Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/72e0ff-701c-4dae-92c2-f0e1af3fff1d/1/cARcPGxCtlnc27yEHUmCYA9_tQ0.roa
File: cARcPGxCtlnc27yEHUmCYA9_tQ0.roa (raw, json)
Hash identifier: eK/oOswjetvbSv9fzqVCqZZS9qTtr+9TAXwhha87rkQ=
Subject key identifier: 70:04:5C:3C:6C:42:B6:59:DC:DB:BC:84:1D:49:82:60:0F:7F:B5:0D
Certificate issuer: /CN=919eed6f0c370234c9262b1f7b4138a60717bfb1
Certificate serial: 018CC64AC6A5A20FDAD4AC819A49DD0ABBB4
Authority key identifier: 91:9E:ED:6F:0C:37:02:34:C9:26:2B:1F:7B:41:38:A6:07:17:BF:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kZ7tbww3AjTJJisfe0E4pgcXv7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/72e0ff-701c-4dae-92c2-f0e1af3fff1d/1/cARcPGxCtlnc27yEHUmCYA9_tQ0.roa
Signing time: Mon 01 Jan 2024 18:30:38 +0000
ROA not before: Mon 01 Jan 2024 18:30:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200752
IP address blocks: 185.97.120.0/22 maxlen: 24
5.133.96.0/22 maxlen: 24
91.214.60.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/72e0ff-701c-4dae-92c2-f0e1af3fff1d/1/kZ7tbww3AjTJJisfe0E4pgcXv7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/72e0ff-701c-4dae-92c2-f0e1af3fff1d/1/kZ7tbww3AjTJJisfe0E4pgcXv7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/kZ7tbww3AjTJJisfe0E4pgcXv7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Jun 2024 16:03:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:c6:a5:a2:0f:da:d4:ac:81:9a:49:dd:0a:bb:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=919eed6f0c370234c9262b1f7b4138a60717bfb1
Validity
Not Before: Jan 1 18:30:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=70045c3c6c42b659dcdbbc841d4982600f7fb50d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:cf:3c:7d:43:cd:01:6d:98:26:c0:bd:0e:f1:
8d:3a:30:d3:e1:ad:37:17:95:1a:0a:83:e4:ba:c4:
d9:8b:9d:b5:85:54:46:53:3a:5a:d5:04:eb:95:71:
15:e0:fc:46:cb:7b:a7:c6:34:70:55:39:c8:56:15:
f1:18:1e:c1:e6:bd:a7:1c:d4:16:75:e1:3a:59:4c:
93:45:4b:24:d5:52:5b:4d:c8:2c:a7:a1:cc:3e:31:
55:eb:4a:cc:b8:1e:1e:0b:77:75:6b:4a:f2:24:c3:
78:0e:15:99:92:e9:63:d9:6e:5e:df:47:7a:1f:21:
cc:53:1d:d5:c8:7f:8c:a3:5e:19:9e:e2:22:aa:47:
67:e8:3b:f5:86:a3:31:89:46:6a:86:cb:d6:09:e4:
b1:ea:53:f4:6d:0f:ac:9c:5f:36:cf:3e:9e:60:74:
ba:a1:b6:29:38:36:03:9f:b3:f7:1c:03:25:4f:09:
d4:f9:00:07:83:c6:2d:1f:ef:88:31:5f:13:f8:19:
11:7c:05:b8:35:f2:a9:46:87:86:c6:d2:63:39:02:
3e:06:23:04:ca:cb:76:d3:9b:a7:e5:42:f7:e6:8f:
cb:02:ed:b4:0d:07:e5:e4:12:ce:30:cb:c1:22:25:
5b:e4:d4:09:ea:2d:34:e6:b9:82:fa:34:0d:e6:55:
16:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:04:5C:3C:6C:42:B6:59:DC:DB:BC:84:1D:49:82:60:0F:7F:B5:0D
X509v3 Authority Key Identifier:
keyid:91:9E:ED:6F:0C:37:02:34:C9:26:2B:1F:7B:41:38:A6:07:17:BF:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kZ7tbww3AjTJJisfe0E4pgcXv7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/72e0ff-701c-4dae-92c2-f0e1af3fff1d/1/cARcPGxCtlnc27yEHUmCYA9_tQ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/72e0ff-701c-4dae-92c2-f0e1af3fff1d/1/kZ7tbww3AjTJJisfe0E4pgcXv7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.133.96.0/22
91.214.60.0/22
185.97.120.0/22
Signature Algorithm: sha256WithRSAEncryption
89:14:f4:a1:73:bf:5b:77:47:84:2e:6e:f8:0d:37:d6:f6:37:
da:2c:a1:1f:7e:62:0e:94:49:d1:75:60:6c:62:0c:3a:fa:63:
29:25:05:c7:e8:3d:a5:b1:8a:73:b0:37:64:2d:b5:f7:12:d3:
e8:69:93:0e:1b:1c:9e:53:b8:9c:74:a7:cb:84:dd:92:40:ce:
c7:33:0b:66:e7:25:d5:a9:59:fa:9c:57:6c:36:86:d7:bb:94:
09:8a:aa:45:d6:e3:fc:50:e5:34:d6:be:69:e2:f5:e1:71:e2:
5a:3d:0d:22:24:53:7e:a8:1e:d4:8c:81:1b:76:18:78:cc:49:
db:44:fc:88:c4:c3:22:75:53:53:30:51:74:9c:55:f8:2f:8b:
c0:31:5e:de:55:22:70:8c:b7:24:af:b2:6e:74:df:6d:6f:03:
4e:fb:79:b8:48:18:8e:a2:ed:e5:fb:3b:ae:f7:1e:0c:ff:cc:
84:ec:11:8f:ca:e2:66:f4:71:3f:86:61:dc:9a:3c:a2:17:00:
ad:42:7c:79:fd:29:e5:87:4d:f7:11:1f:2d:f5:71:5f:6d:ae:
c3:f7:61:6b:25:7d:a1:de:29:ec:5e:f4:d0:ce:16:58:a4:ce:
b8:b9:7a:ca:73:14:a4:30:3d:8b:d3:b8:db:5f:4b:ab:6d:59:
2b:7f:29:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 22:36:57 2024 by rpki-client on console-fra.rpki-client.org