Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/bcdecd-6689-4cd8-a109-20de6972609b/1/a8PAHGN90hIMyt5T-gyc-wfdL-k.roa
File: a8PAHGN90hIMyt5T-gyc-wfdL-k.roa (raw, json)
Hash identifier: hFbr1pd6U3GVdgT9p8YvyXeM6RBYlfPiYR9YSMM5OaY=
Subject key identifier: 6B:C3:C0:1C:63:7D:D2:12:0C:CA:DE:53:FA:0C:9C:FB:07:DD:2F:E9
Certificate issuer: /CN=19001d557a0698dad77c4b3eddf2a7d36b72ab00
Certificate serial: 018E377604E61D70CEB154622E6AB580590B
Authority key identifier: 19:00:1D:55:7A:06:98:DA:D7:7C:4B:3E:DD:F2:A7:D3:6B:72:AB:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GQAdVXoGmNrXfEs-3fKn02tyqwA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/bcdecd-6689-4cd8-a109-20de6972609b/1/a8PAHGN90hIMyt5T-gyc-wfdL-k.roa
Signing time: Wed 13 Mar 2024 10:57:45 +0000
ROA not before: Wed 13 Mar 2024 10:57:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201730
IP address blocks: 37.221.88.0/22 maxlen: 24
185.65.92.0/22 maxlen: 22
185.65.92.0/24 maxlen: 24
185.65.93.0/24 maxlen: 24
185.65.94.0/24 maxlen: 24
185.65.95.0/24 maxlen: 24
185.78.100.0/22 maxlen: 22
185.78.100.0/24 maxlen: 24
185.78.101.0/24 maxlen: 24
185.78.102.0/24 maxlen: 24
185.78.103.0/24 maxlen: 24
185.138.244.0/22 maxlen: 22
185.138.244.0/24 maxlen: 24
185.138.245.0/24 maxlen: 24
185.138.246.0/24 maxlen: 24
185.138.247.0/24 maxlen: 24
185.146.148.0/22 maxlen: 22
185.146.148.0/24 maxlen: 24
185.146.149.0/24 maxlen: 24
185.146.150.0/24 maxlen: 24
185.146.151.0/24 maxlen: 24
194.169.252.0/24 maxlen: 24
2a03:1aa0::/32 maxlen: 36
2a05:5fc1::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/bcdecd-6689-4cd8-a109-20de6972609b/1/GQAdVXoGmNrXfEs-3fKn02tyqwA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/bcdecd-6689-4cd8-a109-20de6972609b/1/GQAdVXoGmNrXfEs-3fKn02tyqwA.mft
rsync://rpki.ripe.net/repository/DEFAULT/GQAdVXoGmNrXfEs-3fKn02tyqwA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Dec 2024 14:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:37:76:04:e6:1d:70:ce:b1:54:62:2e:6a:b5:80:59:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19001d557a0698dad77c4b3eddf2a7d36b72ab00
Validity
Not Before: Mar 13 10:57:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6bc3c01c637dd2120ccade53fa0c9cfb07dd2fe9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:61:3a:04:c6:12:9f:01:d3:77:85:ca:7c:39:
84:38:64:0f:eb:94:2b:ed:9d:9f:e9:01:2e:0e:1c:
5c:ce:32:74:25:fc:75:78:d5:6b:5f:a0:c8:e4:2d:
52:25:93:25:33:62:11:19:ee:cc:d7:51:c7:4f:3e:
ec:86:72:f4:e5:4c:02:61:25:1a:2e:42:ab:8d:05:
40:17:7d:05:32:86:b1:1c:c0:6d:d1:f2:ea:87:00:
23:01:ee:63:b6:df:f7:1b:34:84:03:fb:19:f9:79:
f1:a1:b4:d2:80:fc:34:e4:1b:7a:87:ee:0f:11:fd:
52:7e:95:9a:74:77:df:7f:cf:b5:c3:78:1f:a3:79:
5a:43:a0:57:4d:a0:ff:db:8a:6a:01:69:db:06:45:
b5:ae:85:73:f5:54:9b:0b:ab:96:df:0d:94:18:14:
5f:f1:b2:00:64:e3:88:4a:dc:99:1c:36:fc:d3:3d:
ed:81:b0:38:cd:df:44:29:d3:90:3d:22:94:e0:a2:
15:17:22:87:92:89:67:1c:45:ce:38:c6:9d:a3:13:
98:fc:24:86:56:aa:06:bd:c5:37:5e:1f:f7:4a:ec:
1b:e4:23:de:ab:bf:49:41:01:1e:1f:f1:ed:0d:96:
24:0f:8a:78:4f:6e:ca:9a:78:ec:6b:72:34:08:67:
7f:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:C3:C0:1C:63:7D:D2:12:0C:CA:DE:53:FA:0C:9C:FB:07:DD:2F:E9
X509v3 Authority Key Identifier:
keyid:19:00:1D:55:7A:06:98:DA:D7:7C:4B:3E:DD:F2:A7:D3:6B:72:AB:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GQAdVXoGmNrXfEs-3fKn02tyqwA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/bcdecd-6689-4cd8-a109-20de6972609b/1/a8PAHGN90hIMyt5T-gyc-wfdL-k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/bcdecd-6689-4cd8-a109-20de6972609b/1/GQAdVXoGmNrXfEs-3fKn02tyqwA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.221.88.0/22
185.65.92.0/22
185.78.100.0/22
185.138.244.0/22
185.146.148.0/22
194.169.252.0/24
IPv6:
2a03:1aa0::/32
2a05:5fc1::/32
Signature Algorithm: sha256WithRSAEncryption
c0:da:d9:8c:c9:e7:40:2d:95:a8:9b:77:90:9e:d1:48:83:9d:
66:08:bd:68:eb:3d:16:d2:81:95:0d:e3:ca:51:dd:bf:ad:11:
e9:0b:37:09:2a:92:73:a3:c6:5c:62:52:e6:72:5f:44:61:60:
8e:09:6f:ec:a5:68:49:bc:9b:8d:9f:6e:b8:1b:84:12:2c:e9:
74:d2:bd:bb:ca:ca:bb:40:d2:df:20:b4:39:7b:28:78:28:c1:
73:3d:0a:e1:c5:c1:38:e7:4b:b2:1f:65:21:74:60:25:63:bf:
6e:6e:b6:6b:55:83:5f:6e:7a:a8:3d:5b:73:ec:d5:75:09:dd:
91:10:cc:1a:15:c2:e9:85:ac:9c:2d:04:cd:fc:f3:6b:0f:b5:
46:84:53:ca:01:69:e5:58:3a:7d:d7:2e:b1:e3:0e:be:f6:11:
e8:15:f9:fc:a4:98:d2:2a:2f:80:d0:7c:ab:f3:55:4d:09:eb:
05:9f:d6:91:66:c7:9b:d4:94:d2:e3:76:26:50:97:b1:13:35:
f5:8a:ce:8c:e0:a7:53:59:cb:b2:08:2b:55:fe:8e:62:c2:f9:
c8:2b:d8:c5:d1:81:99:6a:88:fb:c2:c0:b7:9e:90:a8:ec:4e:
0b:cf:d6:a5:55:3f:1e:55:e8:c0:67:70:33:15:77:82:a8:0e:
1b:c9:b2:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 3 17:53:57 2024 by rpki-client on console-ams.rpki-client.org