Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/sxgO5gRtWj4ncCsUAGBKyh9KcOQ.roa
File: sxgO5gRtWj4ncCsUAGBKyh9KcOQ.roa (raw, json)
Hash identifier: ZHpvHmk9QNAAqDZcVik167UFUKvsPL1GCtylt/NtG2o=
Subject key identifier: B3:18:0E:E6:04:6D:5A:3E:27:70:2B:14:00:60:4A:CA:1F:4A:70:E4
Certificate issuer: /CN=17b5042fc20d9bab1676e09af7ff1ba5bfadae75
Certificate serial: 018D5F691963A11E38789D046C383819B735
Authority key identifier: 17:B5:04:2F:C2:0D:9B:AB:16:76:E0:9A:F7:FF:1B:A5:BF:AD:AE:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/sxgO5gRtWj4ncCsUAGBKyh9KcOQ.roa
Signing time: Wed 31 Jan 2024 12:05:39 +0000
ROA not before: Wed 31 Jan 2024 12:05:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39855
IP address blocks: 62.68.66.0/24 maxlen: 24
84.54.35.0/24 maxlen: 24
178.212.142.0/24 maxlen: 24
185.65.70.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.mft
rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 May 2024 04:03:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:5f:69:19:63:a1:1e:38:78:9d:04:6c:38:38:19:b7:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17b5042fc20d9bab1676e09af7ff1ba5bfadae75
Validity
Not Before: Jan 31 12:05:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b3180ee6046d5a3e27702b1400604aca1f4a70e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:fb:64:a8:b1:22:23:bc:33:8e:39:46:ce:52:
b1:2f:64:d8:d4:f8:98:37:30:02:c5:20:05:31:ad:
61:78:44:50:d1:59:4e:ca:a9:c0:98:f2:e2:53:b9:
27:0c:68:78:6a:9f:55:9c:e0:c7:f0:79:cf:a1:f4:
2d:ae:73:1a:8a:62:df:f5:30:25:60:7c:ef:f8:79:
f9:1b:2b:0e:7c:c1:03:f3:f1:3e:d6:72:48:c1:f4:
47:3f:f0:04:8c:87:13:8c:fe:72:fe:f7:ad:5f:ba:
61:64:ce:cb:d7:e3:ee:35:5c:01:9d:4d:e5:8e:b9:
a3:1d:8d:93:c0:fa:a5:90:0c:6d:ee:f8:b3:7a:8e:
d5:94:5c:44:de:35:32:3d:94:d3:5f:d9:16:33:2c:
20:16:32:2e:8f:6b:6b:3c:61:4b:00:b9:1e:85:03:
0b:0c:c6:d8:1f:44:3c:82:1f:69:85:34:7f:ad:c2:
d6:3a:cd:7d:be:df:34:46:c5:46:12:59:98:8e:ff:
42:cc:6b:01:9f:9d:3f:c2:b7:28:94:ce:e4:9b:fa:
82:1e:4b:c8:2c:a7:55:88:d1:89:57:e0:8d:6b:20:
71:59:bf:36:b3:4d:a6:8e:8e:a9:e1:04:3b:7f:54:
4d:ca:b6:c5:b6:0c:0d:8a:97:a6:cb:fe:27:88:a9:
07:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:18:0E:E6:04:6D:5A:3E:27:70:2B:14:00:60:4A:CA:1F:4A:70:E4
X509v3 Authority Key Identifier:
keyid:17:B5:04:2F:C2:0D:9B:AB:16:76:E0:9A:F7:FF:1B:A5:BF:AD:AE:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/sxgO5gRtWj4ncCsUAGBKyh9KcOQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.68.66.0/24
84.54.35.0/24
178.212.142.0/24
185.65.70.0/24
Signature Algorithm: sha256WithRSAEncryption
45:44:27:15:e8:ac:8b:1d:0d:6a:17:46:ac:59:7e:37:3b:38:
80:7d:20:42:0d:48:20:92:2c:b4:da:65:95:41:ba:78:c1:59:
53:cf:a2:b8:8a:8f:67:36:17:a6:1a:94:fd:56:c3:b8:02:1e:
4b:fe:f8:ca:19:97:6d:7b:69:e3:69:bf:90:b1:e0:f5:d6:e9:
a5:a2:f2:dd:55:8b:31:b2:23:74:1d:10:47:01:a7:0d:56:3c:
d0:99:19:48:7d:b9:09:24:0a:b8:30:ba:a9:36:85:f3:5f:2f:
2d:05:84:d2:8d:39:74:cc:f2:5d:04:1a:f9:b5:b1:0d:a2:bf:
a5:ba:84:04:e8:9c:68:80:c7:63:a4:6f:a3:3e:2f:5e:bf:7d:
be:d4:59:9c:60:dd:2f:6f:be:d8:24:13:6c:34:2e:4a:89:2f:
fc:5f:fb:bb:4b:c9:2b:b2:8c:9d:3d:b0:2f:d8:dc:73:86:c8:
61:15:6e:a3:c0:6c:ab:66:94:90:38:d5:6b:0e:72:b8:9a:5d:
d1:fd:60:7d:ad:6c:87:ff:5a:51:0c:2e:f1:3d:2a:5f:9a:fe:
8c:52:ef:bf:38:ff:f0:7a:96:14:98:39:4c:ea:b0:fa:a5:3b:
58:d4:6f:e5:0f:67:7d:b7:c1:7c:ce:27:2b:86:28:3e:52:5e:
fa:33:04:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 10:05:37 2024 by rpki-client on console-ams.rpki-client.org