Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/7a8f3f-304c-4a26-aeca-18bdfe8cc0cd/1/NKHaDnHJcZnTvpuPYmmyg0WjXIQ.roa
File: NKHaDnHJcZnTvpuPYmmyg0WjXIQ.roa (raw, json)
Hash identifier: x9GztcWDYcaNExMa9CSYu6lq9Q6US6yxTXal+7iGeyw=
Subject key identifier: 34:A1:DA:0E:71:C9:71:99:D3:BE:9B:8F:62:69:B2:83:45:A3:5C:84
Certificate issuer: /CN=bc663c6e779dae9bdb046854f189fe8c5c3c32e1
Certificate serial: 018CC94CC06DC5325424159A6C9A1AEFC52F
Authority key identifier: BC:66:3C:6E:77:9D:AE:9B:DB:04:68:54:F1:89:FE:8C:5C:3C:32:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vGY8bnedrpvbBGhU8Yn-jFw8MuE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/7a8f3f-304c-4a26-aeca-18bdfe8cc0cd/1/NKHaDnHJcZnTvpuPYmmyg0WjXIQ.roa
Signing time: Tue 02 Jan 2024 08:31:39 +0000
ROA not before: Tue 02 Jan 2024 08:31:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47586
IP address blocks: 91.214.56.0/22 maxlen: 24
158.58.128.0/21 maxlen: 24
185.30.116.0/22 maxlen: 24
87.239.0.0/21 maxlen: 24
109.235.184.0/21 maxlen: 24
37.77.108.0/22 maxlen: 24
194.114.128.0/22 maxlen: 24
146.19.211.0/24 maxlen: 24
80.249.204.0/22 maxlen: 24
93.190.16.0/21 maxlen: 24
193.0.148.0/22 maxlen: 24
195.64.156.0/23 maxlen: 24
2a00:b160::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/7a8f3f-304c-4a26-aeca-18bdfe8cc0cd/1/vGY8bnedrpvbBGhU8Yn-jFw8MuE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/7a8f3f-304c-4a26-aeca-18bdfe8cc0cd/1/vGY8bnedrpvbBGhU8Yn-jFw8MuE.mft
rsync://rpki.ripe.net/repository/DEFAULT/vGY8bnedrpvbBGhU8Yn-jFw8MuE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4c:c0:6d:c5:32:54:24:15:9a:6c:9a:1a:ef:c5:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc663c6e779dae9bdb046854f189fe8c5c3c32e1
Validity
Not Before: Jan 2 08:31:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=34a1da0e71c97199d3be9b8f6269b28345a35c84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:0e:8c:98:5c:2d:58:c6:a6:b8:58:bd:b4:e9:
de:b2:33:93:1b:08:84:00:85:69:78:0a:19:67:b7:
3e:e0:df:e6:63:87:4e:a6:a2:aa:2f:3f:d9:30:68:
30:2b:53:0c:04:ac:05:9d:64:0c:eb:d8:36:1d:ba:
25:09:74:f0:37:d9:68:48:e8:c5:d5:f1:87:eb:95:
dc:be:c9:77:8d:c8:cd:35:fa:b2:6b:2d:44:e2:97:
22:7d:4e:b9:ac:84:e8:f2:11:63:43:12:78:98:ef:
73:2a:33:ef:ee:e7:22:10:bc:35:a8:c4:18:0d:42:
f7:0e:81:e2:01:5e:ff:83:4f:e3:41:70:0b:cc:6f:
cc:b2:bc:57:f5:a8:11:bf:20:e1:45:55:ac:a7:ff:
46:aa:6d:85:bd:49:f2:5e:f1:2f:11:8d:19:f1:b2:
ab:46:24:d9:f1:7f:32:d7:76:8f:1d:e5:3e:9e:29:
07:b3:8f:61:a5:9e:13:a0:85:98:af:6f:c1:bf:3a:
88:8b:3e:5a:f5:f7:1f:ef:91:63:ca:6c:50:28:c9:
f9:57:b2:bb:d5:5b:13:12:63:b5:71:7c:bd:df:06:
f6:31:fd:26:5c:40:99:8f:4f:cd:d3:b6:2c:9a:90:
b2:75:9e:d2:75:55:1a:6b:d2:ed:71:11:d2:47:7f:
4a:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:A1:DA:0E:71:C9:71:99:D3:BE:9B:8F:62:69:B2:83:45:A3:5C:84
X509v3 Authority Key Identifier:
keyid:BC:66:3C:6E:77:9D:AE:9B:DB:04:68:54:F1:89:FE:8C:5C:3C:32:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vGY8bnedrpvbBGhU8Yn-jFw8MuE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7a8f3f-304c-4a26-aeca-18bdfe8cc0cd/1/NKHaDnHJcZnTvpuPYmmyg0WjXIQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7a8f3f-304c-4a26-aeca-18bdfe8cc0cd/1/vGY8bnedrpvbBGhU8Yn-jFw8MuE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.77.108.0/22
80.249.204.0/22
87.239.0.0/21
91.214.56.0/22
93.190.16.0/21
109.235.184.0/21
146.19.211.0/24
158.58.128.0/21
185.30.116.0/22
193.0.148.0/22
194.114.128.0/22
195.64.156.0/23
IPv6:
2a00:b160::/32
Signature Algorithm: sha256WithRSAEncryption
85:e0:e1:18:c4:3b:ac:2a:c7:9a:5c:a6:53:aa:df:da:15:fa:
c7:11:88:96:43:09:00:fb:05:bc:92:69:35:de:eb:6c:e7:44:
52:d3:2f:09:76:55:d3:8c:f8:9b:08:b2:05:4a:18:75:3a:a4:
0d:4b:8a:89:2c:6b:d4:d1:3c:2c:be:b8:ad:b1:25:35:fd:0a:
20:8b:5d:3e:c6:0d:2e:ba:92:7d:e8:fc:17:3c:b8:2c:6d:b0:
66:ea:c1:d6:4b:4c:99:9b:07:7c:35:7a:08:6e:73:46:bb:e2:
d9:ee:cd:6b:28:e7:fc:ee:6f:c7:c6:a6:40:96:2a:74:91:07:
35:a6:8c:56:63:2a:6c:0e:9c:3c:33:e6:c1:99:a9:dc:3e:db:
9d:e6:0f:21:35:32:5a:af:ae:c9:a8:74:46:8e:39:6c:7e:ee:
5c:19:c8:74:30:d7:92:29:1b:bd:30:75:d0:74:4e:ce:41:14:
1a:f5:ac:20:07:ed:ee:82:17:12:50:65:f4:9a:e9:d9:6d:71:
03:88:92:a2:66:22:17:6a:be:5d:32:e6:6b:e8:d5:32:b8:17:
1b:b9:bb:28:5e:67:29:bf:fc:18:d0:a3:17:76:22:b0:08:ad:
07:05:7c:ae:54:5a:a9:76:06:d7:1c:d2:22:52:d7:3f:95:78:
2b:8e:80:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:53:12 2024 by rpki-client on console-fra.rpki-client.org