Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/821152-9f13-4c09-9dcd-45bbb23a15d8/1/Sch6csPa3OvlDqvFzOHJanHZIEc.roa
File: Sch6csPa3OvlDqvFzOHJanHZIEc.roa (raw, json)
Hash identifier: 1eyb8QMKk8z78D9GNBNUTjL7xaxpLOY1t4JFW6A5sxs=
Subject key identifier: 49:C8:7A:72:C3:DA:DC:EB:E5:0E:AB:C5:CC:E1:C9:6A:71:D9:20:47
Certificate issuer: /CN=2e1620890f700f012b0ba60172314e3c85919513
Certificate serial: 018CC42538D2291BB8FFD2253D21933031A2
Authority key identifier: 2E:16:20:89:0F:70:0F:01:2B:0B:A6:01:72:31:4E:3C:85:91:95:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LhYgiQ9wDwErC6YBcjFOPIWRlRM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/821152-9f13-4c09-9dcd-45bbb23a15d8/1/Sch6csPa3OvlDqvFzOHJanHZIEc.roa
Signing time: Mon 01 Jan 2024 08:30:22 +0000
ROA not before: Mon 01 Jan 2024 08:30:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9051
IP address blocks: 212.28.224.0/19 maxlen: 24
80.81.144.0/20 maxlen: 24
195.112.192.0/19 maxlen: 24
92.62.160.0/20 maxlen: 24
141.105.80.0/20 maxlen: 24
185.3.20.0/22 maxlen: 24
2a00:16e8::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/821152-9f13-4c09-9dcd-45bbb23a15d8/1/LhYgiQ9wDwErC6YBcjFOPIWRlRM.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/821152-9f13-4c09-9dcd-45bbb23a15d8/1/LhYgiQ9wDwErC6YBcjFOPIWRlRM.mft
rsync://rpki.ripe.net/repository/DEFAULT/LhYgiQ9wDwErC6YBcjFOPIWRlRM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:38:d2:29:1b:b8:ff:d2:25:3d:21:93:30:31:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e1620890f700f012b0ba60172314e3c85919513
Validity
Not Before: Jan 1 08:30:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=49c87a72c3dadcebe50eabc5cce1c96a71d92047
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:61:e9:77:a8:63:ec:27:e6:65:36:c9:2f:a2:
66:c8:20:94:60:27:93:68:2d:16:4c:8b:3a:4d:3c:
6c:8b:4a:e7:be:3d:b3:25:48:48:03:78:2c:f7:c2:
3e:60:ce:58:0b:f4:c8:50:f6:7d:a5:d1:e7:d1:21:
30:c6:e9:0c:a2:09:8c:37:46:ca:de:cd:98:3d:3e:
57:a6:25:6b:d1:1a:75:ad:42:fd:88:97:5f:bc:03:
9c:17:8d:3d:26:6a:6f:a5:79:65:95:62:2f:70:93:
e4:8b:8c:9d:a5:eb:bf:10:1d:d1:5c:64:9b:1f:89:
84:53:ae:f3:08:f8:a0:cf:ad:3d:da:02:57:88:ba:
94:39:94:da:9b:a5:b3:40:f2:23:7c:4f:96:03:5c:
97:e3:6b:45:28:6b:c1:c8:50:24:7b:e1:b6:3d:7d:
6e:98:7c:be:22:df:e7:b0:fd:1c:2d:40:38:6b:50:
d7:fa:c8:2e:13:be:df:9b:5f:eb:59:ab:87:88:b2:
91:bd:d9:b6:11:3c:ca:c2:72:60:2a:08:2d:46:18:
e3:5f:c0:be:87:15:ef:af:e0:c6:1e:ee:07:b7:f4:
db:7c:f5:2d:1f:d7:c8:dd:89:d5:d7:ee:b0:fa:1e:
b6:7f:61:8e:fe:1a:b5:1b:aa:44:24:51:42:e7:45:
3f:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:C8:7A:72:C3:DA:DC:EB:E5:0E:AB:C5:CC:E1:C9:6A:71:D9:20:47
X509v3 Authority Key Identifier:
keyid:2E:16:20:89:0F:70:0F:01:2B:0B:A6:01:72:31:4E:3C:85:91:95:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LhYgiQ9wDwErC6YBcjFOPIWRlRM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/821152-9f13-4c09-9dcd-45bbb23a15d8/1/Sch6csPa3OvlDqvFzOHJanHZIEc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/821152-9f13-4c09-9dcd-45bbb23a15d8/1/LhYgiQ9wDwErC6YBcjFOPIWRlRM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.81.144.0/20
92.62.160.0/20
141.105.80.0/20
185.3.20.0/22
195.112.192.0/19
212.28.224.0/19
IPv6:
2a00:16e8::/32
Signature Algorithm: sha256WithRSAEncryption
2d:aa:9c:9f:26:e6:e2:8b:83:10:c5:73:85:59:43:2f:26:2c:
f5:1c:f1:55:60:94:fd:41:fd:7d:5a:00:0c:9a:af:6e:94:d3:
2d:a9:b6:bc:16:03:96:a2:3e:f2:69:35:96:70:a8:80:69:22:
78:52:67:ed:30:99:26:a3:40:34:5a:78:e0:12:a4:90:0e:43:
12:f0:25:0e:f6:a2:e8:bb:66:96:3d:79:6c:18:02:10:d3:9a:
d2:12:7e:eb:cf:50:59:0f:60:37:53:2c:d3:48:0a:d7:b2:1d:
50:9a:9b:a4:cc:0d:8f:2f:fb:d0:bd:2f:09:64:0b:0f:e7:f1:
42:cd:98:da:3d:97:12:d4:01:cb:a5:d0:97:9d:4f:9a:c3:cc:
3f:1f:80:85:7a:e6:48:d6:cf:17:08:f7:79:5e:84:bd:65:b5:
ca:59:f8:c2:4c:3e:ad:25:71:73:f3:d2:dc:27:a7:a3:28:b8:
a7:4b:03:ec:da:73:8e:df:8a:4c:02:88:63:b9:f5:96:af:8c:
6c:63:98:c3:c5:9f:98:57:b4:7a:fe:59:b0:ca:a9:2b:49:6a:
c4:39:02:14:df:fb:fd:14:ed:b3:f5:15:5c:cb:51:16:e2:22:
43:96:1b:63:d5:87:2c:09:3a:15:d0:66:17:61:6d:c3:0c:4f:
da:53:a4:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 04:39:22 2024 by rpki-client on console-ams.rpki-client.org