Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/7f1649-0c9d-405d-a134-66d253432f5f/1/Yr6ldiPpcgeaE2fEM_76FNTIGjg.roa
File: Yr6ldiPpcgeaE2fEM_76FNTIGjg.roa (raw, json)
Hash identifier: 2yjyrT5wdthP0toDu3qDOpIAayZykVyH0n2LrbnS6zE=
Subject key identifier: 62:BE:A5:76:23:E9:72:07:9A:13:67:C4:33:FE:FA:14:D4:C8:1A:38
Certificate issuer: /CN=942f565ed16d8c337a8c8ab3cdc572ef1150f5a9
Certificate serial: 0192048A379055BA10EC6F932F4F39A56AE7
Authority key identifier: 94:2F:56:5E:D1:6D:8C:33:7A:8C:8A:B3:CD:C5:72:EF:11:50:F5:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lC9WXtFtjDN6jIqzzcVy7xFQ9ak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/7f1649-0c9d-405d-a134-66d253432f5f/1/Yr6ldiPpcgeaE2fEM_76FNTIGjg.roa
Signing time: Wed 18 Sep 2024 09:50:19 +0000
ROA not before: Wed 18 Sep 2024 09:50:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39180
IP address blocks: 37.148.240.0/21 maxlen: 21
81.18.176.0/20 maxlen: 20
93.191.40.0/21 maxlen: 21
178.18.48.0/20 maxlen: 20
185.29.64.0/23 maxlen: 23
185.153.244.0/22 maxlen: 22
188.93.40.0/21 maxlen: 21
2a01:378::/32 maxlen: 32
2a01:379::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/7f1649-0c9d-405d-a134-66d253432f5f/1/lC9WXtFtjDN6jIqzzcVy7xFQ9ak.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/7f1649-0c9d-405d-a134-66d253432f5f/1/lC9WXtFtjDN6jIqzzcVy7xFQ9ak.mft
rsync://rpki.ripe.net/repository/DEFAULT/lC9WXtFtjDN6jIqzzcVy7xFQ9ak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 04:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:04:8a:37:90:55:ba:10:ec:6f:93:2f:4f:39:a5:6a:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=942f565ed16d8c337a8c8ab3cdc572ef1150f5a9
Validity
Not Before: Sep 18 09:50:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=62bea57623e972079a1367c433fefa14d4c81a38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:b8:28:f8:22:32:c4:31:b0:f1:7b:1c:10:e2:
ca:7e:dc:a4:1c:07:45:fb:3c:0c:1c:8f:3a:56:34:
de:4c:dd:36:aa:91:69:aa:81:41:69:56:0a:47:75:
82:9d:77:17:50:36:02:62:bf:70:eb:22:f9:f1:63:
bf:5c:5a:53:f5:b4:e5:3d:7f:96:d2:03:92:b5:07:
0c:5f:be:02:49:94:b4:48:77:e6:57:06:68:63:4f:
d9:40:14:0b:d6:a1:99:cc:60:d2:f5:15:b6:84:f4:
b7:1a:fb:a0:13:d3:2a:03:b6:57:e7:06:09:d6:a3:
a5:85:2c:20:68:92:83:7e:d5:89:29:9c:d0:af:52:
b5:c1:1c:ed:5c:3b:ae:3a:84:06:dc:d9:4c:98:5d:
93:8a:94:7f:e5:1b:ae:5d:49:34:36:3f:c6:0b:9d:
de:36:0d:3b:c3:d8:87:7a:90:c7:5c:d9:52:49:16:
42:5c:1a:ae:f2:83:48:d1:cb:b6:4d:50:c9:0a:0d:
35:f4:9f:13:30:cb:9d:d2:58:ba:aa:45:6b:bc:9b:
14:db:d6:d7:f3:fd:d5:28:8e:3d:30:a0:08:f5:6a:
1f:15:58:83:9f:09:de:ea:43:45:71:ba:e5:0f:86:
47:77:fb:90:20:ca:cc:a8:db:34:95:ed:28:40:99:
23:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:BE:A5:76:23:E9:72:07:9A:13:67:C4:33:FE:FA:14:D4:C8:1A:38
X509v3 Authority Key Identifier:
keyid:94:2F:56:5E:D1:6D:8C:33:7A:8C:8A:B3:CD:C5:72:EF:11:50:F5:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lC9WXtFtjDN6jIqzzcVy7xFQ9ak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/7f1649-0c9d-405d-a134-66d253432f5f/1/Yr6ldiPpcgeaE2fEM_76FNTIGjg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/7f1649-0c9d-405d-a134-66d253432f5f/1/lC9WXtFtjDN6jIqzzcVy7xFQ9ak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.148.240.0/21
81.18.176.0/20
93.191.40.0/21
178.18.48.0/20
185.29.64.0/23
185.153.244.0/22
188.93.40.0/21
IPv6:
2a01:378::/31
Signature Algorithm: sha256WithRSAEncryption
75:68:37:7f:a6:0a:85:4a:40:24:49:94:d3:a9:b9:96:64:9d:
c8:83:04:90:45:4a:2f:cf:e3:48:e4:db:58:18:0a:6c:a1:a5:
a7:9e:dc:0d:a5:ba:0c:d4:35:89:24:3f:f1:50:fe:a6:2f:9e:
81:19:ed:19:87:02:60:43:97:48:02:6e:ce:5c:6b:f2:a4:53:
5f:82:1d:3a:f2:7e:66:91:75:d3:53:5f:dd:50:56:04:16:11:
16:ea:fe:7b:54:54:9c:1e:a2:03:4f:aa:09:e0:2d:48:6c:70:
cc:2e:d2:f2:31:7d:59:b2:dd:90:48:63:e9:6d:7e:c6:6c:be:
41:5a:7d:aa:63:eb:07:d1:e5:60:53:8f:14:1b:23:35:ff:8a:
26:3b:79:d0:1e:7d:95:20:30:02:7d:a5:10:ae:3f:be:58:6e:
ac:d6:42:f5:4e:33:87:2d:10:55:41:bf:11:4c:e8:15:10:53:
a5:f9:ff:32:22:34:5b:0f:c1:d8:35:43:b9:99:44:02:18:0d:
cc:db:f2:f3:16:ec:3d:af:21:9d:7b:64:91:ae:47:0e:3a:02:
40:20:e4:96:b4:04:59:cb:8f:35:b4:ae:24:58:85:f9:13:3b:
81:6d:29:8b:14:e7:df:31:8c:17:9e:e8:9b:5f:87:9f:1a:c2:
db:5b:45:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:45:49 2024 by rpki-client on console-ams.rpki-client.org