Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/8d7e7c-db7a-465f-8032-255100f2016a/1/9oKcMDaiesNbrplqA5XM_jVahG0.roa
File: 9oKcMDaiesNbrplqA5XM_jVahG0.roa (raw, json)
Hash identifier: Zjfrx4WPgo4k1uSXw5WH1H9Cp2RfWktwA9XHsrQAlGM=
Subject key identifier: F6:82:9C:30:36:A2:7A:C3:5B:AE:99:6A:03:95:CC:FE:35:5A:84:6D
Certificate issuer: /CN=073a6d3de5c125c1fe8b5fbe89584656e5861a2d
Certificate serial: 018CC6B8A9ECE0E46F883C253A385CEC9B71
Authority key identifier: 07:3A:6D:3D:E5:C1:25:C1:FE:8B:5F:BE:89:58:46:56:E5:86:1A:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BzptPeXBJcH-i1--iVhGVuWGGi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/8d7e7c-db7a-465f-8032-255100f2016a/1/9oKcMDaiesNbrplqA5XM_jVahG0.roa
Signing time: Mon 01 Jan 2024 20:30:40 +0000
ROA not before: Mon 01 Jan 2024 20:30:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39405
IP address blocks: 185.246.25.0/24 maxlen: 24
185.224.35.0/24 maxlen: 24
185.224.34.0/24 maxlen: 24
185.224.33.0/24 maxlen: 24
185.224.32.0/24 maxlen: 24
185.246.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/8d7e7c-db7a-465f-8032-255100f2016a/1/BzptPeXBJcH-i1--iVhGVuWGGi0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/8d7e7c-db7a-465f-8032-255100f2016a/1/BzptPeXBJcH-i1--iVhGVuWGGi0.mft
rsync://rpki.ripe.net/repository/DEFAULT/BzptPeXBJcH-i1--iVhGVuWGGi0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 20:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:a9:ec:e0:e4:6f:88:3c:25:3a:38:5c:ec:9b:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=073a6d3de5c125c1fe8b5fbe89584656e5861a2d
Validity
Not Before: Jan 1 20:30:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f6829c3036a27ac35bae996a0395ccfe355a846d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:22:f9:8e:bd:1b:cf:73:f1:46:7f:08:68:65:
85:10:50:a5:81:a9:ad:fa:9e:2e:85:e1:88:9e:7d:
34:05:4b:ab:9a:ce:bc:02:78:26:9b:d2:e4:71:7f:
d7:82:52:b6:9f:e8:16:a6:c0:d6:f8:39:aa:b1:e1:
e6:a7:09:15:53:3e:25:c4:0b:38:d5:9a:4b:cc:ec:
b8:85:e5:ac:ee:43:d8:83:f0:27:5d:52:5f:72:b3:
ff:a6:ea:e4:43:5e:92:7c:21:c7:31:2d:a1:c1:7e:
40:95:37:db:c4:ef:b3:f9:26:34:41:a6:27:11:42:
a0:82:27:3b:89:fa:d1:4a:b6:d7:ac:f9:b7:19:ec:
25:1e:ef:de:9e:78:45:11:a2:ed:01:e1:23:03:49:
7f:79:37:20:f0:27:5c:a1:30:a9:ed:2c:bb:59:84:
5f:b5:4d:c8:9e:9d:c1:80:21:6f:48:7c:c5:40:cf:
84:f7:c7:51:d2:b3:fd:75:4b:e4:d9:df:e8:b3:3a:
c8:a8:63:ba:5f:5f:b7:ed:6e:59:15:13:fd:0e:5b:
04:1c:13:20:2f:b6:58:db:4e:b3:b4:c6:d9:72:dc:
7b:3d:af:9d:85:1b:b1:3f:96:06:12:c6:2a:17:db:
02:2c:d6:07:be:21:63:5f:87:2c:14:41:b1:85:38:
d6:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:82:9C:30:36:A2:7A:C3:5B:AE:99:6A:03:95:CC:FE:35:5A:84:6D
X509v3 Authority Key Identifier:
keyid:07:3A:6D:3D:E5:C1:25:C1:FE:8B:5F:BE:89:58:46:56:E5:86:1A:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BzptPeXBJcH-i1--iVhGVuWGGi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/8d7e7c-db7a-465f-8032-255100f2016a/1/9oKcMDaiesNbrplqA5XM_jVahG0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/8d7e7c-db7a-465f-8032-255100f2016a/1/BzptPeXBJcH-i1--iVhGVuWGGi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.224.32.0/22
185.246.24.0/23
Signature Algorithm: sha256WithRSAEncryption
3e:09:89:61:f2:86:08:33:05:4c:a4:be:5f:f4:3b:db:6b:08:
6a:9a:6a:4c:ce:27:15:e3:bb:88:1b:cb:a7:65:fe:bb:30:5c:
9a:2b:57:36:89:ce:ed:5f:c6:f2:e8:e3:d6:3d:0f:4a:b3:f4:
1d:d1:1b:93:f3:c1:be:f3:2a:5e:8d:a4:06:77:7c:7b:64:50:
77:cb:d3:7f:7f:17:5b:a1:2f:61:0b:88:fc:13:2b:49:61:3f:
21:04:bd:0c:96:fb:3e:e0:01:14:6c:ad:c8:ce:0a:0d:2e:2b:
b0:0c:f4:da:ee:aa:52:94:42:99:46:e8:f0:2f:54:d3:58:68:
67:73:8b:11:da:44:77:b6:e6:ac:91:86:9c:6b:26:5f:a2:ea:
9f:ee:7e:2d:52:c7:18:43:75:db:00:e3:a5:4d:c5:26:69:70:
51:73:80:65:bc:25:b3:fb:a5:1b:d0:d8:c4:8e:9c:5e:82:15:
5b:2e:8a:09:c0:19:91:fb:b7:23:c0:0b:d9:ea:41:fc:3e:70:
4b:b5:20:d5:84:ce:01:46:de:b9:ad:dd:72:51:89:93:28:a4:
02:a8:f6:13:41:a5:fa:81:f4:68:26:ec:ac:5a:d0:6d:fc:6f:
6f:03:41:c9:4e:e4:81:cb:4d:82:53:1b:cd:b3:06:c0:e7:67:
ce:11:bc:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 02:02:19 2024 by rpki-client on console-fra.rpki-client.org