Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/fc2815-d293-40af-bf3c-1c8afd19fdbb/1/u3neHGntDt95dz05wDP8ysoR2wQ.roa
File: u3neHGntDt95dz05wDP8ysoR2wQ.roa (raw, json)
Hash identifier: 4X0IWoouLLAosmMEAqakvpj6XHBAaZQoHM5TKd0N9y8=
Subject key identifier: BB:79:DE:1C:69:ED:0E:DF:79:77:3D:39:C0:33:FC:CA:CA:11:DB:04
Certificate issuer: /CN=c6c58ed1af964a7668e44397619ee1985a2491c5
Certificate serial: 018CC56DFA065364C03C33443F2D39B2DF81
Authority key identifier: C6:C5:8E:D1:AF:96:4A:76:68:E4:43:97:61:9E:E1:98:5A:24:91:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xsWO0a-WSnZo5EOXYZ7hmFokkcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/fc2815-d293-40af-bf3c-1c8afd19fdbb/1/u3neHGntDt95dz05wDP8ysoR2wQ.roa
Signing time: Mon 01 Jan 2024 14:29:28 +0000
ROA not before: Mon 01 Jan 2024 14:29:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 24991
IP address blocks: 81.93.192.0/21 maxlen: 21
81.93.202.0/23 maxlen: 23
81.93.201.0/24 maxlen: 24
81.93.200.0/24 maxlen: 24
81.93.204.0/22 maxlen: 22
2a03:da00::/36 maxlen: 36
2a03:da00:1000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/fc2815-d293-40af-bf3c-1c8afd19fdbb/1/xsWO0a-WSnZo5EOXYZ7hmFokkcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/fc2815-d293-40af-bf3c-1c8afd19fdbb/1/xsWO0a-WSnZo5EOXYZ7hmFokkcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xsWO0a-WSnZo5EOXYZ7hmFokkcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 14:21:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6d:fa:06:53:64:c0:3c:33:44:3f:2d:39:b2:df:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6c58ed1af964a7668e44397619ee1985a2491c5
Validity
Not Before: Jan 1 14:29:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bb79de1c69ed0edf79773d39c033fccaca11db04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:74:ae:e6:11:1d:67:86:7a:4d:57:13:c0:5c:
3f:e3:73:8f:eb:44:fa:7e:d4:8c:ab:5f:3d:52:c1:
d7:ec:23:20:b6:3f:c6:4f:e0:ff:d5:48:d8:2a:e1:
92:c7:cc:a1:70:33:61:22:be:24:5b:de:20:4b:16:
31:67:5e:f7:f2:20:17:e8:f0:94:b1:01:4c:da:c8:
81:f4:fe:65:60:c1:cf:1c:c7:6f:2e:92:ee:78:57:
97:da:87:e6:f3:69:ab:87:fd:6d:93:ca:d9:4e:1f:
9a:92:18:30:00:83:3b:86:32:43:46:6a:22:40:e2:
a0:9d:20:2b:fb:e6:17:7a:5a:9e:f1:a1:33:36:35:
2f:55:75:78:b3:9d:8c:9b:58:8e:da:c0:43:4f:eb:
28:8b:54:4c:3c:fa:7f:c6:3e:d5:19:06:89:98:76:
60:83:01:83:32:50:53:97:2a:2b:20:70:b5:1e:ff:
4f:56:8e:89:cb:22:07:95:e2:1f:a8:9e:c5:9f:9c:
dd:68:66:9a:ac:58:0e:43:6b:66:5c:32:9d:b0:7d:
33:8b:9c:a8:44:bd:4f:b7:34:52:02:fa:82:9d:38:
45:76:38:b3:0a:fb:e9:67:dd:bc:ab:64:93:94:bb:
c5:33:32:f5:2b:c3:eb:fa:60:ae:99:11:2e:3e:2c:
a4:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:79:DE:1C:69:ED:0E:DF:79:77:3D:39:C0:33:FC:CA:CA:11:DB:04
X509v3 Authority Key Identifier:
keyid:C6:C5:8E:D1:AF:96:4A:76:68:E4:43:97:61:9E:E1:98:5A:24:91:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xsWO0a-WSnZo5EOXYZ7hmFokkcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/fc2815-d293-40af-bf3c-1c8afd19fdbb/1/u3neHGntDt95dz05wDP8ysoR2wQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/fc2815-d293-40af-bf3c-1c8afd19fdbb/1/xsWO0a-WSnZo5EOXYZ7hmFokkcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.93.192.0/20
IPv6:
2a03:da00::/35
Signature Algorithm: sha256WithRSAEncryption
2a:2b:50:08:8e:38:88:1b:69:d2:71:b1:f1:28:d0:2c:66:b5:
2a:c3:12:92:fd:92:07:b2:b3:86:cd:cf:55:ac:b9:5d:5a:fa:
64:4e:8d:31:7e:77:d1:28:e9:ad:f2:7c:bd:42:eb:07:75:13:
8e:9d:af:f2:a7:5d:b8:7f:66:d5:26:96:ab:6d:9c:0d:ab:28:
62:84:07:ff:fa:d8:4c:d6:47:10:da:16:dd:c9:0a:08:9b:ab:
1b:63:ce:b1:16:a7:d0:46:8c:e1:31:1a:f9:b6:e6:66:f7:45:
1b:4e:c0:25:ba:61:4e:99:eb:a4:a3:b6:7d:26:4c:69:7c:73:
38:6b:83:c8:fc:d7:b4:a2:56:e2:f2:78:02:d3:e4:e6:6c:10:
92:32:43:d3:80:02:fa:c3:52:0a:a6:7b:40:17:a3:a0:b9:95:
d7:ee:91:9c:15:4f:7f:43:d3:97:c9:1b:e1:1e:35:11:e6:e6:
1c:3a:14:f0:2e:9c:6d:24:bb:d5:d9:fb:f7:2e:00:45:1b:91:
6e:d1:b4:73:44:d6:fa:97:6d:ae:4a:97:12:9c:83:2e:f1:b7:
97:3c:d8:39:e9:86:5f:99:c2:26:67:89:cc:fa:51:e8:92:a0:
f7:07:75:62:50:a3:c4:ae:c7:82:fd:7b:83:5f:fa:f0:67:78:
e9:4c:e1:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 19:23:21 2024 by rpki-client on console-ams.rpki-client.org