Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/f57b93-d253-4fbb-a31e-6b89fa46757c/1/39qsgcALWXAsBZwDxfKxkkOxTYA.roa
File: 39qsgcALWXAsBZwDxfKxkkOxTYA.roa (raw, json)
Hash identifier: xnwEVCqN8YaV+cty7i4OkxbwNk9TbP8vm2j3or+7i3c=
Subject key identifier: DF:DA:AC:81:C0:0B:59:70:2C:05:9C:03:C5:F2:B1:92:43:B1:4D:80
Certificate issuer: /CN=b8dafa7ea553178133e7e84feeb8ac3a9dbcf9ca
Certificate serial: 018CC34948CE082C6EDBAFC09D44BAC9F7A0
Authority key identifier: B8:DA:FA:7E:A5:53:17:81:33:E7:E8:4F:EE:B8:AC:3A:9D:BC:F9:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uNr6fqVTF4Ez5-hP7risOp28-co.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/f57b93-d253-4fbb-a31e-6b89fa46757c/1/39qsgcALWXAsBZwDxfKxkkOxTYA.roa
Signing time: Mon 01 Jan 2024 04:30:08 +0000
ROA not before: Mon 01 Jan 2024 04:30:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208124
IP address blocks: 185.254.165.0/24 maxlen: 24
91.209.161.0/24 maxlen: 24
2a10:b240::/29 maxlen: 29
2a10:c4c0::/29 maxlen: 29
2a12:8840::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/f57b93-d253-4fbb-a31e-6b89fa46757c/1/uNr6fqVTF4Ez5-hP7risOp28-co.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/f57b93-d253-4fbb-a31e-6b89fa46757c/1/uNr6fqVTF4Ez5-hP7risOp28-co.mft
rsync://rpki.ripe.net/repository/DEFAULT/uNr6fqVTF4Ez5-hP7risOp28-co.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 25 Jun 2024 07:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:48:ce:08:2c:6e:db:af:c0:9d:44:ba:c9:f7:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8dafa7ea553178133e7e84feeb8ac3a9dbcf9ca
Validity
Not Before: Jan 1 04:30:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dfdaac81c00b59702c059c03c5f2b19243b14d80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b9:ce:09:93:5f:3b:e4:45:7e:29:ca:37:47:
c3:72:fd:08:a0:99:a5:c9:be:63:f3:ec:0c:3a:c5:
ca:21:2f:8b:d4:e7:ac:50:7a:30:6b:dc:53:95:0d:
a2:46:5b:7b:66:bd:f8:95:cc:d5:86:6b:99:15:8a:
ee:8d:f9:07:aa:ae:ba:11:51:92:ae:b1:1c:58:d1:
56:4d:dc:f3:d0:d5:9a:7a:69:9a:9e:2b:32:34:f6:
f7:67:57:bc:c5:6d:da:27:cf:d0:b0:a7:cc:72:c1:
8b:ab:7a:35:ef:05:e8:dc:a0:ba:fd:6d:f8:0e:79:
29:71:61:2d:38:cb:da:76:81:da:33:74:2a:bd:3e:
1f:ea:d2:b0:8e:50:28:73:97:ef:d5:54:84:ab:e3:
4a:d1:d4:69:ff:bd:bc:ab:f1:99:71:a3:43:ae:ac:
36:64:83:1e:52:54:73:bf:72:05:3d:b7:ca:3a:01:
81:c9:61:ef:2e:57:46:cd:fc:92:a5:44:fc:75:3a:
92:7a:f9:0f:b9:04:c5:ef:c3:89:d0:68:8c:d5:7c:
9c:09:d0:a0:0d:2c:3c:32:47:47:d9:e5:4a:0f:3e:
b4:fc:bf:7f:88:84:08:cb:2c:a6:24:86:b4:4f:c9:
0c:07:ac:62:4b:fd:09:68:bf:43:b0:c5:07:91:de:
27:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:DA:AC:81:C0:0B:59:70:2C:05:9C:03:C5:F2:B1:92:43:B1:4D:80
X509v3 Authority Key Identifier:
keyid:B8:DA:FA:7E:A5:53:17:81:33:E7:E8:4F:EE:B8:AC:3A:9D:BC:F9:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uNr6fqVTF4Ez5-hP7risOp28-co.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/f57b93-d253-4fbb-a31e-6b89fa46757c/1/39qsgcALWXAsBZwDxfKxkkOxTYA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/f57b93-d253-4fbb-a31e-6b89fa46757c/1/uNr6fqVTF4Ez5-hP7risOp28-co.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.209.161.0/24
185.254.165.0/24
IPv6:
2a10:b240::/29
2a10:c4c0::/29
2a12:8840::/29
Signature Algorithm: sha256WithRSAEncryption
22:3c:21:4a:04:67:3b:2d:4a:23:0d:7e:b6:f2:73:87:06:0b:
c7:a8:ac:a1:5e:cd:4c:ed:23:5b:d0:82:87:12:cc:7a:34:3a:
8c:67:af:b7:50:f1:f7:1f:cb:fd:20:86:8c:85:15:51:ff:82:
47:5b:9b:5d:48:47:aa:a8:b3:a7:33:00:a4:0f:21:ba:28:89:
10:95:7f:9f:85:09:f4:fb:4e:df:74:ca:c7:bd:c2:3b:ce:81:
c6:9f:87:27:51:fd:bc:29:c0:50:eb:91:39:46:34:8c:c7:64:
2f:31:61:2d:91:02:75:9e:4f:b3:92:09:62:cd:d3:67:97:e6:
ea:93:c5:85:b5:4b:77:de:a9:c1:b0:b5:a0:36:7a:32:ae:8a:
0a:ee:ae:ca:d8:cc:b1:ba:93:a0:a9:b2:27:bb:79:ea:cc:12:
d1:d9:b3:11:1b:2e:0e:0f:44:24:f1:63:c2:e0:bc:21:72:d8:
51:12:ae:48:2f:16:d8:6d:bd:e7:ad:30:59:5c:07:a7:91:96:
ea:53:07:00:28:9f:a5:2f:f5:c4:09:74:4d:8e:a1:00:97:b5:
e8:1c:0a:7c:85:f4:a8:63:7e:2f:5a:4e:ed:96:8b:0a:8e:c5:
0e:5e:4b:61:66:51:22:2d:01:56:fa:27:ce:d4:6e:c7:fe:11:
58:99:f9:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 11:18:00 2024 by rpki-client on console-ams.rpki-client.org