Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/f6ee9d-756f-437e-bc03-e703e94b7beb/1/A11eFdTBXoHww2NsPumQL1L2Gwo.roa
File: A11eFdTBXoHww2NsPumQL1L2Gwo.roa (raw, json)
Hash identifier: nNdS1k9DV40MQjQtZfie8ckl7G861r8eJoOBshK2b3w=
Subject key identifier: 03:5D:5E:15:D4:C1:5E:81:F0:C3:63:6C:3E:E9:90:2F:52:F6:1B:0A
Certificate issuer: /CN=74b33fb20dd557cd0b14edfe10880f0e0d21c529
Certificate serial: 018CC8DEFE023653D1F81DC32E5DE3CB640F
Authority key identifier: 74:B3:3F:B2:0D:D5:57:CD:0B:14:ED:FE:10:88:0F:0E:0D:21:C5:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dLM_sg3VV80LFO3-EIgPDg0hxSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/f6ee9d-756f-437e-bc03-e703e94b7beb/1/A11eFdTBXoHww2NsPumQL1L2Gwo.roa
Signing time: Tue 02 Jan 2024 06:31:46 +0000
ROA not before: Tue 02 Jan 2024 06:31:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60232
IP address blocks: 185.28.0.0/22 maxlen: 24
185.28.0.0/24 maxlen: 24
185.28.1.0/24 maxlen: 24
185.28.3.0/24 maxlen: 24
185.28.2.0/24 maxlen: 24
37.75.9.0/24 maxlen: 24
37.75.8.0/21 maxlen: 21
37.75.8.0/24 maxlen: 24
37.75.11.0/24 maxlen: 24
37.75.10.0/24 maxlen: 24
195.142.104.0/24 maxlen: 24
37.75.12.0/24 maxlen: 24
37.75.14.0/24 maxlen: 24
37.75.13.0/24 maxlen: 24
37.75.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/f6ee9d-756f-437e-bc03-e703e94b7beb/1/dLM_sg3VV80LFO3-EIgPDg0hxSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/f6ee9d-756f-437e-bc03-e703e94b7beb/1/dLM_sg3VV80LFO3-EIgPDg0hxSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/dLM_sg3VV80LFO3-EIgPDg0hxSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 18:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:fe:02:36:53:d1:f8:1d:c3:2e:5d:e3:cb:64:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74b33fb20dd557cd0b14edfe10880f0e0d21c529
Validity
Not Before: Jan 2 06:31:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=035d5e15d4c15e81f0c3636c3ee9902f52f61b0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:72:e4:28:82:72:09:94:26:69:b0:db:e7:b1:
12:73:e9:dc:6a:a6:92:ee:af:62:c9:cc:6a:dd:17:
18:9f:8f:71:68:c7:18:41:b2:1a:ee:9e:52:74:ac:
55:8b:2a:2f:88:9a:89:02:d4:10:e7:4e:c1:f9:74:
3e:ee:a2:7e:d6:2d:08:a1:e3:fe:fa:6a:d8:28:89:
4e:b6:73:db:72:02:69:ef:c9:2d:2d:5f:7a:4c:e5:
75:14:94:dc:a1:61:2f:8f:34:54:2d:3c:89:83:3c:
5d:fd:e2:e8:43:8e:a2:78:65:f2:e8:ac:85:4b:42:
44:57:f1:90:ae:a0:e7:32:a9:bd:8d:19:9a:33:c0:
a8:7a:19:24:95:82:91:0c:56:11:dd:d9:39:c2:dc:
ab:16:0d:2a:0e:b8:2f:9f:82:1e:eb:79:00:f8:e7:
e2:d0:5c:68:f3:a4:86:90:8e:36:42:b0:3e:45:ba:
c9:d1:b8:62:a8:97:05:70:35:af:8b:7f:fc:7a:db:
b1:96:9b:f6:ec:8f:5b:ee:b7:dc:00:c4:da:61:ee:
29:21:ec:63:34:bd:2c:9b:13:e3:38:94:e4:06:97:
49:70:d9:00:e2:3b:14:2b:c5:7a:fe:88:0b:a8:2d:
36:e6:e3:a1:ff:1d:2d:e2:a7:80:4e:35:c7:cb:67:
48:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:5D:5E:15:D4:C1:5E:81:F0:C3:63:6C:3E:E9:90:2F:52:F6:1B:0A
X509v3 Authority Key Identifier:
keyid:74:B3:3F:B2:0D:D5:57:CD:0B:14:ED:FE:10:88:0F:0E:0D:21:C5:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dLM_sg3VV80LFO3-EIgPDg0hxSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/f6ee9d-756f-437e-bc03-e703e94b7beb/1/A11eFdTBXoHww2NsPumQL1L2Gwo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/f6ee9d-756f-437e-bc03-e703e94b7beb/1/dLM_sg3VV80LFO3-EIgPDg0hxSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.75.8.0/21
185.28.0.0/22
195.142.104.0/24
Signature Algorithm: sha256WithRSAEncryption
84:d0:de:90:ba:f6:c4:65:21:be:17:fe:88:93:5d:f5:69:08:
53:4e:bf:47:f1:33:8f:85:83:2e:5b:28:eb:f5:35:b9:14:f7:
98:73:42:fc:07:4a:61:df:d8:cb:94:ac:5e:e0:11:d6:1c:08:
a6:04:c1:bc:a8:8f:cc:65:13:ce:88:32:08:d3:11:3e:77:5c:
0f:e1:bd:d2:3e:f4:9d:4f:09:ec:b5:b3:de:b0:af:54:56:fb:
02:e1:1f:a1:f7:06:3b:26:19:6c:74:60:46:53:9f:81:43:38:
33:ed:66:78:aa:2f:1a:e2:34:04:34:71:e7:bf:45:f0:19:c8:
ea:dc:c7:a4:e5:d4:85:8b:90:51:bf:96:b6:21:64:29:74:07:
a0:b3:90:98:19:57:8f:6e:e1:fe:0f:2c:96:31:6a:f5:18:f5:
81:06:e7:97:7d:14:6c:8b:70:96:8e:8c:8b:20:87:0b:a5:a4:
89:64:55:40:fa:fe:db:e0:c1:dd:f5:d0:24:f8:d2:91:da:c9:
09:59:41:7c:f3:00:87:74:52:69:89:fc:fb:a3:19:d9:93:b9:
63:62:da:b3:d3:12:b0:30:24:45:77:06:5e:d2:b1:6b:4e:6e:
0c:42:ea:09:99:b3:36:85:a2:1e:3c:86:33:06:a8:3d:ff:90:
11:1e:b3:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 20:35:18 2024 by rpki-client on console-fra.rpki-client.org