Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/2fea18-fb62-4b95-9feb-9cf811e9fa7a/1/xGGGYv8nq6Ft5KxRcNjHgd6lEa8.roa
File: xGGGYv8nq6Ft5KxRcNjHgd6lEa8.roa (raw, json)
Hash identifier: vPqgni9u/CqAU1A0z5gt105WEPyzDAjL6iFMZF0hd1A=
Subject key identifier: C4:61:86:62:FF:27:AB:A1:6D:E4:AC:51:70:D8:C7:81:DE:A5:11:AF
Certificate issuer: /CN=59919584033c3911a009bdde3183f6c60b2afcca
Certificate serial: 018CC64B45932D1564D505BC8887948DD3A6
Authority key identifier: 59:91:95:84:03:3C:39:11:A0:09:BD:DE:31:83:F6:C6:0B:2A:FC:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WZGVhAM8ORGgCb3eMYP2xgsq_Mo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/2fea18-fb62-4b95-9feb-9cf811e9fa7a/1/xGGGYv8nq6Ft5KxRcNjHgd6lEa8.roa
Signing time: Mon 01 Jan 2024 18:31:10 +0000
ROA not before: Mon 01 Jan 2024 18:31:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41497
IP address blocks: 83.137.232.0/21 maxlen: 24
5.252.240.0/22 maxlen: 24
212.183.160.0/19 maxlen: 24
212.165.32.0/19 maxlen: 24
80.76.80.0/20 maxlen: 24
193.43.24.0/24 maxlen: 24
2001:4bb0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/2fea18-fb62-4b95-9feb-9cf811e9fa7a/1/WZGVhAM8ORGgCb3eMYP2xgsq_Mo.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/2fea18-fb62-4b95-9feb-9cf811e9fa7a/1/WZGVhAM8ORGgCb3eMYP2xgsq_Mo.mft
rsync://rpki.ripe.net/repository/DEFAULT/WZGVhAM8ORGgCb3eMYP2xgsq_Mo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:45:93:2d:15:64:d5:05:bc:88:87:94:8d:d3:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59919584033c3911a009bdde3183f6c60b2afcca
Validity
Not Before: Jan 1 18:31:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c4618662ff27aba16de4ac5170d8c781dea511af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:a6:03:05:85:d2:6e:18:a8:31:c7:63:16:d7:
9f:e7:cd:8d:28:04:82:40:3b:fb:10:d4:7c:72:a0:
b8:65:3a:c6:2c:6a:8b:e3:a3:3e:70:68:31:5b:35:
62:db:25:90:54:bc:cf:17:65:46:d8:fc:d3:ad:ff:
62:8c:5d:8d:0d:aa:89:62:d9:69:1e:2f:65:4b:d6:
a1:71:e7:9c:9c:6b:84:3b:eb:5b:a0:ba:3e:88:ef:
52:49:0f:4e:bb:e3:c1:b9:fb:81:be:dd:dd:a5:84:
9d:f3:ed:7e:9b:37:8e:37:ae:0f:b2:1f:5c:a1:65:
e3:e3:92:43:3d:bb:7d:72:8d:9b:bc:6b:bf:23:9e:
1b:80:fc:44:07:d4:4a:73:b2:45:86:09:a4:d0:98:
75:8a:8a:74:32:11:59:1b:39:95:7f:b7:4b:da:34:
94:90:e2:6d:a1:cd:7b:81:4a:5b:ab:c6:2b:7b:ea:
d5:53:8e:2e:0b:91:ec:99:fd:3e:9b:48:a7:d6:6d:
df:3f:8e:ea:b8:e9:23:0c:c4:9e:db:fa:3f:e7:b4:
31:11:12:77:a8:ec:9f:bb:1d:52:a8:8d:5f:61:52:
33:d4:5b:03:bc:1a:5d:66:5e:e4:1d:3e:44:cc:ff:
4f:ec:1b:fb:9f:52:ed:e2:58:7f:22:00:a6:c4:91:
aa:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:61:86:62:FF:27:AB:A1:6D:E4:AC:51:70:D8:C7:81:DE:A5:11:AF
X509v3 Authority Key Identifier:
keyid:59:91:95:84:03:3C:39:11:A0:09:BD:DE:31:83:F6:C6:0B:2A:FC:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WZGVhAM8ORGgCb3eMYP2xgsq_Mo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/2fea18-fb62-4b95-9feb-9cf811e9fa7a/1/xGGGYv8nq6Ft5KxRcNjHgd6lEa8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/2fea18-fb62-4b95-9feb-9cf811e9fa7a/1/WZGVhAM8ORGgCb3eMYP2xgsq_Mo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.240.0/22
80.76.80.0/20
83.137.232.0/21
193.43.24.0/24
212.165.32.0/19
212.183.160.0/19
IPv6:
2001:4bb0::/32
Signature Algorithm: sha256WithRSAEncryption
91:4b:33:5b:bc:33:ad:dd:d4:17:61:a0:97:70:e2:c8:36:28:
ea:f1:8a:dd:8f:d2:16:eb:91:bd:f5:1f:1a:30:e3:87:64:55:
49:16:83:88:b7:14:25:f3:43:b7:20:a9:67:86:a9:53:a0:21:
09:aa:83:cb:cd:a8:c2:c3:ef:25:d2:5a:90:6c:bd:8c:7d:39:
c9:c9:e9:37:1d:05:f5:92:af:30:64:f5:43:81:15:c3:e3:af:
94:7c:79:8b:52:2c:64:98:a0:15:8d:d0:22:28:52:d4:7e:a9:
7b:59:ea:68:15:8b:e3:3d:cf:65:39:92:d9:2f:1c:e1:03:41:
22:4f:a4:98:f0:30:2d:7b:3a:9f:c7:54:00:5a:85:b3:c4:06:
ac:e3:1a:f2:cf:88:f7:2c:83:8f:5c:73:90:bf:4e:00:09:ec:
55:a9:5d:8c:5c:fc:fb:44:7b:2e:b8:94:60:75:14:dc:55:1e:
5f:46:4a:fb:92:18:a3:41:08:41:e5:ac:52:b4:af:93:f4:6e:
64:46:3a:51:3b:5d:d1:29:88:1e:f6:b3:7e:ed:2d:02:61:c4:
33:a9:d8:f9:16:54:ac:5c:05:65:a0:64:d2:2b:7d:1c:ee:14:
b2:85:8a:14:42:0b:75:26:9e:e3:75:35:0b:95:8e:40:72:2e:
10:3c:3b:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 06:02:37 2024 by rpki-client on console-fra.rpki-client.org