Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/05e814-cac4-41a8-875e-410c671e7577/1/ku3ffKQf1huGn8SLvyTCPoFVql8.roa
File: ku3ffKQf1huGn8SLvyTCPoFVql8.roa (raw, json)
Hash identifier: CpETD29BsthEoUpXcgCZqgiuwQ0ukJiie0s7gSUBGKU=
Subject key identifier: 92:ED:DF:7C:A4:1F:D6:1B:86:9F:C4:8B:BF:24:C2:3E:81:55:AA:5F
Certificate issuer: /CN=7d92b67475270755136a8a3ca802ca12c8ac7e77
Certificate serial: 0191043A2348D5CEE4F6280C1BBB949D92D4
Authority key identifier: 7D:92:B6:74:75:27:07:55:13:6A:8A:3C:A8:02:CA:12:C8:AC:7E:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fZK2dHUnB1UTaoo8qALKEsisfnc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/05e814-cac4-41a8-875e-410c671e7577/1/ku3ffKQf1huGn8SLvyTCPoFVql8.roa
Signing time: Tue 30 Jul 2024 15:20:04 +0000
ROA not before: Tue 30 Jul 2024 15:20:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39719
IP address blocks: 62.177.16.0/21 maxlen: 24
62.177.24.0/21 maxlen: 21
62.177.24.0/24 maxlen: 24
62.177.25.0/24 maxlen: 24
62.177.26.0/24 maxlen: 24
62.177.27.0/24 maxlen: 24
62.177.28.0/24 maxlen: 24
62.177.29.0/24 maxlen: 24
62.177.30.0/24 maxlen: 24
62.177.31.0/24 maxlen: 24
81.23.80.0/20 maxlen: 22
81.23.84.0/22 maxlen: 22
81.23.84.0/23 maxlen: 23
81.23.84.0/24 maxlen: 24
81.23.88.0/22 maxlen: 22
81.23.92.0/22 maxlen: 22
2a12:1d40::/29 maxlen: 29
2a12:1d40:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/05e814-cac4-41a8-875e-410c671e7577/1/fZK2dHUnB1UTaoo8qALKEsisfnc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/05e814-cac4-41a8-875e-410c671e7577/1/fZK2dHUnB1UTaoo8qALKEsisfnc.mft
rsync://rpki.ripe.net/repository/DEFAULT/fZK2dHUnB1UTaoo8qALKEsisfnc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 03:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:04:3a:23:48:d5:ce:e4:f6:28:0c:1b:bb:94:9d:92:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d92b67475270755136a8a3ca802ca12c8ac7e77
Validity
Not Before: Jul 30 15:20:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=92eddf7ca41fd61b869fc48bbf24c23e8155aa5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:83:ac:15:d5:69:bf:f6:5c:7b:06:74:17:37:
9f:d4:a4:b2:01:c2:4e:2f:af:8f:b2:78:e5:67:51:
be:4e:e4:d7:13:b3:99:55:02:10:d1:bd:f5:f3:0c:
cf:53:31:ec:54:18:cb:6e:73:ab:ae:2e:78:65:99:
c5:d8:9e:66:c1:be:12:96:0e:03:ad:ef:73:5c:51:
d3:82:ad:83:f9:6e:4c:89:4a:e8:c5:13:ff:d7:39:
24:87:da:3d:8a:c7:c2:36:ed:8e:0b:89:6b:0f:80:
a2:80:e0:ae:58:e3:a7:b8:64:e2:00:d2:41:05:59:
e9:18:3b:5e:ae:a5:5b:c0:29:0b:62:35:ea:47:3e:
cb:cc:dc:65:d5:f8:5f:57:5a:ab:42:3a:3a:0b:07:
11:b5:e9:21:62:73:0e:cf:8c:78:76:13:b7:23:73:
7c:90:43:61:af:73:66:7f:3a:e4:22:62:91:36:a4:
bc:45:38:f1:e2:6f:7f:75:ab:d7:68:82:78:b0:d9:
06:56:f8:4a:b0:aa:0d:68:46:7c:87:b2:54:e8:ce:
11:c4:f6:c3:80:4c:be:01:b4:54:fc:00:61:e3:d8:
5b:e8:af:35:97:e2:47:1f:1f:b8:f0:e3:f9:63:3e:
05:56:8a:44:b6:55:98:cf:33:7b:de:91:f2:9a:25:
62:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:ED:DF:7C:A4:1F:D6:1B:86:9F:C4:8B:BF:24:C2:3E:81:55:AA:5F
X509v3 Authority Key Identifier:
keyid:7D:92:B6:74:75:27:07:55:13:6A:8A:3C:A8:02:CA:12:C8:AC:7E:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fZK2dHUnB1UTaoo8qALKEsisfnc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/05e814-cac4-41a8-875e-410c671e7577/1/ku3ffKQf1huGn8SLvyTCPoFVql8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/05e814-cac4-41a8-875e-410c671e7577/1/fZK2dHUnB1UTaoo8qALKEsisfnc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.177.16.0/20
81.23.80.0/20
IPv6:
2a12:1d40::/29
Signature Algorithm: sha256WithRSAEncryption
0b:0b:2a:52:6e:d8:6b:18:87:61:57:63:a1:ba:de:25:05:78:
65:b2:ac:e8:29:58:bf:56:fe:78:cc:60:82:0a:6e:8d:8a:e9:
13:d7:2c:a5:c7:2a:84:7a:67:61:0a:dc:21:16:57:13:26:78:
f7:08:5a:63:73:fd:47:b3:5b:ca:e3:5b:eb:b6:8d:d3:a4:47:
0b:1b:15:fe:cc:b9:6d:7d:99:0c:9e:8c:85:a7:21:98:ac:2f:
9a:10:90:80:27:ff:62:ed:6d:c1:d2:5d:b6:0c:bf:12:5f:ec:
a8:c2:b6:70:a9:8b:55:5d:a5:d2:60:0f:1d:d0:27:bf:f1:19:
99:f0:fa:e4:c5:0b:a7:09:3b:bd:70:c2:d6:9d:78:e4:35:8e:
bc:5f:c4:f3:8e:37:3d:07:da:33:fe:27:60:b5:e0:18:34:96:
25:2f:8b:06:2f:93:19:e1:74:41:dd:83:ae:c9:43:46:ed:e3:
61:9d:4c:26:6f:83:47:f9:3f:6e:ec:44:9e:47:bd:d5:a6:be:
e2:71:22:e1:c6:0f:66:22:b2:a8:df:76:22:26:8c:fb:ad:69:
54:53:ee:da:62:47:1d:eb:81:20:92:f3:70:59:87:18:6f:1d:
fe:64:ee:08:39:20:7b:af:02:53:0a:2d:fd:4d:02:ca:3c:64:
06:b0:f8:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:02:59 2024 by rpki-client on console-fra.rpki-client.org