Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/348789-3208-4847-9c3f-982d1f21a32b/1/dsmUASdq9UQh17dwM1hOKZ8Z1kw.roa
File: dsmUASdq9UQh17dwM1hOKZ8Z1kw.roa (raw, json)
Hash identifier: qtxEpgaH01BTJFEvl//R3WBQ1A8iiRqj6K0WYBE3eB0=
Subject key identifier: 76:C9:94:01:27:6A:F5:44:21:D7:B7:70:33:58:4E:29:9F:19:D6:4C
Certificate issuer: /CN=cbf74cd846493138f522c57c0065b5c60512dd09
Certificate serial: 018CC3489566BF8A21113B4ADE46B229FA4E
Authority key identifier: CB:F7:4C:D8:46:49:31:38:F5:22:C5:7C:00:65:B5:C6:05:12:DD:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y_dM2EZJMTj1IsV8AGW1xgUS3Qk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/348789-3208-4847-9c3f-982d1f21a32b/1/dsmUASdq9UQh17dwM1hOKZ8Z1kw.roa
Signing time: Mon 01 Jan 2024 04:29:23 +0000
ROA not before: Mon 01 Jan 2024 04:29:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200478
IP address blocks: 141.226.226.0/24 maxlen: 24
141.226.224.0/23 maxlen: 24
141.226.231.0/24 maxlen: 24
141.226.124.0/24 maxlen: 24
141.226.227.0/24 maxlen: 24
141.226.230.0/24 maxlen: 24
141.226.229.0/24 maxlen: 24
141.226.228.0/24 maxlen: 24
141.226.127.0/24 maxlen: 24
185.106.32.0/22 maxlen: 24
2a06:3b80:110::/48 maxlen: 48
2a06:3b80:30::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/348789-3208-4847-9c3f-982d1f21a32b/1/y_dM2EZJMTj1IsV8AGW1xgUS3Qk.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/348789-3208-4847-9c3f-982d1f21a32b/1/y_dM2EZJMTj1IsV8AGW1xgUS3Qk.mft
rsync://rpki.ripe.net/repository/DEFAULT/y_dM2EZJMTj1IsV8AGW1xgUS3Qk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Jun 2024 13:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:95:66:bf:8a:21:11:3b:4a:de:46:b2:29:fa:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbf74cd846493138f522c57c0065b5c60512dd09
Validity
Not Before: Jan 1 04:29:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=76c99401276af54421d7b77033584e299f19d64c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:96:51:41:75:1f:17:b0:bf:23:f2:50:3f:b1:
1d:9d:ef:f9:e7:dd:7a:36:6d:13:94:5d:77:16:81:
9c:6d:e7:92:2b:de:dd:be:02:96:fd:b1:da:9a:2d:
45:c9:af:e2:8b:61:36:52:5a:15:ca:92:f7:77:f1:
5c:8b:f4:fb:c4:c9:c8:92:94:48:eb:7f:7b:8d:47:
0c:a9:fc:96:25:76:a4:91:6a:fb:b0:dc:9d:35:68:
9d:6c:fb:10:18:fa:68:79:86:31:42:fb:ab:6e:1d:
44:dc:33:86:6f:1a:c7:0e:ba:e3:d7:47:cd:fc:1c:
a9:44:69:f4:9c:c7:0a:5f:b6:1f:91:67:b7:6c:2e:
7a:3e:af:05:22:87:ea:db:ff:c8:be:99:a1:6f:52:
4f:01:34:3b:3d:3e:97:7a:83:b7:f9:1f:42:56:89:
ce:76:8c:29:3e:5a:9f:02:82:37:53:9b:6c:9a:69:
40:b1:ee:3d:1d:4d:d0:30:80:dc:2a:c5:c2:21:33:
f9:f4:64:e3:81:b7:e9:18:ad:1e:fd:e8:1a:d8:9e:
e9:26:a4:3e:4f:82:64:ae:85:24:c5:04:b0:59:bd:
99:1e:e7:f9:43:26:70:a0:52:49:9b:80:19:04:63:
4f:d3:2c:8e:de:74:ca:a2:57:51:f0:5d:c6:de:06:
f8:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:C9:94:01:27:6A:F5:44:21:D7:B7:70:33:58:4E:29:9F:19:D6:4C
X509v3 Authority Key Identifier:
keyid:CB:F7:4C:D8:46:49:31:38:F5:22:C5:7C:00:65:B5:C6:05:12:DD:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y_dM2EZJMTj1IsV8AGW1xgUS3Qk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/348789-3208-4847-9c3f-982d1f21a32b/1/dsmUASdq9UQh17dwM1hOKZ8Z1kw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/348789-3208-4847-9c3f-982d1f21a32b/1/y_dM2EZJMTj1IsV8AGW1xgUS3Qk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.226.124.0/24
141.226.127.0/24
141.226.224.0/21
185.106.32.0/22
IPv6:
2a06:3b80:30::/48
2a06:3b80:110::/48
Signature Algorithm: sha256WithRSAEncryption
94:42:1b:db:ae:30:42:90:09:4f:0a:30:70:94:98:a4:5d:32:
fd:74:10:ed:c7:a0:23:82:47:96:3f:ec:cb:f9:9a:ee:17:cf:
bc:ad:dd:6b:62:11:f6:c9:da:48:55:04:b7:65:06:18:0c:31:
91:75:d4:11:51:e6:89:39:b7:e4:7e:c2:93:b4:1f:1d:ef:95:
29:a5:c6:0b:c6:ec:7c:16:a3:68:9c:54:51:f8:49:3c:c2:07:
d2:30:e6:e6:50:06:b0:11:1d:f4:47:1f:c1:ad:61:cb:bd:f5:
cc:7f:15:94:a2:6c:d9:57:e6:1d:39:d7:2c:bb:d6:a2:0a:be:
59:b8:8e:69:74:44:69:18:4b:b3:83:48:9a:d3:53:06:70:d8:
0c:ab:ae:04:71:d3:4b:51:0a:cf:85:1c:f5:15:15:35:bd:3a:
9e:15:59:ba:bb:fe:b9:66:54:59:bc:58:b5:0b:92:85:c8:de:
3f:f1:16:bb:ac:e3:df:74:7b:f1:b7:e0:7f:28:a5:7c:b0:93:
7b:e9:67:bc:6c:15:60:95:d2:60:65:c0:0a:42:a4:a5:74:cf:
0f:82:85:1d:e4:79:d7:86:a1:d1:37:79:db:1e:e2:a7:c0:62:
a9:c8:51:fc:19:32:ba:3f:80:bd:9d:4f:01:de:02:66:4a:15:
1f:ad:94:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 17 18:58:07 2024 by rpki-client on console-ams.rpki-client.org