Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/a72891-de2f-4156-a011-43f64bcea99d/1/gvJg0TEtNFcU86o8arhTDgWUGjc.roa
File: gvJg0TEtNFcU86o8arhTDgWUGjc.roa (raw, json)
Hash identifier: UIMzCSjH53uBN9IoiznGvFoeY3S3RzOPf+PzHemlhjs=
Subject key identifier: 82:F2:60:D1:31:2D:34:57:14:F3:AA:3C:6A:B8:53:0E:05:94:1A:37
Certificate issuer: /CN=0bac82804700ad36538bf86f34c073e971430da5
Certificate serial: 018CC56E410C26CEC07B46DFE9ACC7CFF23C
Authority key identifier: 0B:AC:82:80:47:00:AD:36:53:8B:F8:6F:34:C0:73:E9:71:43:0D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C6yCgEcArTZTi_hvNMBz6XFDDaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/a72891-de2f-4156-a011-43f64bcea99d/1/gvJg0TEtNFcU86o8arhTDgWUGjc.roa
Signing time: Mon 01 Jan 2024 14:29:46 +0000
ROA not before: Mon 01 Jan 2024 14:29:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8674
IP address blocks: 213.32.232.0/21 maxlen: 21
194.58.192.0/22 maxlen: 22
194.58.192.0/24 maxlen: 24
194.58.195.0/24 maxlen: 24
194.58.196.0/24 maxlen: 24
194.58.197.0/24 maxlen: 24
194.58.198.0/24 maxlen: 24
194.58.193.0/24 maxlen: 24
194.58.194.0/24 maxlen: 24
194.58.194.0/23 maxlen: 23
194.58.199.0/24 maxlen: 24
194.146.105.0/24 maxlen: 24
194.146.106.0/24 maxlen: 24
194.146.106.0/23 maxlen: 24
194.146.107.0/24 maxlen: 24
212.237.196.0/22 maxlen: 22
212.237.194.0/24 maxlen: 24
212.237.195.0/24 maxlen: 24
185.42.136.0/23 maxlen: 23
77.72.224.0/21 maxlen: 21
2001:67c:1011::/48 maxlen: 48
2a01:3f2::/32 maxlen: 48
2001:67c:1010::/48 maxlen: 48
2001:67c:1010::/47 maxlen: 47
2a01:3f5::/32 maxlen: 48
2a01:3f3::/32 maxlen: 48
2a01:3f1:3000::/38 maxlen: 38
2a01:3f1::/32 maxlen: 32
2a01:3f1:5000::/38 maxlen: 38
2a01:3f1:a000::/38 maxlen: 38
2a01:3f1:400::/38 maxlen: 38
2a01:3f1:f000::/36 maxlen: 48
2a01:3f1:c000::/38 maxlen: 38
2a01:3f1:800::/38 maxlen: 38
2a01:3f1::/38 maxlen: 38
2a01:3f1:8000::/38 maxlen: 38
2a01:3f4::/32 maxlen: 48
2a01:3f0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/a72891-de2f-4156-a011-43f64bcea99d/1/C6yCgEcArTZTi_hvNMBz6XFDDaU.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/a72891-de2f-4156-a011-43f64bcea99d/1/C6yCgEcArTZTi_hvNMBz6XFDDaU.mft
rsync://rpki.ripe.net/repository/DEFAULT/C6yCgEcArTZTi_hvNMBz6XFDDaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:41:0c:26:ce:c0:7b:46:df:e9:ac:c7:cf:f2:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bac82804700ad36538bf86f34c073e971430da5
Validity
Not Before: Jan 1 14:29:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=82f260d1312d345714f3aa3c6ab8530e05941a37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:8b:78:18:24:52:20:47:67:24:80:c4:5d:6a:
