Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/v3iLdDVFlVLK4zkQDEULWLPb2mw.roa
File: v3iLdDVFlVLK4zkQDEULWLPb2mw.roa (raw, json)
Hash identifier: 55LxVJKD+qUdYUz5nbxwoPwowaYGU/ldvPsjKtXA2vs=
Subject key identifier: BF:78:8B:74:35:45:95:52:CA:E3:39:10:0C:45:0B:58:B3:DB:DA:6C
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 0190E130B8E0BE645B82143E9554699E9ABF
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/v3iLdDVFlVLK4zkQDEULWLPb2mw.roa
Signing time: Tue 23 Jul 2024 20:03:04 +0000
ROA not before: Tue 23 Jul 2024 20:03:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60024
IP address blocks: 37.123.192.0/21 maxlen: 24
82.115.30.0/23 maxlen: 24
185.148.12.0/22 maxlen: 24
185.212.60.0/22 maxlen: 24
185.218.4.0/22 maxlen: 24
212.107.28.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:e1:30:b8:e0:be:64:5b:82:14:3e:95:54:69:9e:9a:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Jul 23 20:03:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bf788b7435459552cae339100c450b58b3dbda6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:38:f2:83:63:29:ef:fc:8f:ef:c0:ca:10:10:
6b:40:fc:91:2c:7d:cd:ab:59:0d:67:f8:98:24:8e:
45:12:20:d8:9e:ec:c7:a0:e4:ff:7f:83:02:a0:ee:
8c:e0:63:48:64:39:fb:f7:df:c2:9a:9e:55:b3:2e:
8d:e5:45:62:11:91:e8:14:6d:76:a4:74:55:fc:ae:
36:a2:e6:b6:6d:86:f3:70:13:59:36:4a:57:0f:b3:
27:4a:1a:bc:79:c7:66:61:5a:d8:bf:fc:36:79:84:
0b:a4:85:11:fe:a4:58:eb:b7:dc:07:57:e5:66:b9:
a4:ba:ff:ef:bf:09:ec:9b:33:43:c3:77:6f:95:ee:
5a:b2:7d:7d:8d:cb:ee:01:54:e5:c7:98:f9:9e:2b:
c8:ee:d4:73:a6:6f:2d:f0:20:f2:3a:96:d7:c1:0d:
d0:f9:50:60:2a:ac:3f:37:85:3e:91:34:53:bd:da:
60:52:43:ee:cb:f3:af:01:fd:d2:1c:fc:95:45:06:
b9:cc:ac:37:43:e3:9c:ce:86:b0:71:ba:9b:fa:9d:
5a:7e:ed:de:fa:a3:29:81:ac:3a:45:b2:ef:87:ca:
d8:62:17:36:5f:74:33:59:93:74:ad:60:ed:9d:c3:
1f:c1:9c:cf:a4:21:a6:33:7d:ee:e0:44:ba:3a:b5:
e1:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:78:8B:74:35:45:95:52:CA:E3:39:10:0C:45:0B:58:B3:DB:DA:6C
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/v3iLdDVFlVLK4zkQDEULWLPb2mw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.123.192.0/21
82.115.30.0/23
185.148.12.0/22
185.212.60.0/22
185.218.4.0/22
212.107.28.0/22
Signature Algorithm: sha256WithRSAEncryption
2c:31:29:27:12:56:4e:65:60:d8:f9:5c:98:5b:52:8a:87:70:
33:98:bc:90:64:3f:63:d7:ee:a6:62:88:b6:71:fa:f1:32:ea:
65:3b:89:32:52:38:af:44:f2:1c:48:21:cb:fd:c6:6c:5c:1a:
1c:c9:a0:89:cc:38:c3:72:40:8d:02:61:74:bf:8f:93:dc:b9:
14:df:f6:cd:d9:86:de:04:58:88:44:44:0f:dd:4b:25:61:45:
43:c3:0f:20:2e:a5:1d:e7:6a:0d:9c:de:08:13:9e:2a:ba:3a:
07:30:3a:20:cc:e8:60:5c:6f:b1:41:6d:04:e0:fe:90:ab:47:
9f:02:11:36:8a:0b:b2:40:21:f8:9e:39:46:90:13:73:f1:bc:
a1:59:3d:5b:c2:fb:e4:44:d7:6f:be:0d:f8:8e:08:76:d3:ad:
8f:e7:b3:f2:94:c5:c4:57:69:c9:1c:d5:f3:6b:c9:42:97:bd:
b3:36:ea:62:43:fa:62:ff:91:09:0f:4d:bd:d6:08:fa:a9:33:
34:9c:31:6a:66:b2:b1:19:fc:fb:f1:27:1f:12:98:0d:73:4f:
99:b3:a0:f9:49:8c:52:a5:aa:7b:d2:64:a6:1c:17:73:55:b3:
1d:f7:de:4b:cf:fc:de:68:41:52:9e:e7:77:77:5e:61:d4:ec:
af:03:f1:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:28:10 2024 by rpki-client on console-ams.rpki-client.org