Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/caa2b6-87e8-4e24-a446-775888a87194/1/FAo35_GvsHQ99Yb2v4qDWUU_K0g.roa
File: FAo35_GvsHQ99Yb2v4qDWUU_K0g.roa (raw, json)
Hash identifier: TbUHg350D3CkYRItU5CYVGFgDiFc/1A5zn3iq8LOXMk=
Subject key identifier: 14:0A:37:E7:F1:AF:B0:74:3D:F5:86:F6:BF:8A:83:59:45:3F:2B:48
Certificate issuer: /CN=3144e609e361913e3c3b0a78d7486aa45b562401
Certificate serial: 018CCA2B938A4A4E5D3A09D251548D6F4689
Authority key identifier: 31:44:E6:09:E3:61:91:3E:3C:3B:0A:78:D7:48:6A:A4:5B:56:24:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MUTmCeNhkT48Owp410hqpFtWJAE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/caa2b6-87e8-4e24-a446-775888a87194/1/FAo35_GvsHQ99Yb2v4qDWUU_K0g.roa
Signing time: Tue 02 Jan 2024 12:35:02 +0000
ROA not before: Tue 02 Jan 2024 12:35:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39279
IP address blocks: 185.108.136.0/22 maxlen: 24
89.32.226.0/24 maxlen: 24
89.32.224.0/20 maxlen: 24
185.108.182.0/24 maxlen: 24
185.108.181.0/24 maxlen: 24
185.108.180.0/22 maxlen: 24
185.33.105.0/24 maxlen: 24
185.33.104.0/22 maxlen: 22
2a00:c5a0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/caa2b6-87e8-4e24-a446-775888a87194/1/MUTmCeNhkT48Owp410hqpFtWJAE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/caa2b6-87e8-4e24-a446-775888a87194/1/MUTmCeNhkT48Owp410hqpFtWJAE.mft
rsync://rpki.ripe.net/repository/DEFAULT/MUTmCeNhkT48Owp410hqpFtWJAE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Jun 2024 19:02:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2b:93:8a:4a:4e:5d:3a:09:d2:51:54:8d:6f:46:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3144e609e361913e3c3b0a78d7486aa45b562401
Validity
Not Before: Jan 2 12:35:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=140a37e7f1afb0743df586f6bf8a8359453f2b48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:2b:30:ad:9b:c4:f8:94:90:8e:ae:78:32:95:
3a:24:be:05:60:76:07:f9:4c:c4:b1:6f:64:ff:17:
aa:df:cf:cc:53:00:e7:b8:28:fe:96:e0:b3:14:b3:
4f:74:ff:e2:b2:97:da:7d:ff:ab:c2:f2:a7:70:62:
da:42:08:9f:14:50:b9:78:bb:2b:ee:0c:e8:0a:ad:
d2:77:a0:8b:de:fa:15:4e:64:f7:96:a2:75:f4:8f:
9f:c0:ea:fb:42:f5:6c:05:b2:0f:85:2c:e3:58:96:
70:14:55:1e:f5:d2:45:3d:44:17:b6:57:e7:32:ee:
15:00:fb:64:00:6a:c7:88:5d:73:3a:46:73:97:26:
b6:88:2b:b6:cf:d1:22:d2:2c:0b:9e:5d:a4:7c:70:
1a:fd:78:99:e7:02:33:f9:a5:a0:03:56:a1:8e:32:
fc:f8:60:7b:09:a9:f4:51:6b:ea:f0:78:35:ef:11:
a1:d3:f6:d7:01:85:fa:8c:a3:e4:67:12:ab:83:f7:
52:11:22:27:18:9b:f7:7e:de:22:9c:54:1f:c1:14:
da:6e:b3:41:f3:d0:e6:0e:5e:1d:c6:d6:45:29:38:
50:70:1f:f8:9b:ca:2f:b1:a4:14:7b:31:06:99:f5:
30:36:92:42:26:54:1f:39:a0:43:bb:0c:9a:61:a2:
11:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:0A:37:E7:F1:AF:B0:74:3D:F5:86:F6:BF:8A:83:59:45:3F:2B:48
X509v3 Authority Key Identifier:
keyid:31:44:E6:09:E3:61:91:3E:3C:3B:0A:78:D7:48:6A:A4:5B:56:24:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MUTmCeNhkT48Owp410hqpFtWJAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/caa2b6-87e8-4e24-a446-775888a87194/1/FAo35_GvsHQ99Yb2v4qDWUU_K0g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/caa2b6-87e8-4e24-a446-775888a87194/1/MUTmCeNhkT48Owp410hqpFtWJAE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.32.224.0/20
185.33.104.0/22
185.108.136.0/22
185.108.180.0/22
IPv6:
2a00:c5a0::/32
Signature Algorithm: sha256WithRSAEncryption
4b:75:40:9a:64:68:85:da:d2:c2:ce:89:fe:ef:bd:ab:33:b5:
b0:31:bd:9d:26:de:24:e6:65:bc:f7:89:93:ec:c4:48:fe:a1:
bf:96:e8:d6:a7:85:70:4d:0b:a5:63:7d:c1:b3:81:aa:8d:73:
ca:c6:69:73:5c:9a:92:33:e6:ef:e0:77:e1:46:68:58:f9:31:
2b:43:5d:0e:99:aa:98:30:41:66:2f:2b:7f:4f:9f:57:b6:46:
e0:88:3c:68:ef:04:c4:15:79:73:6c:d0:ab:fb:79:59:ae:e5:
25:90:f6:6d:f2:70:30:c5:66:d7:17:b8:35:96:c8:62:8a:08:
27:89:4a:e9:0a:55:5d:6b:fc:3c:71:01:59:44:6b:e6:4e:2e:
7d:64:b9:c0:bd:9d:ed:42:71:68:9c:c4:b0:97:c5:e2:87:65:
6c:0f:95:34:ed:20:dd:81:37:b7:56:94:22:db:63:c5:d0:5d:
06:70:ab:1c:0a:ac:26:7a:56:2d:20:17:20:64:83:64:d5:48:
b0:f4:7f:f6:75:a0:2c:1e:0c:ea:42:8a:16:d3:3b:0c:bb:07:
b5:ff:52:d1:3e:49:ee:d3:67:fa:30:0b:39:e9:4f:17:60:56:
7d:a8:27:ba:f9:07:c9:19:5b:a5:7c:f0:96:cd:ed:25:ed:70:
88:13:55:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 23:35:23 2024 by rpki-client on console-fra.rpki-client.org