:35:5E:7F:B8:AF:2E:55:93:BF
Certificate issuer: /CN=d2d38f4597051b6c0ddf1bb866ae4e94703e155e
Certificate serial: 018CC5DC8FAC204C6BC27240840BB0A4E190
Authority key identifier: D2:D3:8F:45:97:05:1B:6C:0D:DF:1B:B8:66:AE:4E:94:70:3E:15:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0tOPRZcFG2wN3xu4Zq5OlHA-FV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/8e7d77-89c8-452c-a9bf-bc5f897c724a/1/NndVN6CULy5KSVA1Xn-4ry5Vk78.roa
Signing time: Mon 01 Jan 2024 16:30:15 +0000
ROA not before: Mon 01 Jan 2024 16:30:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49724
IP address blocks: 91.215.220.0/24 maxlen: 24
91.215.220.0/22 maxlen: 22
91.215.222.0/23 maxlen: 23
91.215.221.0/24 maxlen: 24
188.0.160.0/20 maxlen: 20
188.0.162.0/24 maxlen: 24
188.0.160.0/19 maxlen: 19
188.0.169.0/24 maxlen: 24
188.0.166.0/23 maxlen: 23
188.0.175.0/24 maxlen: 24
188.0.176.0/21 maxlen: 21
188.0.178.0/24 maxlen: 24
188.0.183.0/24 maxlen: 24
188.0.180.0/24 maxlen: 24
188.0.186.0/24 maxlen: 24
188.0.184.0/22 maxlen: 22
188.0.189.0/24 maxlen: 24
188.0.190.0/23 maxlen: 23
188.0.188.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/8e7d77-89c8-452c-a9bf-bc5f897c724a/1/0tOPRZcFG2wN3xu4Zq5OlHA-FV4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/8e7d77-89c8-452c-a9bf-bc5f897c724a/1/0tOPRZcFG2wN3xu4Zq5OlHA-FV4.mft
rsync://rpki.ripe.net/repository/DEFAULT/0tOPRZcFG2wN3xu4Zq5OlHA-FV4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 04:53:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:8f:ac:20:4c:6b:c2:72:40:84:0b:b0:a4:e1:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2d38f4597051b6c0ddf1bb866ae4e94703e155e
Validity
Not Before: Jan 1 16:30:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=36775537a0942f2e4a4950355e7fb8af2e5593bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:dd:65:78:62:21:fd:b5:4d:e2:36:6d:39:aa:
be:48:27:6a:4b:7b:7d:83:3c:0f:a0:31:ce:e2:8c:
41:23:a1:b6:44:20:47:8f:5e:73:b7:98:5a:c8:b0:
a4:32:d1:6a:df:ea:68:d2:a4:27:49:54:eb:41:14:
db:92:02:82:04:5b:3b:90:0e:74:8b:e2:27:23:47:
84:67:f7:ae:d9:64:e7:7e:19:29:17:c3:4a:35:89:
64:c6:03:49:70:d3:85:3a:1b:c2:e2:05:da:ca:d3:
7a:a5:67:86:24:5b:a3:0c:80:6a:b8:cd:e9:93:86:
bb:c8:9c:8c:30:a9:e5:28:57:92:7f:a7:6e:12:be:
f1:fe:c5:59:50:57:bb:38:75:17:6a:f7:74:b9:67:
4d:95:c6:ba:ed:6b:ec:a0:2c:3f:04:8f:d0:c7:5d:
72:84:a4:e6:37:71:be:b8:ad:7e:d8:5b:d5:56:b0:
1f:d1:ec:bf:73:36:ba:b5:26:c0:9d:e5:a0:85:c0:
23:66:b4:80:26:f3:26:58:d6:bd:58:83:61:d7:3b:
c3:61:3c:5f:c0:d5:c2:4f:fb:a5:43:f2:20:f3:50:
c5:d3:e0:82:58:46:be:89:7f:14:a3:12:31:af:b6:
11:fb:5d:f1:73:ec:a6:34:31:bc:ab:33:22:d6:a3:
cd:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:77:55:37:A0:94:2F:2E:4A:49:50:35:5E:7F:B8:AF:2E:55:93:BF
X509v3 Authority Key Identifier:
keyid:D2:D3:8F:45:97:05:1B:6C:0D:DF:1B:B8:66:AE:4E:94:70:3E:15:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0tOPRZcFG2wN3xu4Zq5OlHA-FV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/8e7d77-89c8-452c-a9bf-bc5f897c724a/1/NndVN6CULy5KSVA1Xn-4ry5Vk78.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/8e7d77-89c8-452c-a9bf-bc5f897c724a/1/0tOPRZcFG2wN3xu4Zq5OlHA-FV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.215.220.0/22
188.0.160.0/19
Signature Algorithm: sha256WithRSAEncryption
72:d2:3f:16:28:09:61:f4:28:ec:b5:1f:05:67:4b:d5:a1:5f:
d7:21:a5:42:42:4d:5f:44:96:d5:75:9d:ee:8d:fd:2a:b8:c1:
78:19:69:42:72:08:26:2a:02:6d:5a:42:00:e4:39:05:6e:19:
2f:71:b8:bb:89:d1:b6:2a:3d:c3:6c:38:de:6e:06:7c:0a:0b:
bc:09:b7:bc:e9:75:7f:0f:af:e9:97:8d:99:9b:6c:b2:6e:2e:
6a:76:d1:50:06:52:28:46:ef:7a:5b:3a:66:77:57:17:49:2f:
58:e7:70:45:0e:3c:b1:0c:30:51:9f:f6:b6:7e:54:a7:c5:23:
8a:17:be:4b:42:86:86:67:f7:e8:3a:f9:77:a9:1e:d8:0a:7b:
66:24:8c:34:c9:b9:83:77:ca:ed:7c:2b:48:51:dc:b1:fe:b7:
dc:6e:2e:d0:61:47:1a:df:e0:bb:47:a5:f2:5d:c0:8c:6e:52:
e4:26:2c:ff:d5:8d:b8:bd:c6:98:91:5e:90:99:7f:07:37:25:
b0:cf:7e:0f:b0:ed:99:70:88:fb:09:20:70:26:4c:a4:81:85:
7b:a7:d0:ea:75:58:74:58:53:b1:8a:27:4b:61:d1:0c:92:f6:
c7:a4:69:1c:e2:bb:ff:ab:3d:a0:da:26:af:c6:de:14:bf:5c:
83:cc:ab:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 11:39:04 2024 by rpki-client on console-ams.rpki-client.org