Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/ffbf6a-72f0-401f-b2c3-8b8d72172090/1/dXyMXugrg3avLYI2u7I5GvytXrU.roa
File: dXyMXugrg3avLYI2u7I5GvytXrU.roa (raw, json)
Hash identifier: FSSWT5GnBPeFrHNv41U5TZuhw+XIoIANhQjtzJEhgrM=
Subject key identifier: 75:7C:8C:5E:E8:2B:83:76:AF:2D:82:36:BB:B2:39:1A:FC:AD:5E:B5
Certificate issuer: /CN=56d0e3b28f2be33ec5a9d2ca00ac64155536cbc6
Certificate serial: 018D7315F8D0FF516FAE4BA3757420E9B0AB
Authority key identifier: 56:D0:E3:B2:8F:2B:E3:3E:C5:A9:D2:CA:00:AC:64:15:55:36:CB:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VtDjso8r4z7FqdLKAKxkFVU2y8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/ffbf6a-72f0-401f-b2c3-8b8d72172090/1/dXyMXugrg3avLYI2u7I5GvytXrU.roa
Signing time: Sun 04 Feb 2024 07:47:16 +0000
ROA not before: Sun 04 Feb 2024 07:47:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8697
IP address blocks: 37.202.64.0/18 maxlen: 24
46.185.128.0/17 maxlen: 24
79.173.192.0/18 maxlen: 24
86.108.0.0/17 maxlen: 24
92.253.0.0/17 maxlen: 24
94.249.0.0/17 maxlen: 24
149.200.128.0/17 maxlen: 24
149.200.136.0/24 maxlen: 24
185.98.220.0/22 maxlen: 24
194.165.128.0/19 maxlen: 24
213.186.160.0/19 maxlen: 24
217.23.32.0/20 maxlen: 24
2a01:9700::/29 maxlen: 48
2a01:9700::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/ffbf6a-72f0-401f-b2c3-8b8d72172090/1/VtDjso8r4z7FqdLKAKxkFVU2y8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/ffbf6a-72f0-401f-b2c3-8b8d72172090/1/VtDjso8r4z7FqdLKAKxkFVU2y8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/VtDjso8r4z7FqdLKAKxkFVU2y8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 10:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:73:15:f8:d0:ff:51:6f:ae:4b:a3:75:74:20:e9:b0:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56d0e3b28f2be33ec5a9d2ca00ac64155536cbc6
Validity
Not Before: Feb 4 07:47:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=757c8c5ee82b8376af2d8236bbb2391afcad5eb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:96:bf:c4:cd:1f:6a:90:ae:a2:9f:f9:a6:27:
0c:8f:f8:8f:36:a1:98:01:68:fd:58:70:8e:87:23:
d6:77:df:5f:b7:79:c5:e3:af:25:03:9e:d5:28:b1:
a1:1a:55:90:92:24:93:f9:97:6d:35:6f:99:61:13:
d9:c3:74:10:94:4c:40:2c:55:57:23:f1:28:1e:e6:
ed:42:d2:2c:39:06:40:b1:7e:62:96:a3:7d:d5:71:
43:4b:31:b4:39:ba:dd:c1:8a:eb:c7:ee:65:bb:6c:
44:37:c1:34:16:89:38:9d:16:32:47:4c:d8:3f:8f:
25:24:38:46:6f:ae:31:bd:d7:9d:67:f5:2d:09:c0:
c5:63:a0:29:23:24:38:7b:23:82:d5:09:59:d2:bf:
8a:49:2d:08:c4:7c:5a:9f:1b:f2:c0:ba:e4:4e:c7:
f9:65:ec:91:b2:57:52:5f:c2:6d:a3:d5:3f:71:24:
0f:61:24:aa:98:95:4e:46:2e:37:9f:32:ff:0d:9a:
30:9e:fb:ff:60:1c:f2:ea:7a:aa:1b:d8:d1:32:b7:
90:d8:b9:f0:f3:57:ff:f2:97:ca:41:86:d9:72:7e:
25:15:6d:52:cf:d7:7e:2c:b8:ad:b1:b0:90:3e:c2:
57:c8:60:99:5b:92:5e:b1:e9:d7:21:fd:0a:94:07:
d9:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:7C:8C:5E:E8:2B:83:76:AF:2D:82:36:BB:B2:39:1A:FC:AD:5E:B5
X509v3 Authority Key Identifier:
keyid:56:D0:E3:B2:8F:2B:E3:3E:C5:A9:D2:CA:00:AC:64:15:55:36:CB:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VtDjso8r4z7FqdLKAKxkFVU2y8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ffbf6a-72f0-401f-b2c3-8b8d72172090/1/dXyMXugrg3avLYI2u7I5GvytXrU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ffbf6a-72f0-401f-b2c3-8b8d72172090/1/VtDjso8r4z7FqdLKAKxkFVU2y8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.64.0/18
46.185.128.0/17
79.173.192.0/18
86.108.0.0/17
92.253.0.0/17
94.249.0.0/17
149.200.128.0/17
185.98.220.0/22
194.165.128.0/19
213.186.160.0/19
217.23.32.0/20
IPv6:
2a01:9700::/29
Signature Algorithm: sha256WithRSAEncryption
8a:c9:8f:35:37:b2:58:5f:9a:ce:5f:25:f1:31:82:73:af:25:
5a:5f:3f:ed:50:a3:54:7f:71:c6:be:ff:f2:ea:31:fe:f5:fe:
17:77:a6:fa:16:2e:4c:7f:4d:2b:64:c9:4e:09:30:46:d3:4a:
7e:a4:6a:4c:23:4e:d5:60:1b:ff:e7:0c:57:70:4d:67:af:93:
26:21:6c:ad:b8:88:e5:e1:11:89:f9:3d:44:67:5a:a7:17:00:
8d:d3:61:1d:b9:1c:a3:2c:9a:7e:7e:86:1e:b6:64:6d:7b:ee:
c3:6f:be:df:ad:1f:5e:07:eb:10:54:ef:55:57:ca:ee:94:a2:
1f:f2:ff:61:6e:c4:bb:74:7a:00:3f:f2:85:ac:c8:6b:07:c2:
7b:68:3c:8c:f1:ca:9e:1f:74:b6:40:b9:92:ca:a6:8b:9a:b1:
ed:3f:a2:75:18:85:b5:e0:ff:02:06:f0:3a:c3:34:7b:44:f0:
11:c6:c3:29:01:a0:2d:f9:6b:5e:14:57:79:70:9f:2c:52:06:
2b:d1:51:a4:61:ea:95:38:50:91:e4:8f:ed:25:b9:a1:d2:a1:
d3:e6:1b:f6:17:aa:b1:21:5e:18:d4:1c:4a:5c:e1:f0:99:1e:
a5:8f:db:71:2b:65:7a:20:55:44:f7:8a:2e:ec:97:e9:cf:d1:
af:c2:5a:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 20:34:43 2024 by rpki-client on console-ams.rpki-client.org