Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/f143d0-aeb8-4b52-9c35-b3a50910c2a8/1/1tt1t2H9FWBttBdPE9kv1Kzm2AM.roa
File: 1tt1t2H9FWBttBdPE9kv1Kzm2AM.roa (raw, json)
Hash identifier: 3APSN9UuoytedEeOIFcqYwly4bgx3SKAU1Lk5AoPM+Y=
Subject key identifier: D6:DB:75:B7:61:FD:15:60:6D:B4:17:4F:13:D9:2F:D4:AC:E6:D8:03
Certificate issuer: /CN=a999cffa6e48fa2c4f8d09803396b457a630a33d
Certificate serial: 018EF634867087858343778E6F419FA6AD34
Authority key identifier: A9:99:CF:FA:6E:48:FA:2C:4F:8D:09:80:33:96:B4:57:A6:30:A3:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/f143d0-aeb8-4b52-9c35-b3a50910c2a8/1/1tt1t2H9FWBttBdPE9kv1Kzm2AM.roa
Signing time: Fri 19 Apr 2024 11:53:41 +0000
ROA not before: Fri 19 Apr 2024 11:53:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212655
IP address blocks: 45.92.44.0/22 maxlen: 24
185.154.144.0/22 maxlen: 22
193.28.90.0/24 maxlen: 24
2a0e:1d40::/29 maxlen: 29
2a10:6940::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/f143d0-aeb8-4b52-9c35-b3a50910c2a8/1/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/f143d0-aeb8-4b52-9c35-b3a50910c2a8/1/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.mft
rsync://rpki.ripe.net/repository/DEFAULT/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 08:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:f6:34:86:70:87:85:83:43:77:8e:6f:41:9f:a6:ad:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a999cffa6e48fa2c4f8d09803396b457a630a33d
Validity
Not Before: Apr 19 11:53:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d6db75b761fd15606db4174f13d92fd4ace6d803
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d5:7f:5e:6b:09:90:1b:5c:9f:4e:fe:02:3f:
0b:94:15:b7:06:17:90:13:15:79:f1:c6:5b:23:62:
eb:aa:df:59:48:14:ad:6f:5a:33:9f:5c:87:e8:8e:
97:ec:3e:9e:c1:00:ab:ad:1c:d5:09:d6:1b:50:1b:
e6:26:c6:59:6a:9a:3f:af:52:74:27:26:1d:5e:d5:
a5:3a:6e:bb:e4:db:45:fb:29:95:5d:db:c8:d5:0c:
c5:06:97:d0:bc:be:80:2d:06:9a:f7:8e:3a:ed:71:
75:85:e5:86:fe:56:e5:fd:82:49:2b:9d:ac:e0:72:
34:70:c5:14:2c:83:ec:ad:70:c2:14:90:05:59:ff:
fd:91:69:b1:e8:f2:33:4b:fe:22:43:60:ad:d4:79:
03:6a:62:7c:fc:38:1b:f1:7c:93:3b:98:2e:6a:09:
c4:79:76:cb:b9:a9:ca:40:55:f0:eb:37:d6:0a:bd:
b2:03:84:c3:f5:77:7c:32:08:ed:b7:85:31:ad:e1:
39:b8:88:e0:c4:45:4a:06:d5:76:56:72:b2:96:b4:
f9:35:2c:44:a1:11:49:d2:98:60:fc:4c:13:51:2c:
0d:15:45:29:54:90:0d:21:45:3f:66:1e:41:aa:1a:
9b:f4:da:f2:3a:7f:80:c6:16:57:62:54:9d:6c:8d:
6f:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:DB:75:B7:61:FD:15:60:6D:B4:17:4F:13:D9:2F:D4:AC:E6:D8:03
X509v3 Authority Key Identifier:
keyid:A9:99:CF:FA:6E:48:FA:2C:4F:8D:09:80:33:96:B4:57:A6:30:A3:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/f143d0-aeb8-4b52-9c35-b3a50910c2a8/1/1tt1t2H9FWBttBdPE9kv1Kzm2AM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/f143d0-aeb8-4b52-9c35-b3a50910c2a8/1/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.92.44.0/22
185.154.144.0/22
193.28.90.0/24
IPv6:
2a0e:1d40::/29
2a10:6940::/29
Signature Algorithm: sha256WithRSAEncryption
0a:3c:2e:44:4f:d7:e3:30:e0:55:a3:b5:74:02:6b:63:d9:c4:
e8:0e:88:3c:7b:21:9a:ce:c9:fe:7d:e2:15:18:32:32:fe:12:
43:d0:46:f3:de:e4:33:89:81:d2:af:73:13:12:1b:77:fb:0c:
f8:c8:2b:10:96:85:7d:c4:5d:dc:ea:87:1f:98:73:fa:89:16:
4d:7f:25:2f:10:82:3b:1e:da:ac:af:2d:aa:2e:a6:5f:eb:6c:
50:fa:63:90:9a:d4:32:a3:27:87:f8:f3:c3:d7:30:78:16:99:
55:3d:66:b4:84:1d:b5:19:35:ac:a7:bd:c6:e1:79:8e:14:05:
b7:05:34:a0:88:9e:b4:d8:b3:33:a5:ea:bc:96:d3:e4:4a:85:
1e:9b:9b:be:c5:5a:c0:7b:3e:3c:39:7e:9b:11:cb:59:89:6b:
a7:4a:db:9e:f7:9d:6b:e2:fc:c6:58:a7:0e:ee:b6:27:28:6a:
3d:eb:3c:ae:8f:e5:c3:eb:b4:73:44:58:44:77:f5:87:aa:6e:
56:2b:ab:7d:5b:ea:67:d7:21:2d:53:74:34:4c:91:94:18:d5:
57:c4:3d:a9:27:a8:bf:71:a6:e9:ed:49:b5:db:f0:b3:30:d8:
32:c2:bd:c2:40:2d:dc:97:1c:80:ac:45:70:33:cd:1b:10:a6:
70:31:ff:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 18:41:13 2024 by rpki-client on console-ams.rpki-client.org