Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/bCySHOdChuhPGPbj9pU3K2CrVFs.roa
File: bCySHOdChuhPGPbj9pU3K2CrVFs.roa (raw, json)
Hash identifier: 7vh7kCBZ/fwbD0QWDSHqo+QjwefnW0fS1wMEzVRvSvw=
Subject key identifier: 6C:2C:92:1C:E7:42:86:E8:4F:18:F6:E3:F6:95:37:2B:60:AB:54:5B
Certificate issuer: /CN=d434f1686102876c6216bcea28a5e502ec0d7b6b
Certificate serial: 018CC5DCB6ABBAC57AE8F81A48B90F633236
Authority key identifier: D4:34:F1:68:61:02:87:6C:62:16:BC:EA:28:A5:E5:02:EC:0D:7B:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DTxaGECh2xiFrzqKKXlAuwNe2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/bCySHOdChuhPGPbj9pU3K2CrVFs.roa
Signing time: Mon 01 Jan 2024 16:30:25 +0000
ROA not before: Mon 01 Jan 2024 16:30:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207412
IP address blocks: 62.81.242.0/24 maxlen: 24
5.40.77.0/24 maxlen: 24
5.40.224.0/24 maxlen: 24
62.175.180.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/1DTxaGECh2xiFrzqKKXlAuwNe2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 04:53:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:b6:ab:ba:c5:7a:e8:f8:1a:48:b9:0f:63:32:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d434f1686102876c6216bcea28a5e502ec0d7b6b
Validity
Not Before: Jan 1 16:30:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6c2c921ce74286e84f18f6e3f695372b60ab545b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:89:43:4b:24:23:ed:32:a7:2c:da:51:cc:cb:
46:26:9c:b5:ef:b0:35:4a:75:99:8f:30:77:52:34:
f4:2e:f9:9e:30:b1:08:a3:d1:85:d6:7f:61:d1:83:
69:de:59:ba:e1:88:6a:c2:28:c6:cc:53:51:3e:90:
ed:c1:fa:4e:7d:48:e5:c5:f8:ef:c0:1f:c6:1c:c4:
8b:a7:2b:35:f6:7b:4c:cf:2d:d7:54:6c:52:63:b3:
3f:ac:63:bd:31:42:c0:9b:02:3e:f4:75:70:82:d7:
1f:8d:ff:7f:96:c8:6d:a0:e1:5f:50:a0:08:4a:76:
25:35:82:86:35:23:24:b7:bf:6d:df:d9:5b:33:bb:
6c:d7:b9:f1:c6:c0:b9:7f:50:ad:d7:f9:fa:66:f9:
50:34:e6:e3:4d:04:94:72:e9:02:69:c9:27:37:53:
2c:e9:1c:1b:44:f5:39:13:5e:e3:66:fc:bd:5d:bb:
67:ef:c3:2f:de:72:05:62:15:ad:41:96:8c:cc:05:
a2:08:40:09:fd:e4:a2:73:9b:f2:81:fc:b7:66:8a:
a5:b8:47:25:4f:03:54:ff:74:9b:6c:a0:8b:28:79:
b4:ae:c9:0f:53:a9:72:4a:53:ef:66:13:fa:ad:9b:
0e:c4:26:c1:4e:0c:9d:18:a9:b2:1b:0f:5a:04:b6:
18:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:2C:92:1C:E7:42:86:E8:4F:18:F6:E3:F6:95:37:2B:60:AB:54:5B
X509v3 Authority Key Identifier:
keyid:D4:34:F1:68:61:02:87:6C:62:16:BC:EA:28:A5:E5:02:EC:0D:7B:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DTxaGECh2xiFrzqKKXlAuwNe2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/bCySHOdChuhPGPbj9pU3K2CrVFs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.40.77.0/24
5.40.224.0/24
