Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/c38360-743a-428f-ab97-6369b17ff178/1/hSgYiaZfixtGZunemF60MrFulhE.roa
File: hSgYiaZfixtGZunemF60MrFulhE.roa (raw, json)
Hash identifier: nPab10XVMgcuJv1GCw/n4Pc4QQN7zjq4uPj5XTRhjH0=
Subject key identifier: 85:28:18:89:A6:5F:8B:1B:46:66:E9:DE:98:5E:B4:32:B1:6E:96:11
Certificate issuer: /CN=cd2d25f7691360878cbace985890b9f5efcf7d95
Certificate serial: 018F757BE84E26AEA2BBDF2298860B946E2E
Authority key identifier: CD:2D:25:F7:69:13:60:87:8C:BA:CE:98:58:90:B9:F5:EF:CF:7D:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zS0l92kTYIeMus6YWJC59e_PfZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/c38360-743a-428f-ab97-6369b17ff178/1/hSgYiaZfixtGZunemF60MrFulhE.roa
Signing time: Tue 14 May 2024 05:03:25 +0000
ROA not before: Tue 14 May 2024 05:03:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9063
IP address blocks: 185.5.28.0/22 maxlen: 22
185.209.92.0/22 maxlen: 22
195.66.0.0/21 maxlen: 21
213.185.65.0/24 maxlen: 24
213.185.66.0/23 maxlen: 23
213.185.68.0/22 maxlen: 22
213.185.72.0/22 maxlen: 22
213.185.76.0/23 maxlen: 23
2a02:7940::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/c38360-743a-428f-ab97-6369b17ff178/1/zS0l92kTYIeMus6YWJC59e_PfZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/c38360-743a-428f-ab97-6369b17ff178/1/zS0l92kTYIeMus6YWJC59e_PfZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/zS0l92kTYIeMus6YWJC59e_PfZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:75:7b:e8:4e:26:ae:a2:bb:df:22:98:86:0b:94:6e:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd2d25f7691360878cbace985890b9f5efcf7d95
Validity
Not Before: May 14 05:03:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=85281889a65f8b1b4666e9de985eb432b16e9611
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d0:cb:86:a5:c5:05:3c:bb:c2:cd:87:39:f3:
3e:fa:8b:7d:80:e7:69:98:6c:66:36:8c:d1:9e:ce:
6c:c9:d4:1d:9d:46:33:b0:5b:7e:3c:95:ef:ba:1d:
9d:1f:eb:84:24:f8:b0:af:23:4d:4d:08:43:fa:87:
30:19:2e:12:cb:6b:72:10:42:8c:73:d3:e0:cc:b5:
17:2a:5d:4f:be:9f:c6:16:23:92:bc:3c:a9:09:d6:
d6:70:ec:82:23:1d:92:6f:97:fa:cc:29:5a:26:bd:
ff:06:d0:f2:69:71:95:b1:ce:66:a4:93:bb:df:d0:
b3:c6:f5:fe:53:46:42:56:58:3e:ea:77:80:ac:a6:
7e:91:9f:e5:87:8d:d7:85:5e:84:cc:6d:67:6c:f3:
15:97:aa:30:88:9d:8a:3a:fa:71:02:d5:76:22:b9:
d9:54:1b:7f:c3:a4:e0:e5:fe:92:36:77:99:81:3b:
2f:e9:6c:87:73:04:60:33:fd:0d:b8:3d:bc:8f:e1:
eb:86:78:d3:3a:d9:b9:b0:d3:da:02:7d:9c:9a:8a:
dc:43:55:a6:c9:93:81:62:e2:f6:08:80:77:ec:62:
0a:91:07:e3:2a:b5:7c:68:9b:0b:73:e6:ff:df:fc:
ea:1a:68:96:18:db:86:f0:55:00:82:bb:f3:55:b9:
72:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:28:18:89:A6:5F:8B:1B:46:66:E9:DE:98:5E:B4:32:B1:6E:96:11
X509v3 Authority Key Identifier:
keyid:CD:2D:25:F7:69:13:60:87:8C:BA:CE:98:58:90:B9:F5:EF:CF:7D:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zS0l92kTYIeMus6YWJC59e_PfZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/c38360-743a-428f-ab97-6369b17ff178/1/hSgYiaZfixtGZunemF60MrFulhE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/c38360-743a-428f-ab97-6369b17ff178/1/zS0l92kTYIeMus6YWJC59e_PfZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.5.28.0/22
185.209.92.0/22
195.66.0.0/21
213.185.65.0-213.185.77.255
IPv6:
2a02:7940::/32
Signature Algorithm: sha256WithRSAEncryption
17:5d:2f:7b:9e:b3:61:28:71:36:10:19:3b:a9:93:fa:07:96:
ab:ce:57:4f:0f:8b:15:ca:83:ff:05:40:41:b3:f3:71:eb:cc:
20:8f:8b:08:a4:e0:c3:05:60:c9:fe:21:3f:9b:8d:14:e6:42:
09:a8:24:52:78:a2:65:48:f0:e5:b5:0e:53:68:44:f5:64:82:
dd:a1:fc:36:87:b9:40:ba:8a:3b:56:4c:e1:ac:49:83:9a:fc:
d1:b2:8d:db:f1:c7:39:55:47:97:ea:02:40:b1:54:de:fb:70:
b4:7d:4b:de:b3:2e:fc:bf:f5:04:1e:00:61:8e:7e:3b:3d:4c:
ff:95:41:9d:16:a9:2c:d6:dd:80:c1:c2:93:ac:a5:75:84:ca:
9a:7f:ae:af:19:57:48:35:64:05:ce:32:dd:43:e6:b8:e8:b3:
b9:10:44:e9:4d:e7:a5:d0:2c:00:c0:df:6f:a6:a3:4d:b1:d1:
83:61:b5:60:dd:99:04:b2:61:e2:83:07:1f:98:2c:e9:b5:68:
06:06:87:98:76:b3:21:87:93:75:de:32:f9:df:d2:42:f2:d4:
70:b6:18:35:dc:3e:2e:68:19:eb:64:5d:e4:56:50:63:d8:d4:
03:43:63:0f:3f:39:0a:13:4c:fa:37:76:74:62:8c:7e:2f:d4:
4f:32:1d:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 18:14:39 2024 by rpki-client on console-fra.rpki-client.org