Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/mk59EP9zT9dxxtYMHzTyKHBdZyI.roa
File: mk59EP9zT9dxxtYMHzTyKHBdZyI.roa (raw, json)
Hash identifier: V2C2W3Roepg1aFzuwjAk0/cD+WMBNVALjVWo/40Ny0Q=
Subject key identifier: 9A:4E:7D:10:FF:73:4F:D7:71:C6:D6:0C:1F:34:F2:28:70:5D:67:22
Certificate issuer: /CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Certificate serial: 019275CDC495B40CA003D7E0CD5D511CB88B
Authority key identifier: 6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/mk59EP9zT9dxxtYMHzTyKHBdZyI.roa
Signing time: Thu 10 Oct 2024 09:41:12 +0000
ROA not before: Thu 10 Oct 2024 09:41:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 37.26.112.0/20 maxlen: 20
81.200.64.0/20 maxlen: 20
93.191.168.0/21 maxlen: 21
93.191.173.0/24 maxlen: 24
94.127.72.0/21 maxlen: 21
95.100.147.0/24 maxlen: 24
194.35.38.0/23 maxlen: 23
2a02:2370:fe::/47 maxlen: 48
2a0b:35c0::/29 maxlen: 31
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.mft
rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Oct 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:75:cd:c4:95:b4:0c:a0:03:d7:e0:cd:5d:51:1c:b8:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Validity
Not Before: Oct 10 09:41:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9a4e7d10ff734fd771c6d60c1f34f228705d6722
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:de:5f:f6:11:9e:38:e3:0b:25:68:6d:f4:51:
76:67:69:a3:99:04:18:ef:58:cb:4b:42:2c:44:03:
22:02:ed:61:5a:8b:27:a0:5c:aa:22:0e:c1:66:ed:
57:a8:5e:a8:b2:a2:33:a9:47:97:9a:b7:16:47:13:
a1:28:80:73:f2:95:e6:5c:a8:59:e2:c5:f6:31:68:
22:99:16:1e:a2:5d:36:1c:14:05:71:09:21:f1:ce:
4d:1f:ac:c1:7b:94:55:61:63:b6:2d:6a:7b:85:75:
f0:f5:c9:ba:c9:1b:fb:c7:95:8e:db:19:d4:0e:5a:
80:28:9f:a5:ef:dc:f2:fd:f1:10:67:79:5b:ac:f2:
4e:45:18:40:49:71:8f:2b:53:36:85:69:c3:a6:66:
4f:bf:bc:86:2a:ed:9a:f6:7f:00:13:d7:bc:8c:d9:
14:87:b8:41:ca:ae:e9:a6:07:a3:d6:bb:37:24:6e:
54:da:7e:a0:26:ba:6e:f7:2c:7b:10:d0:c5:5a:e4:
1d:78:d7:c6:63:43:7d:37:ce:aa:7b:aa:bb:9f:41:
03:b8:23:41:bb:a4:60:21:8f:16:06:72:7c:4f:5f:
ba:11:23:7c:a4:6b:b2:88:52:f4:d8:1d:b6:26:0e:
52:a4:b8:73:59:ac:e2:c2:af:d2:1f:01:64:5e:62:
8d:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:4E:7D:10:FF:73:4F:D7:71:C6:D6:0C:1F:34:F2:28:70:5D:67:22
X509v3 Authority Key Identifier:
keyid:6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/mk59EP9zT9dxxtYMHzTyKHBdZyI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.26.112.0/20
81.200.64.0/20
93.191.168.0/21
94.127.72.0/21
95.100.147.0/24
194.35.38.0/23
IPv6:
2a02:2370:fe::/47
2a0b:35c0::/29
Signature Algorithm: sha256WithRSAEncryption
48:6a:c6:60:c4:a8:a4:86:be:7d:f6:ae:71:38:21:2c:9a:5b:
55:b9:2a:e6:9b:b7:80:0a:0d:5b:2b:ae:a4:89:ee:78:e2:3a:
d3:8a:f0:62:d5:64:cb:89:18:90:fa:3b:0c:2c:81:c3:a8:54:
18:12:da:61:ab:8f:68:44:28:ce:f7:a3:ee:1c:a6:c7:1a:58:
39:1b:74:da:a2:71:12:8e:72:2d:24:5d:59:22:06:d8:cc:c5:
8b:6c:84:e9:67:72:70:bd:c8:1b:62:0f:74:0e:c9:76:77:77:
09:cc:e7:10:a4:1d:45:c9:d7:e7:2b:5c:a7:49:40:01:ee:f7:
ca:0d:30:56:34:53:52:d5:76:b2:c8:20:6b:2a:38:eb:47:0d:
39:4d:ff:b7:5c:13:02:33:b0:cd:f7:9b:4e:3e:db:df:43:b8:
9a:c4:82:a9:62:72:31:30:86:2f:b0:2d:3e:0b:a7:e6:b3:0b:
8b:e0:52:9e:1e:5f:af:9a:51:46:b5:a8:10:c3:4c:e9:41:3d:
bf:74:93:bc:64:06:1d:96:69:f8:b1:d6:86:5a:dc:75:23:eb:
49:89:f7:77:b9:23:d1:d8:e1:80:bb:71:4e:7b:a8:77:47:cc:
28:62:92:93:6a:1c:a9:d6:ea:c6:33:be:8b:9c:b8:4f:b0:ea:
5b:a4:04:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 21:36:57 2024 by rpki-client on console-fra.rpki-client.org