Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/36RgZgj_85NBzNI7LgbMLUFLab0.roa
File: 36RgZgj_85NBzNI7LgbMLUFLab0.roa (raw, json)
Hash identifier: s2i274Zt2y5tWiBlR0EVJQcg2KhI73Z2AWZoSHOcHxo=
Subject key identifier: DF:A4:60:66:08:FF:F3:93:41:CC:D2:3B:2E:06:CC:2D:41:4B:69:BD
Certificate issuer: /CN=359f0f5ff620e0db5311f64736909973ac60f6f3
Certificate serial: 0190D0D59E9B38F1BCCEF825163A5DF1A759
Authority key identifier: 35:9F:0F:5F:F6:20:E0:DB:53:11:F6:47:36:90:99:73:AC:60:F6:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/36RgZgj_85NBzNI7LgbMLUFLab0.roa
Signing time: Sat 20 Jul 2024 15:49:39 +0000
ROA not before: Sat 20 Jul 2024 15:49:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200059
IP address blocks: 109.235.0.0/21 maxlen: 32
185.40.80.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.mft
rsync://rpki.ripe.net/repository/DEFAULT/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:d0:d5:9e:9b:38:f1:bc:ce:f8:25:16:3a:5d:f1:a7:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=359f0f5ff620e0db5311f64736909973ac60f6f3
Validity
Not Before: Jul 20 15:49:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dfa4606608fff39341ccd23b2e06cc2d414b69bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:76:24:88:39:88:8f:3b:5d:75:12:bc:9d:b1:
a1:7d:ef:55:82:75:dd:a9:b6:11:17:11:f0:ac:29:
37:e2:67:93:d7:c6:76:22:dd:b8:38:c5:18:57:67:
32:64:04:46:39:e1:2a:6c:e3:12:99:a5:e5:a8:16:
b6:cf:41:8a:70:cd:2b:b6:7d:ec:42:d3:fb:55:cf:
f0:87:49:eb:46:c8:37:bd:da:44:06:f1:4e:a6:2e:
04:e9:90:64:f1:ac:e7:92:18:5a:ab:2d:35:49:60:
6f:be:93:2e:eb:78:a9:74:a0:76:a7:50:79:8f:08:
d1:62:38:b1:2b:fa:fa:45:0b:56:7a:a8:d2:5b:2c:
5e:e4:cc:3a:59:10:19:7d:b0:d0:37:1d:c0:cb:4d:
e7:1e:72:3c:9f:5b:4f:fa:a4:e1:85:4e:dc:f4:51:
56:d4:27:20:51:b9:ca:b2:d7:b5:a6:ef:34:7c:f6:
2e:73:bb:28:9f:30:46:04:06:98:6a:77:d3:11:5b:
0a:78:86:2a:13:57:e4:67:dd:39:77:fa:54:46:90:
59:78:21:4f:71:ed:18:9d:6f:fa:12:85:3c:e9:ca:
e3:5d:b8:74:58:e8:dc:9a:5a:1b:e0:b1:be:47:26:
35:59:31:f7:f0:d5:bd:a7:da:d9:65:15:70:6b:ab:
d9:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:A4:60:66:08:FF:F3:93:41:CC:D2:3B:2E:06:CC:2D:41:4B:69:BD
X509v3 Authority Key Identifier:
keyid:35:9F:0F:5F:F6:20:E0:DB:53:11:F6:47:36:90:99:73:AC:60:F6:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/36RgZgj_85NBzNI7LgbMLUFLab0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.235.0.0/21
185.40.80.0/22
Signature Algorithm: sha256WithRSAEncryption
bd:d5:fb:e2:63:45:5c:42:7b:91:eb:9a:4c:95:4b:b4:73:93:
c2:e2:5b:f8:42:3f:7d:6b:9e:ae:65:0e:7b:e3:5c:ea:73:b6:
92:b4:11:e7:cd:82:71:56:35:66:65:2e:be:7b:49:d0:7b:fd:
04:38:04:64:61:75:59:fb:0b:27:2e:86:4b:02:73:04:84:70:
59:58:cc:7e:1a:23:5f:10:77:c1:86:f6:b4:2e:10:1c:74:77:
d2:47:4f:db:a5:18:0a:a4:aa:0f:87:6c:3c:66:39:06:f5:1a:
52:84:c1:a5:0f:96:7d:8a:23:23:9d:a1:7a:be:e2:8c:d6:60:
1a:54:d4:d1:8f:9c:83:71:29:90:da:b7:98:3e:18:1e:e3:23:
8d:07:f5:e6:b9:f8:3d:c3:10:04:f0:de:6b:2d:07:63:91:50:
17:6a:79:9f:d0:08:ed:90:27:31:82:26:53:af:2a:d7:c8:da:
41:33:20:77:9d:76:c6:ea:97:71:b2:ab:73:fd:06:54:51:dc:
7c:35:47:e8:51:1a:e1:29:fd:96:17:35:e6:02:40:d3:fe:36:
21:6c:9d:df:97:89:ad:1d:7c:d9:7f:97:00:35:d0:c4:9e:2f:
8b:0f:be:95:2a:e3:71:ec:5f:94:36:aa:b1:0e:0b:5f:61:b6:
3d:85:11:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:45:40 2024 by rpki-client on console-ams.rpki-client.org