Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/5dca9d-73dd-47dc-8549-b1c4de84e70e/1/kvd6Y_pHuRVM5S4Y6_fSFpjnpXY.roa
File: kvd6Y_pHuRVM5S4Y6_fSFpjnpXY.roa (raw, json)
Hash identifier: xKMqifZ16z604DR3b7Dn27NEeewJL7VDkT9307eFwq8=
Subject key identifier: 92:F7:7A:63:FA:47:B9:15:4C:E5:2E:18:EB:F7:D2:16:98:E7:A5:76
Certificate issuer: /CN=33fc1e5b6c788faf8fe9331981d65b5f864b80f7
Certificate serial: 018CC72709279E522C059B9BBB3EC481D11D
Authority key identifier: 33:FC:1E:5B:6C:78:8F:AF:8F:E9:33:19:81:D6:5B:5F:86:4B:80:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M_weW2x4j6-P6TMZgdZbX4ZLgPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/5dca9d-73dd-47dc-8549-b1c4de84e70e/1/kvd6Y_pHuRVM5S4Y6_fSFpjnpXY.roa
Signing time: Mon 01 Jan 2024 22:31:13 +0000
ROA not before: Mon 01 Jan 2024 22:31:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201211
IP address blocks: 185.73.16.0/22 maxlen: 22
193.178.118.0/24 maxlen: 24
185.82.24.0/22 maxlen: 22
2a05:3e80::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/5dca9d-73dd-47dc-8549-b1c4de84e70e/1/M_weW2x4j6-P6TMZgdZbX4ZLgPc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/5dca9d-73dd-47dc-8549-b1c4de84e70e/1/M_weW2x4j6-P6TMZgdZbX4ZLgPc.mft
rsync://rpki.ripe.net/repository/DEFAULT/M_weW2x4j6-P6TMZgdZbX4ZLgPc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:09:27:9e:52:2c:05:9b:9b:bb:3e:c4:81:d1:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33fc1e5b6c788faf8fe9331981d65b5f864b80f7
Validity
Not Before: Jan 1 22:31:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=92f77a63fa47b9154ce52e18ebf7d21698e7a576
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:3b:75:65:c5:ff:0b:9c:6f:50:89:cc:e1:ad:
5f:a5:d4:23:ec:81:2a:c8:f7:b5:bb:ab:18:3e:64:
09:47:eb:57:9f:4c:e7:d7:18:a7:33:1d:74:7d:72:
9b:56:7b:ba:ae:21:12:f0:49:08:6e:28:86:5d:95:
45:dc:a4:4b:01:30:7c:e8:46:0a:3d:ec:2d:ff:f4:
33:78:1f:63:57:ea:7e:14:9e:1b:05:8d:02:e3:da:
fd:77:45:ed:f0:ed:ad:f9:d0:78:dd:1b:f7:5a:52:
28:51:ea:08:ee:8b:41:3a:d6:81:3b:a0:a6:c2:04:
43:54:17:c4:37:31:bf:83:68:8f:5b:9c:d2:fc:39:
c8:a2:ae:83:5b:4b:5f:e5:00:35:67:11:36:b1:4c:
bf:f6:80:c3:a7:74:c0:e8:e6:cb:0e:0e:d6:23:dc:
bc:7c:25:28:bb:db:f4:d5:aa:72:b6:26:94:af:c4:
53:06:2a:ac:0f:5c:fa:31:d7:49:af:27:f0:dc:39:
6e:34:20:b1:11:8b:49:56:c4:47:41:df:57:ea:ce:
fd:72:92:4a:ef:9c:d6:51:41:45:5f:a0:bb:2b:96:
f8:0b:8d:50:da:d0:09:8a:4d:0f:31:54:51:46:6f:
cc:9c:f1:89:3e:df:28:85:f5:55:67:02:c9:34:4d:
3e:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:F7:7A:63:FA:47:B9:15:4C:E5:2E:18:EB:F7:D2:16:98:E7:A5:76
X509v3 Authority Key Identifier:
keyid:33:FC:1E:5B:6C:78:8F:AF:8F:E9:33:19:81:D6:5B:5F:86:4B:80:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M_weW2x4j6-P6TMZgdZbX4ZLgPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/5dca9d-73dd-47dc-8549-b1c4de84e70e/1/kvd6Y_pHuRVM5S4Y6_fSFpjnpXY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/5dca9d-73dd-47dc-8549-b1c4de84e70e/1/M_weW2x4j6-P6TMZgdZbX4ZLgPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.73.16.0/22
185.82.24.0/22
193.178.118.0/24
IPv6:
2a05:3e80::/29
Signature Algorithm: sha256WithRSAEncryption
75:05:e9:d7:13:88:30:00:69:f2:1f:6c:9a:a4:e0:7f:1a:c4:
67:e5:35:d1:93:69:cc:a8:89:6d:0a:51:73:fa:0a:dd:25:21:
3f:77:c9:af:f2:3a:03:33:1b:7d:15:cf:ef:eb:90:5c:77:76:
b0:5a:c9:4e:eb:43:02:3a:a4:38:d4:fe:c6:30:e7:bd:d0:c1:
49:7d:5f:c2:3a:c8:f5:4f:73:31:66:0b:f7:0a:33:ce:3b:08:
21:69:ed:aa:b6:ff:3c:ee:c3:33:c0:98:3c:65:70:a8:7f:e9:
d2:b0:16:9e:ac:75:8e:11:c5:fa:41:91:98:75:8c:3d:94:a8:
34:27:f1:18:49:6e:7e:c2:d4:f3:5f:3c:d1:9e:61:15:0d:cf:
fd:32:67:a2:88:ce:5b:10:ec:63:e3:cb:ae:58:8f:a9:20:c2:
58:6c:d6:11:5f:48:72:c5:50:59:26:6b:4b:34:8a:51:14:82:
12:2f:7e:6b:b0:6b:5e:c5:9a:d7:f7:81:98:f3:56:9e:30:49:
93:8e:51:be:b3:01:f5:90:6a:f0:84:8a:ac:1f:27:06:51:2c:
6c:da:c1:ba:31:17:22:e0:6a:fe:6f:35:2d:c3:e1:ca:62:a7:
79:39:b6:e6:d6:8c:8b:bc:8f:e5:45:2e:f4:c2:dc:d7:a5:c5:
78:ee:01:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:52:59 2024 by rpki-client on console-fra.rpki-client.org