Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/2b417d-2869-411f-aeda-4a05bac5265f/1/so-2lDXNkhm_xs3byPNSVIOcTXk.roa
File: so-2lDXNkhm_xs3byPNSVIOcTXk.roa (raw, json)
Hash identifier: YWC1xh+XYQQqsk/hX2FRUjSFPhu4EavTzI0iPsFfbL0=
Subject key identifier: B2:8F:B6:94:35:CD:92:19:BF:C6:CD:DB:C8:F3:52:54:83:9C:4D:79
Certificate issuer: /CN=f98669d31a14dbdc5077159cf0a65353bfbfa20a
Certificate serial: 0193BA7CD1BED17A27B407B43D70AD794C49
Authority key identifier: F9:86:69:D3:1A:14:DB:DC:50:77:15:9C:F0:A6:53:53:BF:BF:A2:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-YZp0xoU29xQdxWc8KZTU7-_ogo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/2b417d-2869-411f-aeda-4a05bac5265f/1/so-2lDXNkhm_xs3byPNSVIOcTXk.roa
Signing time: Thu 12 Dec 2024 10:49:22 +0000
ROA not before: Thu 12 Dec 2024 10:49:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34222
IP address blocks: 37.46.208.0/21 maxlen: 21
217.198.112.0/20 maxlen: 20
2a00:19a0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/2b417d-2869-411f-aeda-4a05bac5265f/1/1-YZp0xoU29xQdxWc8KZTU7-_ogo.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/2b417d-2869-411f-aeda-4a05bac5265f/1/1-YZp0xoU29xQdxWc8KZTU7-_ogo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-YZp0xoU29xQdxWc8KZTU7-_ogo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Dec 2024 18:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:ba:7c:d1:be:d1:7a:27:b4:07:b4:3d:70:ad:79:4c:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f98669d31a14dbdc5077159cf0a65353bfbfa20a
Validity
Not Before: Dec 12 10:49:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b28fb69435cd9219bfc6cddbc8f35254839c4d79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:33:db:14:de:69:7f:84:aa:a4:2a:0c:7e:0f:
c2:aa:b9:8d:2e:b8:63:6b:ea:54:10:c4:2c:f3:15:
0b:81:48:7d:b4:fa:3a:27:13:4f:fb:d6:33:e1:7f:
99:8f:8b:f1:5c:c2:32:69:70:47:24:ce:3a:f2:d2:
c5:e2:c4:44:cd:d4:e4:9b:3f:5d:5b:64:3b:8e:78:
85:8b:82:67:7f:9f:e4:de:c6:b1:05:f6:ea:a7:f3:
f5:da:86:76:d1:8e:26:cf:61:04:b7:51:38:ed:07:
e8:74:b7:67:90:a2:37:98:63:27:b0:40:34:85:77:
4a:91:50:30:96:7f:a9:58:b4:b3:e4:2b:a1:45:09:
73:cc:c3:ad:72:3c:d1:ec:35:a2:e7:e5:c5:72:3c:
91:6c:fb:84:82:7a:50:9b:06:82:0a:31:f6:67:da:
1d:db:c3:1a:8a:2c:26:c4:22:fa:5c:12:e1:44:b9:
bd:6c:1b:89:cf:d1:25:7b:82:98:ec:fc:61:4b:e2:
0a:98:da:1b:46:5e:27:e2:da:d9:cc:25:e7:e8:95:
79:53:74:cb:ed:8c:4a:8d:8d:08:70:c6:a8:7c:39:
d9:15:2c:ce:63:af:e6:71:ff:d7:ac:a1:54:f9:94:
53:23:12:76:8a:1e:36:10:09:06:db:e1:9f:75:d6:
26:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:8F:B6:94:35:CD:92:19:BF:C6:CD:DB:C8:F3:52:54:83:9C:4D:79
X509v3 Authority Key Identifier:
keyid:F9:86:69:D3:1A:14:DB:DC:50:77:15:9C:F0:A6:53:53:BF:BF:A2:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-YZp0xoU29xQdxWc8KZTU7-_ogo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/2b417d-2869-411f-aeda-4a05bac5265f/1/so-2lDXNkhm_xs3byPNSVIOcTXk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/2b417d-2869-411f-aeda-4a05bac5265f/1/1-YZp0xoU29xQdxWc8KZTU7-_ogo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.46.208.0/21
217.198.112.0/20
IPv6:
2a00:19a0::/32
Signature Algorithm: sha256WithRSAEncryption
58:5d:b4:be:0e:e4:40:77:f9:f9:76:68:43:41:7b:2e:29:bd:
14:1a:b5:c4:b6:f1:87:31:df:aa:dc:03:3a:5a:f4:34:ee:82:
77:2a:16:a0:8e:38:06:b8:bb:99:e5:1b:f9:e2:48:9d:2e:f7:
58:bb:d5:d6:92:81:39:a6:36:90:b2:c1:f0:1f:dc:9f:95:25:
4a:dd:62:af:45:b9:7e:06:79:42:c7:c8:2f:8a:c1:dc:86:c0:
2c:de:11:17:71:46:cc:b4:2d:10:ad:61:42:1a:4c:46:66:a7:
7c:da:21:16:24:26:84:2a:11:04:bc:50:aa:c9:72:10:8c:52:
f3:4c:62:a0:71:1f:d2:61:0f:3f:17:a3:62:02:ac:fd:f2:92:
41:74:56:c3:28:d4:91:9d:69:c3:94:e5:78:54:3c:a3:e6:91:
7c:b3:40:eb:1a:be:55:53:64:e4:87:f3:34:fe:1b:b8:9a:e4:
27:87:1f:82:a3:a7:e4:ec:8a:ed:61:65:9b:f3:0d:20:8c:03:
db:5f:c7:e4:6f:59:89:9c:18:10:b9:c9:63:0a:b4:46:64:2c:
c5:e2:94:74:9e:f4:a1:26:7c:9d:d6:41:37:6a:9d:47:61:04:
32:37:45:7f:b0:eb:f9:ab:1d:0f:36:a7:fe:3f:e9:f3:fe:a0:
11:8f:a5:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 23:06:26 2024 by rpki-client on console-ams.rpki-client.org