Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/35BAlP5j95gF3LmZkuO8c5Sp7W8.roa
File: 35BAlP5j95gF3LmZkuO8c5Sp7W8.roa (raw, json)
Hash identifier: C9og/MtW71/vOF1dMR/qpAwVCWIrvns1+O3ugelGJL8=
Subject key identifier: DF:90:40:94:FE:63:F7:98:05:DC:B9:99:92:E3:BC:73:94:A9:ED:6F
Certificate issuer: /CN=dc11daefaff81c7e501278d87d9bc2b204d71155
Certificate serial: 018F19B3A07D40787E11C25C80C34D2FA2DE
Authority key identifier: DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/35BAlP5j95gF3LmZkuO8c5Sp7W8.roa
Signing time: Fri 26 Apr 2024 09:19:13 +0000
ROA not before: Fri 26 Apr 2024 09:19:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49217
IP address blocks: 94.154.40.0/24 maxlen: 24
94.154.41.0/24 maxlen: 24
94.154.42.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 16:11:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:19:b3:a0:7d:40:78:7e:11:c2:5c:80:c3:4d:2f:a2:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc11daefaff81c7e501278d87d9bc2b204d71155
Validity
Not Before: Apr 26 09:19:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=df904094fe63f79805dcb99992e3bc7394a9ed6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:93:d4:03:90:01:da:25:da:cf:04:ed:b4:e2:
1d:d8:b0:a3:0f:a9:20:0c:9c:47:4a:1c:fe:f1:e5:
75:bf:47:f0:98:13:6a:27:fd:8a:07:89:0b:43:a1:
fb:aa:70:70:ed:1a:15:49:9f:be:96:7b:10:92:00:
b3:6b:b6:fd:c3:0c:c4:3a:6e:bc:2c:0d:bb:ae:80:
e7:da:fa:bd:1f:40:f2:e5:03:0b:6a:82:dd:07:70:
f4:6b:ca:28:19:0b:af:8a:bb:d5:7e:27:b2:16:10:
d1:a7:0e:2e:74:e6:b8:fa:1e:d2:62:7c:9e:80:25:
a0:b2:a9:71:b9:d9:ed:3e:c9:32:70:68:ac:96:e9:
a3:eb:b6:ad:1a:33:35:16:2a:cb:0e:ed:36:4f:53:
ef:6a:f1:51:b9:9a:2d:57:d9:b2:fc:c5:84:a8:6a:
5b:85:78:72:16:7f:6b:07:76:34:ba:59:f3:89:90:
c2:f7:d7:aa:5d:0e:1f:a7:97:fb:32:f3:2b:67:ec:
b7:dc:0a:77:ba:32:63:16:7f:9c:44:31:aa:e3:03:
c2:c8:6f:94:1b:96:8d:ff:bc:2b:39:21:f6:11:07:
65:e5:c3:38:7b:a5:06:e5:a5:cf:da:45:cc:2f:ac:
95:79:b4:5e:25:f1:38:1f:81:bc:74:18:2f:9a:2b:
7d:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:90:40:94:FE:63:F7:98:05:DC:B9:99:92:E3:BC:73:94:A9:ED:6F
X509v3 Authority Key Identifier:
keyid:DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/35BAlP5j95gF3LmZkuO8c5Sp7W8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.40.0-94.154.42.255
Signature Algorithm: sha256WithRSAEncryption
47:b4:f2:12:34:f4:85:c9:91:b7:68:1a:d3:0a:7b:65:a3:44:
9a:db:c1:f9:18:05:5e:91:5d:7e:d5:a8:fd:c1:d2:e2:a7:ac:
6e:bd:2b:3a:bd:6d:c0:de:e9:44:4e:a8:ec:ae:67:ad:95:7b:
06:cd:b6:1a:ba:77:a5:3c:5d:00:d1:0b:00:bb:47:e9:9e:fe:
03:f9:b8:1a:13:0d:01:47:cf:9a:31:bd:37:9c:f6:3d:85:36:
88:88:35:96:06:30:8e:20:40:f5:6b:fb:8c:8b:b5:2b:5b:33:
56:e3:07:a2:d5:45:63:18:f3:a2:f8:14:de:6f:f8:54:09:f3:
c0:b8:80:ac:2f:0d:a9:70:50:70:5b:2c:90:8c:db:36:97:bd:
0b:34:38:3d:ca:d1:e5:9b:8a:c2:90:58:17:d6:a2:e3:98:37:
3c:d2:bb:fc:ea:74:7f:54:5c:19:cc:6d:c3:e7:be:53:f0:07:
80:07:cc:1e:b5:7d:8e:20:e3:0c:a8:35:2b:a6:5e:97:e6:52:
c3:17:87:3f:3e:7e:84:2d:da:6c:e3:fe:59:99:a0:c9:ce:89:
d2:85:ac:3b:dc:43:d0:ba:6b:78:bf:cc:35:c8:3d:e4:4a:a2:
d4:1b:e7:4c:81:2e:b3:46:bc:d4:4e:96:6a:77:07:e1:da:65:
2f:75:73:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 20:08:01 2024 by rpki-client on console-ams.rpki-client.org