Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/84b575-5563-4f1b-865a-815eea33b35b/1/vDbS9qJkI9LVTG1HKralhuFtSzA.roa
File: vDbS9qJkI9LVTG1HKralhuFtSzA.roa (raw, json)
Hash identifier: 1NkW41jnbMe2igdsejGLTAyM+l3x5aNfS5UmBZsD2zI=
Subject key identifier: BC:36:D2:F6:A2:64:23:D2:D5:4C:6D:47:2A:B6:A5:86:E1:6D:4B:30
Certificate issuer: /CN=34fc1821905516e618320e9e471a13b2aaac96ff
Certificate serial: 018CC801E2CFF729CEFDFABB8B1AFC30A4E4
Authority key identifier: 34:FC:18:21:90:55:16:E6:18:32:0E:9E:47:1A:13:B2:AA:AC:96:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NPwYIZBVFuYYMg6eRxoTsqqslv8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/84b575-5563-4f1b-865a-815eea33b35b/1/vDbS9qJkI9LVTG1HKralhuFtSzA.roa
Signing time: Tue 02 Jan 2024 02:30:15 +0000
ROA not before: Tue 02 Jan 2024 02:30:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35568
IP address blocks: 185.236.132.0/22 maxlen: 24
185.236.132.0/24 maxlen: 24
87.236.136.0/24 maxlen: 24
87.236.136.0/21 maxlen: 21
185.236.135.0/24 maxlen: 24
185.236.134.0/24 maxlen: 24
185.236.133.0/24 maxlen: 24
87.236.139.0/24 maxlen: 24
87.236.138.0/24 maxlen: 24
87.236.137.0/24 maxlen: 24
87.236.143.0/24 maxlen: 24
87.236.142.0/24 maxlen: 24
87.236.141.0/24 maxlen: 24
87.236.140.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/84b575-5563-4f1b-865a-815eea33b35b/1/NPwYIZBVFuYYMg6eRxoTsqqslv8.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/84b575-5563-4f1b-865a-815eea33b35b/1/NPwYIZBVFuYYMg6eRxoTsqqslv8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NPwYIZBVFuYYMg6eRxoTsqqslv8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:e2:cf:f7:29:ce:fd:fa:bb:8b:1a:fc:30:a4:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34fc1821905516e618320e9e471a13b2aaac96ff
Validity
Not Before: Jan 2 02:30:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bc36d2f6a26423d2d54c6d472ab6a586e16d4b30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:ac:c2:6c:a1:03:a3:34:5c:ee:62:d9:64:be:
34:c6:13:69:cb:71:1f:3f:80:96:06:a8:47:da:f5:
9c:d9:a2:67:64:76:74:95:e4:89:b7:1e:48:13:17:
be:40:53:2a:37:d1:be:79:50:3e:62:4a:1a:83:09:
0e:72:0e:a9:5e:3e:6c:5e:bd:58:27:ef:52:cf:40:
63:81:ed:9e:2b:6a:f0:6e:6c:d8:76:00:c9:ca:15:
ab:ae:1f:03:95:19:ea:96:cc:c6:5d:80:41:f7:f2:
65:12:aa:e8:7c:d5:f4:35:1c:c4:49:10:d2:b1:16:
7f:54:6f:73:ec:20:87:b3:c4:bb:f6:68:f7:8d:69:
68:e5:19:82:7c:7b:4d:53:31:a9:d1:72:a9:63:49:
e2:be:8d:a5:46:02:9f:51:45:15:c6:13:c6:d0:ad:
7f:e5:89:f8:0b:88:1b:b5:fb:91:8f:72:b7:32:65:
f6:e1:56:ad:b7:d1:a9:8e:78:d4:54:27:91:38:93:
dc:bf:85:c4:96:f0:ec:c7:42:5a:1f:8d:d9:ca:ac:
87:40:22:32:8e:a6:9f:6d:b6:48:91:a6:19:11:bb:
2b:7e:a2:b8:53:ce:e1:c7:22:e7:6f:df:16:06:75:
7d:37:16:5b:35:fa:eb:3f:b3:a4:97:14:e4:d5:a0:
95:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:36:D2:F6:A2:64:23:D2:D5:4C:6D:47:2A:B6:A5:86:E1:6D:4B:30
X509v3 Authority Key Identifier:
keyid:34:FC:18:21:90:55:16:E6:18:32:0E:9E:47:1A:13:B2:AA:AC:96:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NPwYIZBVFuYYMg6eRxoTsqqslv8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/84b575-5563-4f1b-865a-815eea33b35b/1/vDbS9qJkI9LVTG1HKralhuFtSzA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/84b575-5563-4f1b-865a-815eea33b35b/1/NPwYIZBVFuYYMg6eRxoTsqqslv8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.236.136.0/21
185.236.132.0/22
Signature Algorithm: sha256WithRSAEncryption
b1:f2:13:a9:50:fe:2c:25:14:74:70:9a:a4:19:9e:30:69:02:
62:d5:7b:7f:1a:c0:6e:8d:79:99:89:23:98:25:d9:b6:56:da:
87:5f:c6:1e:f2:f0:3c:6b:35:05:68:a8:e2:04:99:de:73:da:
2b:4a:55:04:f2:09:fd:f2:11:d9:92:4c:35:f7:5d:5b:1d:2e:
6e:c6:37:20:30:ea:d5:9b:94:51:16:0b:16:cf:c6:65:8a:04:
76:02:21:42:a8:74:7a:14:21:a2:c2:ce:2a:3e:d9:49:65:20:
9b:6d:de:d3:1a:8a:6d:ba:03:92:77:4c:39:85:f8:f5:2f:eb:
91:46:71:c3:2e:0c:07:12:4a:c2:28:31:3f:59:89:2b:74:cc:
36:47:36:24:0e:ba:3d:74:43:2c:4b:ec:67:76:e5:6d:b7:b5:
1c:5d:16:f6:52:f5:77:8b:84:a3:c1:0f:15:4b:c9:52:f6:c5:
36:0a:43:a9:7c:53:15:f7:70:99:8c:25:80:d4:01:7f:ea:2a:
58:a0:36:a0:8c:e7:4a:da:65:66:57:aa:02:cd:ed:b4:00:a4:
1d:ad:0b:ec:ee:45:b1:58:9f:16:9b:e6:91:3f:08:20:69:02:
c9:2d:77:33:6c:5f:bb:1f:45:c3:73:73:bc:47:26:33:34:5c:
2e:88:09:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 06:02:01 2024 by rpki-client on console-fra.rpki-client.org