ed:99:35:4c:66:5c:73:f4:4e:4a:83:87:74:da:3f:
61:20:25:34:97:f0:f3:d9:35:29:98:3f:b9:43:66:
b9:98:58:13:0f:74:ba:99:15:73:18:48:5d:23:00:
0a:d7:53:ab:06:5a:0b:64:8f:dc:db:c6:06:9e:f1:
d8:28:3b:ee:b7:e7:c4:11:91:b2:1f:ae:5f:01:ff:
6a:21:24:83:b1:81:fc:4a:f7:b4:81:4f:0e:1d:d8:
66:b6:fc:02:7e:d9:93:ea:21:94:23:0c:2b:f1:f2:
b8:d6:51:3b:88:5f:fa:68:06:63:45:d3:c0:a4:12:
3e:d9:7b:71:13:3b:4a:88:ea:7c:22:c6:ae:ee:74:
ee:4f:3e:dc:d8:23:85:09:a5:b8:42:11:9b:9a:53:
9b:63:9a:59:79:ab:14:37:c5:1f:22:1e:e2:da:53:
8f:92:dc:aa:ee:f2:06:a1:ca:61:d1:c8:8c:ce:8a:
f8:c0:e9:52:3a:ba:91:c0:57:5f:94:cb:0b:89:22:
47:d5:dd:af:2b:15:f2:24:c1:fe:7c:6f:b4:a9:e5:
08:62:99:d8:1f:af:f6:dc:e1:51:4d:08:33:ff:03:
ff:43:dd:56:71:ca:d8:2c:b9:3f:ea:e2:ee:b4:de:
b6:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:F2:60:D1:31:2D:34:57:14:F3:AA:3C:6A:B8:53:0E:05:94:1A:37
X509v3 Authority Key Identifier:
keyid:0B:AC:82:80:47:00:AD:36:53:8B:F8:6F:34:C0:73:E9:71:43:0D:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C6yCgEcArTZTi_hvNMBz6XFDDaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a72891-de2f-4156-a011-43f64bcea99d/1/gvJg0TEtNFcU86o8arhTDgWUGjc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a72891-de2f-4156-a011-43f64bcea99d/1/C6yCgEcArTZTi_hvNMBz6XFDDaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.72.224.0/21
185.42.136.0/23
194.58.192.0/21
194.146.105.0-194.146.107.255
212.237.194.0-212.237.199.255
213.32.232.0/21
IPv6:
2001:67c:1010::/47
2a01:3f0::-2a01:3f5:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
41:84:95:db:e2:5c:66:8a:08:0c:49:c9:95:09:8e:d8:9c:79:
a3:df:c4:d7:19:2f:f3:be:96:d9:56:6a:0d:b0:91:7a:2d:33:
0f:8d:a2:f9:b0:99:4e:e7:e9:fb:99:38:5f:75:2a:11:69:94:
e2:c0:45:3b:b5:61:6b:f0:8c:4b:e9:b1:00:77:9b:7f:40:66:
5b:76:77:ee:01:6f:60:21:25:02:b4:1a:f8:b1:22:68:c4:eb:
f8:85:0a:4c:73:ce:93:11:cf:59:1d:49:80:fc:9e:d5:8f:89:
12:8c:c5:84:e3:6b:56:5b:e3:29:49:76:cd:6d:e9:a1:4b:80:
87:87:17:60:f6:4f:f3:d2:8f:07:c9:91:c9:b0:1d:32:9d:08:
f2:ad:77:f1:2e:22:70:97:ff:63:29:d4:cf:e5:0a:1c:d7:1f:
8c:7f:b0:48:6a:56:a6:1a:12:3a:ea:4a:8a:bb:d0:f5:8e:9e:
9c:07:27:5c:45:16:be:17:22:a3:8a:e8:3a:82:5a:33:b8:5f:
4f:60:94:de:bf:7b:bb:22:06:4a:f7:4e:5b:27:c0:48:75:03:
05:16:b0:bf:c3:b3:71:b3:04:9d:05:5b:a0:18:a0:c7:10:aa:
01:a6:f7:0d:ba:34:28:41:c3:13:aa:5d:b3:1b:46:d4:42:4b:
1e:df:90:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 20:49:31 2024 by rpki-client on console-fra.rpki-client.org