Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/8fe82f-e6cf-4a62-87dd-ea13eb797e8c/1/GlZ6ZWHeguacJpJ_4YnLMYuk1nc.roa
File: GlZ6ZWHeguacJpJ_4YnLMYuk1nc.roa (raw, json)
Hash identifier: eYcvK4rpVCRUs+uhzIpTus7h65uYyA9Z35VG3lNhp1o=
Subject key identifier: 1A:56:7A:65:61:DE:82:E6:9C:26:92:7F:E1:89:CB:31:8B:A4:D6:77
Certificate issuer: /CN=bc75052b50256ba562904e6f134350d3e75ded58
Certificate serial: 018CC56EE30DD56059C3B4F525BB9C63CC23
Authority key identifier: BC:75:05:2B:50:25:6B:A5:62:90:4E:6F:13:43:50:D3:E7:5D:ED:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vHUFK1Ala6VikE5vE0NQ0-dd7Vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/8fe82f-e6cf-4a62-87dd-ea13eb797e8c/1/GlZ6ZWHeguacJpJ_4YnLMYuk1nc.roa
Signing time: Mon 01 Jan 2024 14:30:27 +0000
ROA not before: Mon 01 Jan 2024 14:30:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16356
IP address blocks: 217.144.33.0/24 maxlen: 24
217.144.34.0/24 maxlen: 24
217.144.32.0/20 maxlen: 20
217.144.32.0/21 maxlen: 21
217.144.40.0/22 maxlen: 22
217.144.44.0/24 maxlen: 24
217.144.47.0/24 maxlen: 24
217.144.45.0/24 maxlen: 24
217.144.46.0/24 maxlen: 24
2a02:2a10::/64 maxlen: 64
2a02:2a10::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/8fe82f-e6cf-4a62-87dd-ea13eb797e8c/1/vHUFK1Ala6VikE5vE0NQ0-dd7Vg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/8fe82f-e6cf-4a62-87dd-ea13eb797e8c/1/vHUFK1Ala6VikE5vE0NQ0-dd7Vg.mft
rsync://rpki.ripe.net/repository/DEFAULT/vHUFK1Ala6VikE5vE0NQ0-dd7Vg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 20:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:e3:0d:d5:60:59:c3:b4:f5:25:bb:9c:63:cc:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc75052b50256ba562904e6f134350d3e75ded58
Validity
Not Before: Jan 1 14:30:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1a567a6561de82e69c26927fe189cb318ba4d677
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:8a:22:04:cc:a8:0f:14:f7:c3:92:c5:1c:86:
09:b2:ab:fd:8f:cf:14:8a:1f:15:81:e0:90:c3:89:
3e:c4:89:ba:49:6d:9c:7e:b2:6b:94:d5:8e:77:88:
7b:62:de:26:f8:33:35:9f:49:ea:c0:45:5e:99:ce:
16:99:2e:2b:fc:f8:c2:2b:54:fc:28:4b:fb:e9:fa:
f2:94:90:f2:c1:ab:a4:7f:ec:a2:2d:4e:e2:34:f2:
25:f0:36:c9:72:06:59:fd:1e:be:c8:fa:52:41:ff:
cf:9c:ee:0f:1d:49:05:49:f1:d6:59:31:55:27:07:
7d:c7:dd:90:e7:8e:5c:77:b0:13:65:3f:66:23:af:
36:b5:76:b9:a9:89:11:2b:85:3b:f6:71:05:7b:cc:
10:d4:4b:50:ab:2f:a9:c8:41:39:52:a3:f5:8f:c2:
2d:c8:02:aa:06:6b:3c:03:10:80:ea:57:03:3f:d4:
55:d5:1a:38:21:db:ee:2f:79:b2:2a:b3:a4:4f:3b:
a9:0d:fa:7b:76:6a:63:a9:50:6d:31:66:59:33:0e:
29:0d:56:4e:c4:d2:2b:d7:b6:34:93:0f:4e:d5:c8:
4f:b2:4b:56:47:d7:38:55:d2:c5:29:3a:bf:e6:97:
37:be:f1:e3:18:bc:2a:38:f7:65:a4:5e:4d:22:7e:
7d:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:56:7A:65:61:DE:82:E6:9C:26:92:7F:E1:89:CB:31:8B:A4:D6:77
X509v3 Authority Key Identifier:
keyid:BC:75:05:2B:50:25:6B:A5:62:90:4E:6F:13:43:50:D3:E7:5D:ED:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vHUFK1Ala6VikE5vE0NQ0-dd7Vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/8fe82f-e6cf-4a62-87dd-ea13eb797e8c/1/GlZ6ZWHeguacJpJ_4YnLMYuk1nc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/8fe82f-e6cf-4a62-87dd-ea13eb797e8c/1/vHUFK1Ala6VikE5vE0NQ0-dd7Vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.144.32.0/20
IPv6:
2a02:2a10::/32
Signature Algorithm: sha256WithRSAEncryption
25:1a:3e:52:1b:49:3c:78:00:64:56:a6:48:4d:19:33:d4:f4:
36:f9:d6:e2:5d:66:02:8a:c0:60:25:36:9c:97:df:c1:a2:97:
b6:98:01:8d:bc:43:7e:8f:51:b0:1b:75:2e:11:66:a9:e2:95:
8d:6b:03:f6:da:f2:0d:77:25:02:58:a4:ef:75:14:c1:91:0e:
e5:4f:c4:c3:44:d8:cf:3f:fa:28:31:09:d0:71:6a:ba:fc:e5:
02:3f:92:4a:b0:11:aa:4d:f3:43:d4:f5:ed:1c:c0:26:34:bf:
d9:7e:1e:0f:d7:24:3b:53:b8:d8:d5:89:48:c5:8a:05:3e:87:
52:f2:22:46:da:60:2a:25:4c:40:eb:9b:0d:df:98:c1:03:7e:
a1:22:5f:59:12:a3:26:1e:6a:be:80:6f:b8:e3:26:ef:9b:7c:
08:df:67:15:e4:c5:ec:b1:c3:7c:86:11:57:20:7e:07:a4:09:
a9:23:cc:4c:35:b2:da:b2:ad:b5:74:d1:d5:88:bb:f2:c6:c3:
0b:1a:dd:70:dc:02:c0:35:94:34:ae:44:71:75:3e:70:9f:e9:
af:79:ed:b9:c3:cf:fe:52:d4:d7:1e:22:9c:cd:95:72:17:c0:
03:91:61:75:fb:03:3b:5d:fa:17:1b:f6:6e:96:b7:0d:d0:09:
c7:bb:47:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 04:03:01 2024 by rpki-client on console-fra.rpki-client.org