Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/dcfa2a-76f7-4443-a495-6bb30a8730ed/1/_Mn4U7Wn6sS8CKOMDurkaBPUhOg.roa
File: _Mn4U7Wn6sS8CKOMDurkaBPUhOg.roa (raw, json)
Hash identifier: pnrZp/3win1GEugEIE2pI0xFb1lkkaQ5DcLCeq8On1g=
Subject key identifier: FC:C9:F8:53:B5:A7:EA:C4:BC:08:A3:8C:0E:EA:E4:68:13:D4:84:E8
Certificate issuer: /CN=3556e7fb5772f979edd5e5c5aa63eb2b9c0ddc8e
Certificate serial: 018CC802F22CC73198D4D8E426BDBC9B944C
Authority key identifier: 35:56:E7:FB:57:72:F9:79:ED:D5:E5:C5:AA:63:EB:2B:9C:0D:DC:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NVbn-1dy-Xnt1eXFqmPrK5wN3I4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/dcfa2a-76f7-4443-a495-6bb30a8730ed/1/_Mn4U7Wn6sS8CKOMDurkaBPUhOg.roa
Signing time: Tue 02 Jan 2024 02:31:25 +0000
ROA not before: Tue 02 Jan 2024 02:31:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61135
IP address blocks: 46.31.76.0/24 maxlen: 24
185.73.203.0/24 maxlen: 24
185.73.201.0/24 maxlen: 24
185.73.200.0/24 maxlen: 24
185.73.202.0/24 maxlen: 32
185.17.112.0/24 maxlen: 24
185.17.113.0/24 maxlen: 32
185.17.115.0/24 maxlen: 24
185.17.114.0/24 maxlen: 24
2a05:4640::/29 maxlen: 48
2a04:7c0:1::/48 maxlen: 48
2a04:7c0::/29 maxlen: 48
2a04:7c0::/33 maxlen: 48
2a04:7c0:2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/dcfa2a-76f7-4443-a495-6bb30a8730ed/1/NVbn-1dy-Xnt1eXFqmPrK5wN3I4.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/dcfa2a-76f7-4443-a495-6bb30a8730ed/1/NVbn-1dy-Xnt1eXFqmPrK5wN3I4.mft
rsync://rpki.ripe.net/repository/DEFAULT/NVbn-1dy-Xnt1eXFqmPrK5wN3I4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:02:f2:2c:c7:31:98:d4:d8:e4:26:bd:bc:9b:94:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3556e7fb5772f979edd5e5c5aa63eb2b9c0ddc8e
Validity
Not Before: Jan 2 02:31:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fcc9f853b5a7eac4bc08a38c0eeae46813d484e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:58:12:a6:32:d1:6b:e0:08:ea:5a:0f:6c:d8:
6e:f1:e5:2a:d5:b7:d8:fe:fb:03:c6:b5:79:bc:83:
97:97:cb:86:db:20:af:57:5d:dc:e5:f6:c4:85:82:
ea:0d:95:8c:19:12:a8:d4:67:1a:b6:da:ac:a0:56:
ff:fb:1d:06:ab:d2:a8:e3:09:fd:48:99:2a:86:c5:
db:78:bd:4a:18:6d:38:0f:fa:80:d1:70:03:aa:c5:
9a:9e:b2:2a:5a:da:35:4e:96:be:7d:7a:e7:53:54:
43:3a:9c:a2:19:72:ba:4b:06:88:b3:0a:3d:21:ae:
d1:51:f1:80:64:2a:f7:db:fc:bc:64:0a:74:34:b2:
95:eb:66:4a:0b:ce:9d:9a:cf:34:be:31:3f:a1:1d:
2c:a5:6c:e6:3f:8e:34:7e:d7:da:43:7d:64:8f:8a:
84:ee:94:59:dd:05:38:0d:40:90:07:6d:27:85:bb:
fb:fc:c8:c6:35:f5:3d:ae:6a:6d:44:1f:ff:03:85:
ca:9f:5c:0f:34:9e:03:7f:24:43:bd:de:e0:8e:fd:
90:d8:22:60:9e:30:42:21:3b:17:59:03:70:df:79:
33:19:77:d0:c1:ee:f3:5c:2b:6c:a1:c8:ed:24:79:
45:0d:05:fa:a5:a1:aa:c4:b3:eb:43:f4:35:86:d9:
2c:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:C9:F8:53:B5:A7:EA:C4:BC:08:A3:8C:0E:EA:E4:68:13:D4:84:E8
X509v3 Authority Key Identifier:
keyid:35:56:E7:FB:57:72:F9:79:ED:D5:E5:C5:AA:63:EB:2B:9C:0D:DC:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NVbn-1dy-Xnt1eXFqmPrK5wN3I4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/dcfa2a-76f7-4443-a495-6bb30a8730ed/1/_Mn4U7Wn6sS8CKOMDurkaBPUhOg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/dcfa2a-76f7-4443-a495-6bb30a8730ed/1/NVbn-1dy-Xnt1eXFqmPrK5wN3I4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.31.76.0/24
185.17.112.0/22
185.73.200.0/22
IPv6:
2a04:7c0::/29
2a05:4640::/29
Signature Algorithm: sha256WithRSAEncryption
93:b7:a5:a4:a5:ec:33:8c:00:b8:51:29:25:d7:2c:dc:56:44:
dd:bc:c2:de:78:6d:04:e4:de:b6:ef:41:a9:e0:c9:98:56:ac:
7d:f0:4f:9a:4b:a7:b6:f2:f0:fe:f0:29:12:48:1e:65:55:c2:
b8:f6:d8:65:96:12:ae:84:be:70:34:61:13:bd:9b:a8:fa:cc:
a9:2b:ee:51:3d:44:b8:53:b5:bf:17:07:cd:7d:bc:64:a4:d9:
8d:cb:6b:21:08:1d:80:04:df:b5:e5:0b:4a:3c:38:3e:bf:07:
3d:66:da:69:7f:d5:7d:1e:fc:4f:12:03:2c:82:33:f7:a5:13:
35:bd:cf:59:b2:a0:83:69:b0:10:53:a6:17:37:c6:7e:66:d5:
f3:2b:df:bd:80:7b:1f:bb:f3:18:68:06:40:f0:48:4b:79:e8:
4e:28:a6:67:b2:17:60:e6:a6:3f:c5:20:af:b7:9f:92:f7:96:
d7:5d:5e:42:f0:ed:cc:3c:85:5d:8a:61:43:90:4a:5e:5d:10:
b0:fa:9d:26:31:5c:d9:30:1c:45:d0:a6:c4:bd:13:b9:19:39:
95:4b:ba:cc:ad:2f:82:63:24:a0:97:12:79:57:9b:5c:5b:f6:
81:04:8c:1a:17:1e:65:5b:7b:2f:70:f3:36:88:84:86:13:b2:
7d:1d:a9:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:56:33 2024 by rpki-client on console-fra.rpki-client.org