62.81.242.0/24
62.175.180.0/24
Signature Algorithm: sha256WithRSAEncryption
52:54:55:96:c1:2d:96:46:e3:0a:a5:aa:5f:4d:a7:3b:af:22:
42:d6:45:40:4a:25:0d:a9:b0:23:fc:d6:c3:b5:76:0d:c1:3c:
83:e8:79:d9:63:c2:fc:63:f2:2a:cc:e3:a5:39:5a:90:21:79:
8e:80:22:a0:88:40:73:84:34:59:e2:9a:ab:af:db:b5:10:01:
76:4a:47:f1:3f:c5:82:64:d2:64:22:af:98:b4:54:15:61:ae:
56:47:18:35:0f:20:93:12:26:86:00:4a:bd:ff:3f:bc:a4:f2:
2d:2d:9e:39:60:05:2c:81:f1:dc:a0:8e:b7:cc:ab:53:be:94:
5f:dd:72:cd:8d:51:d4:ae:2a:8e:49:05:eb:8b:77:e5:6d:36:
a4:b3:11:da:27:ad:ca:ce:0d:82:c3:1e:4d:c7:9a:6b:81:7c:
f8:3b:05:75:df:10:af:29:c6:8b:0c:07:5e:58:f9:ae:6d:fa:
de:bc:06:52:b9:b2:aa:ab:ea:47:92:9b:ba:17:a8:4e:c6:eb:
32:0d:5b:1b:69:23:60:e4:5e:16:a6:02:15:fb:bc:e3:bb:da:
39:be:68:da:ed:6b:f3:01:bf:81:7d:4d:32:34:0a:1f:c0:b1:
c5:4c:25:da:51:34:58:ad:58:a5:78:08:03:3e:3b:13:66:5e:
ac:8e:7f:e6
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYzF3LarusV66PgaSLkPYzI2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0MzRmMTY4NjEwMjg3NmM2MjE2YmNlYTI4YTVlNTAyZWMw
ZDdiNmIwHhcNMjQwMTAxMTYzMDI1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YzJjOTIxY2U3NDI4NmU4NGYxOGY2ZTNmNjk1MzcyYjYwYWI1NDViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp4lDSyQj7TKnLNpRzMtGJpy177A1
SnWZjzB3UjT0LvmeMLEIo9GF1n9h0YNp3lm64YhqwijGzFNRPpDtwfpOfUjlxfjv
wB/GHMSLpys19ntMzy3XVGxSY7M/rGO9MULAmwI+9HVwgtcfjf9/lshtoOFfUKAI
SnYlNYKGNSMkt79t39lbM7ts17nxxsC5f1Ct1/n6ZvlQNObjTQSUcukCacknN1Ms
6RwbRPU5E17jZvy9Xbtn78Mv3nIFYhWtQZaMzAWiCEAJ/eSic5vygfy3ZoqluEcl
TwNU/3SbbKCLKHm0rskPU6lySlPvZhP6rZsOxCbBTgydGKmyGw9aBLYYswIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFGwskhznQoboTxj24/aVNytgq1RbMB8GA1UdIwQY
MBaAFNQ08WhhAodsYha86iil5QLsDXtrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMURUeGFHRUNoMnhpRnJ6cUtLWGxBdXdOZTJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC83MjZiYjQtNWQ4Ny00MDJkLTkxY2Ut
NTcxMmQ5NWFlNjM4LzEvYkN5U0hPZENodWhQR1BiajlwVTNLMkNyVkZzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC83MjZiYjQtNWQ4Ny00MDJkLTkxY2UtNTcxMmQ5NWFlNjM4
LzEvMURUeGFHRUNoMnhpRnJ6cUtLWGxBdXdOZTJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQABShNAwQA
BSjgAwQAPlHyAwQAPq+0MA0GCSqGSIb3DQEBCwUAA4IBAQBSVFWWwS2WRuMKpapf
Tac7ryJC1kVASiUNqbAj/NbDtXYNwTyD6HnZY8L8Y/IqzOOlOVqQIXmOgCKgiEBz
hDRZ4pqrr9u1EAF2SkfxP8WCZNJkIq+YtFQVYa5WRxg1DyCTEiaGAEq9/z+8pPIt
LZ45YAUsgfHcoI63zKtTvpRf3XLNjVHUriqOSQXri3flbTaksxHaJ63Kzg2Cwx5N
x5prgXz4OwV13xCvKcaLDAdeWPmubfrevAZSubKqq+pHkpu6F6hOxusyDVsbaSNg
5F4WpgIV+7zju9o5vmja7WvzAb+BfU0yNAofwLHFTCXaUTRYrVileAgDPjsTZl6s
jn/m
-----END CERTIFICATE-----
Generated at Sun May 19 10:59:09 2024 by rpki-client on console-fra.rpki-client.org