Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/24uOHS2M_K_5FH8xu8tPooCqggA.roa
File: 24uOHS2M_K_5FH8xu8tPooCqggA.roa (raw, json)
Hash identifier: fd6ySn6HyTXMoA+6K2tP9woYHUWkHVlOOg4AKTX+Nj8=
Subject key identifier: DB:8B:8E:1D:2D:8C:FC:AF:F9:14:7F:31:BB:CB:4F:A2:80:AA:82:00
Certificate issuer: /CN=37518d180923a7f3c00653ec12bc702b95aab907
Certificate serial: 018CC348A8C11393409766B49D725D3344DD
Authority key identifier: 37:51:8D:18:09:23:A7:F3:C0:06:53:EC:12:BC:70:2B:95:AA:B9:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N1GNGAkjp_PABlPsErxwK5WquQc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/24uOHS2M_K_5FH8xu8tPooCqggA.roa
Signing time: Mon 01 Jan 2024 04:29:27 +0000
ROA not before: Mon 01 Jan 2024 04:29:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31689
IP address blocks: 194.27.77.0/24 maxlen: 24
194.27.76.0/22 maxlen: 22
194.27.76.0/24 maxlen: 24
194.27.73.0/24 maxlen: 24
194.27.78.0/24 maxlen: 24
194.27.79.0/24 maxlen: 24
193.140.43.0/24 maxlen: 24
193.140.44.0/24 maxlen: 24
193.140.41.0/24 maxlen: 24
193.140.42.0/24 maxlen: 24
193.140.40.0/24 maxlen: 24
193.140.40.0/21 maxlen: 21
193.140.47.0/24 maxlen: 24
193.140.45.0/24 maxlen: 24
193.140.46.0/24 maxlen: 24
193.140.172.0/24 maxlen: 24
193.140.172.0/22 maxlen: 22
193.140.175.0/24 maxlen: 24
193.140.173.0/24 maxlen: 24
193.140.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/N1GNGAkjp_PABlPsErxwK5WquQc.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/N1GNGAkjp_PABlPsErxwK5WquQc.mft
rsync://rpki.ripe.net/repository/DEFAULT/N1GNGAkjp_PABlPsErxwK5WquQc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:a8:c1:13:93:40:97:66:b4:9d:72:5d:33:44:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37518d180923a7f3c00653ec12bc702b95aab907
Validity
Not Before: Jan 1 04:29:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=db8b8e1d2d8cfcaff9147f31bbcb4fa280aa8200
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ca:80:4f:5c:04:08:76:0f:ec:97:ff:89:5c:
91:99:54:44:ab:69:2e:4c:bb:c4:80:75:73:db:91:
db:bf:08:08:86:a5:65:37:b0:f2:8f:27:07:80:95:
41:1a:06:c0:7a:97:d6:3f:ad:f1:b8:12:bb:79:3b:
0e:4e:22:6c:8d:de:f1:c7:6f:63:8d:70:82:d7:9b:
d4:c3:d0:ea:9c:2b:26:5e:0d:03:2e:c0:cb:e0:bf:
9c:7f:d3:66:2a:a8:ca:71:bc:b5:8a:d1:5f:ff:68:
32:e5:d6:1b:a5:64:6c:a6:6f:8f:4e:25:2c:80:a2:
0a:5d:e7:53:9f:9a:4c:15:05:24:bc:87:ca:c1:a8:
3e:15:60:69:9c:97:9f:56:b6:c6:7b:fe:6c:ae:25:
9f:d8:10:21:3d:98:82:dc:94:72:b2:52:71:ac:83:
ac:83:a7:26:12:61:f9:eb:18:b0:0d:47:ff:e9:97:
ff:d4:6b:d8:51:68:79:a0:79:8d:7f:af:f8:5d:e5:
ee:4f:75:c5:05:e8:25:f1:75:e5:08:bc:bf:17:71:
3c:48:2c:99:81:07:f7:d7:88:1f:03:ae:87:c7:4b:
10:f1:15:64:35:d6:1a:34:81:cb:dc:af:42:9c:37:
92:92:77:a3:1d:4c:5f:f6:22:a5:06:e1:fc:88:cf:
9d:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:8B:8E:1D:2D:8C:FC:AF:F9:14:7F:31:BB:CB:4F:A2:80:AA:82:00
X509v3 Authority Key Identifier:
keyid:37:51:8D:18:09:23:A7:F3:C0:06:53:EC:12:BC:70:2B:95:AA:B9:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1GNGAkjp_PABlPsErxwK5WquQc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/24uOHS2M_K_5FH8xu8tPooCqggA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/N1GNGAkjp_PABlPsErxwK5WquQc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.140.40.0/21
193.140.172.0/22
194.27.73.0/24
194.27.76.0/22
Signature Algorithm: sha256WithRSAEncryption
72:e8:09:11:96:53:5d:c1:b4:a8:29:b2:0e:d9:44:0c:6d:fc:
21:9a:33:3b:b9:35:1e:5a:03:0c:1e:97:fd:e0:35:d6:3f:bf:
e2:52:83:81:90:82:30:97:e9:6d:e5:0c:fe:45:70:30:2d:07:
28:41:b3:45:cf:65:67:89:e8:9d:0f:25:83:5c:e3:87:b3:d8:
c6:6b:39:f5:a8:27:df:6c:00:31:2c:ae:5c:41:b6:e7:44:b0:
38:2e:c9:e7:05:b6:34:17:8a:78:dc:dd:0c:ea:e7:3b:4e:28:
39:42:67:a3:81:49:a2:d6:fd:99:35:bc:cd:a0:55:fe:2e:ba:
03:89:90:ec:46:b3:ba:e9:df:22:bc:a8:fc:a8:e0:a4:78:d3:
c7:70:0e:4e:6f:ba:83:36:44:6d:84:2d:13:df:29:bf:1f:fa:
2c:90:eb:7c:a3:7a:9a:63:8b:b2:48:35:4d:ea:1b:2c:55:dc:
64:59:99:9b:cd:f4:d2:93:87:d5:5c:12:4a:31:cd:80:90:9e:
0a:d9:31:30:f8:1c:5a:33:44:23:cb:06:a2:f6:a1:37:62:29:
7c:84:9e:68:0f:ad:ed:cc:c8:a1:a3:fd:b0:7b:fc:23:71:ec:
c5:ad:54:c8:77:da:a0:c6:f1:cd:b7:bc:38:98:08:b1:ad:e1:
8d:d4:18:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 20:33:56 2024 by rpki-client on console-ams.rpki-client.org