Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/CBT3Y9dG8qoCOfVQn10tizdL_TY.roa
File: CBT3Y9dG8qoCOfVQn10tizdL_TY.roa (raw, json)
Hash identifier: EUd0n98vlpGhDXOJ+rYTsPE2FbMo4CAqmGf0Gnpl77c=
Subject key identifier: 08:14:F7:63:D7:46:F2:AA:02:39:F5:50:9F:5D:2D:8B:37:4B:FD:36
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 019330597A702D6069FFE24DC35D0403E7E8
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/CBT3Y9dG8qoCOfVQn10tizdL_TY.roa
Signing time: Fri 15 Nov 2024 15:03:10 +0000
ROA not before: Fri 15 Nov 2024 15:03:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212609
IP address blocks: 62.76.232.0/24 maxlen: 24
193.124.206.0/24 maxlen: 24
194.87.125.0/24 maxlen: 24
195.58.33.0/24 maxlen: 24
212.193.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 11:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:30:59:7a:70:2d:60:69:ff:e2:4d:c3:5d:04:03:e7:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Nov 15 15:03:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0814f763d746f2aa0239f5509f5d2d8b374bfd36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b7:79:c4:99:4b:e7:05:02:6e:f0:55:db:0c:
b9:8c:17:83:d9:ca:48:23:2f:c4:d1:cd:d6:8b:22:
20:f7:e8:f5:4e:f5:55:b1:2f:82:8e:cf:80:b2:14:
1d:02:54:25:72:52:fa:8d:84:9c:a5:13:5e:af:94:
de:21:8a:59:4d:90:7d:96:40:8a:fc:c7:fa:08:e3:
ae:21:77:19:77:34:e2:04:af:1f:62:c8:1b:fa:fd:
8b:d7:5b:1f:b5:c3:ed:ad:1f:2c:bf:ab:25:3b:7f:
44:28:4d:29:7c:d1:49:b3:50:ab:62:d8:30:20:87:
87:b7:4e:4f:4d:14:6b:7b:62:6b:c3:9f:bc:b4:93:
57:a6:82:ec:82:cd:73:51:25:fa:09:44:e9:69:7b:
3d:fd:e6:06:22:0a:3f:84:fe:f5:aa:29:a8:7a:d4:
fe:2d:17:35:7e:41:11:db:a6:58:c8:e7:1e:98:9d:
b7:97:fa:ca:b8:88:50:bd:c2:6b:2b:92:46:e7:d0:
b1:08:f7:12:d2:cc:35:f9:2c:23:51:d0:4b:b9:7f:
b3:74:bd:57:8e:70:81:9f:bb:96:58:d7:fb:5c:7c:
ae:8a:41:f7:0c:62:1a:a1:d5:2b:32:88:3d:24:f2:
fd:10:62:51:9e:17:22:3a:ff:32:77:c2:70:a3:b9:
0d:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:14:F7:63:D7:46:F2:AA:02:39:F5:50:9F:5D:2D:8B:37:4B:FD:36
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/CBT3Y9dG8qoCOfVQn10tizdL_TY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.232.0/24
193.124.206.0/24
194.87.125.0/24
195.58.33.0/24
212.193.9.0/24
Signature Algorithm: sha256WithRSAEncryption
67:cd:ae:f1:72:94:4b:34:2f:cc:c0:f0:36:9a:18:63:ee:ea:
20:89:cf:63:dc:e6:5c:48:52:c4:c7:d3:59:8c:ec:26:19:d6:
54:79:b5:a5:40:2e:b6:1a:6f:94:32:f3:df:b0:1c:52:38:98:
51:dd:25:3f:95:ba:65:f1:d2:5f:9b:4d:73:b8:0e:46:99:22:
86:75:8d:7d:1c:7a:b6:c4:69:33:ea:7e:41:3a:b6:6c:09:13:
47:d5:a9:e3:01:41:49:33:d3:30:92:a4:02:9e:b1:67:ca:ad:
18:87:cc:62:d6:c1:95:e8:13:9f:96:71:8f:d3:7f:3d:61:ca:
c7:d6:ec:cd:45:89:ca:20:f4:b9:b9:4b:b8:2d:b2:36:e5:87:
13:26:c3:3f:13:e3:19:e3:02:5e:c7:61:1e:fb:fa:95:47:cf:
8f:2e:d3:72:45:8f:96:6b:d4:23:11:73:e8:43:48:ac:9c:c8:
4f:f0:5a:76:c5:1d:a9:81:41:02:e0:2e:12:70:bb:6d:d8:ef:
fe:ff:7d:71:53:55:91:79:2e:0e:5a:e5:88:3a:56:d7:84:4b:
a5:b5:7a:41:33:c3:ef:a1:d3:07:82:04:75:f6:f4:03:4e:1e:
23:d6:df:6d:cd:07:98:78:a0:d7:b9:6c:97:51:4a:00:74:ec:
5f:51:88:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 13:56:40 2024 by rpki-client on console-ams.rpki-client.org