Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/e22980-d5e5-41e8-a06a-7469ef203f82/1/_GyRKzywQfdaf5g9MSOwrCG0sXU.roa
File: _GyRKzywQfdaf5g9MSOwrCG0sXU.roa (raw, json)
Hash identifier: lh9hh1n5ZmoA30NnEGxdPN2OV9qxgwAmBOPaVtNjgR8=
Subject key identifier: FC:6C:91:2B:3C:B0:41:F7:5A:7F:98:3D:31:23:B0:AC:21:B4:B1:75
Certificate issuer: /CN=c87c78b5b06a6f902c510f9b4a8f803ba32dfa84
Certificate serial: 018CC94D8BEF96ED0F953A81B315692372FF
Authority key identifier: C8:7C:78:B5:B0:6A:6F:90:2C:51:0F:9B:4A:8F:80:3B:A3:2D:FA:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yHx4tbBqb5AsUQ-bSo-AO6Mt-oQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/e22980-d5e5-41e8-a06a-7469ef203f82/1/_GyRKzywQfdaf5g9MSOwrCG0sXU.roa
Signing time: Tue 02 Jan 2024 08:32:31 +0000
ROA not before: Tue 02 Jan 2024 08:32:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203391
IP address blocks: 185.136.98.0/24 maxlen: 24
185.136.97.0/24 maxlen: 24
185.136.96.0/22 maxlen: 24
185.136.96.0/24 maxlen: 24
185.136.99.0/24 maxlen: 24
45.83.251.0/24 maxlen: 24
45.83.250.0/24 maxlen: 24
45.83.249.0/24 maxlen: 24
45.83.248.0/24 maxlen: 24
45.83.248.0/22 maxlen: 24
2a06:fb00:3::/48 maxlen: 48
2a06:fb00:2::/48 maxlen: 48
2a06:fb00:1::/48 maxlen: 48
2a06:fb00:4::/48 maxlen: 48
2a06:fb00::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/e22980-d5e5-41e8-a06a-7469ef203f82/1/yHx4tbBqb5AsUQ-bSo-AO6Mt-oQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/e22980-d5e5-41e8-a06a-7469ef203f82/1/yHx4tbBqb5AsUQ-bSo-AO6Mt-oQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/yHx4tbBqb5AsUQ-bSo-AO6Mt-oQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 05:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:8b:ef:96:ed:0f:95:3a:81:b3:15:69:23:72:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c87c78b5b06a6f902c510f9b4a8f803ba32dfa84
Validity
Not Before: Jan 2 08:32:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fc6c912b3cb041f75a7f983d3123b0ac21b4b175
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:07:1f:c2:fa:c7:20:9b:91:d7:4e:8e:34:3e:
dd:b2:c9:99:15:36:c6:80:60:f0:45:60:10:e3:64:
93:48:3a:6e:4c:cd:33:43:41:43:d5:e4:b7:58:df:
6d:9c:4f:cb:b2:c6:4f:90:89:98:a8:2e:cb:7f:8d:
af:00:69:4e:d7:77:60:0d:19:23:f2:a6:3c:dc:60:
c1:ee:cb:af:90:54:8d:81:d4:4f:48:12:54:99:37:
6e:9e:81:1f:f4:85:8e:55:78:e1:b5:68:14:28:70:
3f:8c:aa:e1:8d:95:2a:11:f2:fd:34:88:09:e0:7d:
d9:d4:41:fb:33:d1:d8:d5:72:3b:73:ee:48:fd:1e:
27:4f:3e:69:7b:76:29:13:1d:de:d8:fa:e8:4e:95:
77:ef:61:5f:9c:8f:24:28:94:09:99:6e:8d:cb:0d:
71:77:2a:f9:57:80:74:9f:7c:c7:df:a9:4b:7f:9e:
ee:2c:56:ae:22:c4:67:87:cc:a4:04:ae:06:dd:e6:
11:a1:25:d0:21:69:84:1e:7d:5f:0c:6b:56:6f:14:
e0:fd:3f:05:24:79:19:a3:b5:64:7f:ac:52:b5:5f:
62:b8:7c:d1:e6:a0:a1:cc:8e:2d:84:86:a0:3a:fe:
4a:d4:a9:74:7e:ee:09:71:93:e9:06:7f:d5:96:82:
1b:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:6C:91:2B:3C:B0:41:F7:5A:7F:98:3D:31:23:B0:AC:21:B4:B1:75
X509v3 Authority Key Identifier:
keyid:C8:7C:78:B5:B0:6A:6F:90:2C:51:0F:9B:4A:8F:80:3B:A3:2D:FA:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yHx4tbBqb5AsUQ-bSo-AO6Mt-oQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/e22980-d5e5-41e8-a06a-7469ef203f82/1/_GyRKzywQfdaf5g9MSOwrCG0sXU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/e22980-d5e5-41e8-a06a-7469ef203f82/1/yHx4tbBqb5AsUQ-bSo-AO6Mt-oQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.83.248.0/22
185.136.96.0/22
IPv6:
2a06:fb00::/29
Signature Algorithm: sha256WithRSAEncryption
9a:1d:7e:9a:b9:be:46:7c:ef:a6:bb:df:33:7d:0b:28:76:4f:
85:b0:a2:c2:77:80:de:02:ef:01:3c:98:8e:2e:7b:a2:1b:5e:
19:73:ec:e3:84:21:1c:bf:af:13:f9:14:53:4b:b5:99:75:2c:
e8:a3:5a:db:43:72:78:9d:28:af:00:5d:07:a0:ac:fb:1d:0b:
7e:ea:13:76:ee:f2:b0:d1:7f:94:e5:4c:2b:66:3a:1b:b0:cb:
20:02:c0:67:59:cb:35:0b:20:cb:42:2d:f9:89:ae:35:5e:06:
73:38:71:85:bc:65:d7:93:f5:27:1b:7d:73:e2:19:fb:81:80:
52:d5:34:3b:13:39:d6:56:77:f5:8e:49:ec:8c:e0:c8:25:d4:
15:67:fe:3d:0c:6a:52:0a:da:2f:ed:86:dd:38:b9:68:e2:8a:
14:ad:0c:dc:6b:46:90:74:91:9a:05:c5:46:4f:b1:be:5f:c4:
c6:a4:46:e1:be:df:9a:3d:eb:9b:4b:db:84:f5:e6:0e:c7:da:
f4:05:26:77:05:97:d0:73:fd:3c:25:1a:0b:60:f0:a6:24:91:
42:23:89:f1:c2:89:ff:32:ff:6c:8f:ae:c5:03:9a:08:56:6e:
9d:38:2a:e3:4b:02:b9:32:bb:4a:d2:69:4f:0d:7c:d6:df:ea:
c0:d6:3c:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:42:48 2024 by rpki-client on console-ams.rpki-client.org