Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/b2DyTRb7Aq3dTbfS4J_fhfmZMqs.roa
File: b2DyTRb7Aq3dTbfS4J_fhfmZMqs.roa (raw, json)
Hash identifier: uPwGi+TuGqYNGJllbn94WhzjIhRh9cibrnl29g1hXeI=
Subject key identifier: 6F:60:F2:4D:16:FB:02:AD:DD:4D:B7:D2:E0:9F:DF:85:F9:99:32:AB
Certificate issuer: /CN=3cea1ea887dcefee6136155b8bd83392937c1671
Certificate serial: 018CCA2978CD35510D666551482830EC6510
Authority key identifier: 3C:EA:1E:A8:87:DC:EF:EE:61:36:15:5B:8B:D8:33:92:93:7C:16:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/POoeqIfc7-5hNhVbi9gzkpN8FnE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/b2DyTRb7Aq3dTbfS4J_fhfmZMqs.roa
Signing time: Tue 02 Jan 2024 12:32:44 +0000
ROA not before: Tue 02 Jan 2024 12:32:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35261
IP address blocks: 193.239.212.0/23 maxlen: 23
45.138.64.0/23 maxlen: 23
45.138.66.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/POoeqIfc7-5hNhVbi9gzkpN8FnE.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/POoeqIfc7-5hNhVbi9gzkpN8FnE.mft
rsync://rpki.ripe.net/repository/DEFAULT/POoeqIfc7-5hNhVbi9gzkpN8FnE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 01 Jul 2024 22:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:78:cd:35:51:0d:66:65:51:48:28:30:ec:65:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cea1ea887dcefee6136155b8bd83392937c1671
Validity
Not Before: Jan 2 12:32:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6f60f24d16fb02addd4db7d2e09fdf85f99932ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:3b:20:ec:7e:df:2d:09:15:b0:d1:7c:fb:06:
90:57:96:ec:96:4c:be:9c:91:30:c6:d6:ff:ed:21:
84:e3:65:38:e1:28:4e:9b:33:c4:be:d9:8f:2d:1a:
91:87:bc:9a:fa:1b:55:bf:fa:0c:eb:cd:d4:26:5c:
12:18:e7:75:c7:30:48:04:cc:f7:de:1b:54:e9:2d:
b6:70:8b:23:1a:31:7e:52:48:11:da:b0:f4:30:73:
6b:17:50:b9:ea:8b:e2:ef:d5:a3:b8:48:26:e5:08:
a7:3e:76:0f:6d:ea:ee:0f:3d:c2:24:e7:7a:0c:a2:
5c:40:84:a3:43:e9:b3:a3:e2:fe:65:69:59:4c:19:
80:c7:9d:05:f8:fc:64:83:1d:16:02:df:40:f2:41:
73:92:4f:28:e4:82:17:e3:fd:25:c9:fe:12:24:8a:
89:26:fa:da:f6:9d:bb:f9:08:37:27:41:d0:e0:e7:
16:55:63:ca:db:21:aa:42:10:c5:a0:f1:87:ee:be:
43:4e:48:3c:48:8d:82:6a:2b:71:14:ca:10:f1:81:
4f:a4:3e:07:8a:4e:dd:cf:e4:12:67:14:96:21:c1:
f2:92:51:96:c3:9a:3c:5e:12:88:d9:99:00:2b:94:
c6:13:b3:3f:76:b8:c4:42:28:65:1d:a1:be:4f:7c:
8c:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:60:F2:4D:16:FB:02:AD:DD:4D:B7:D2:E0:9F:DF:85:F9:99:32:AB
X509v3 Authority Key Identifier:
keyid:3C:EA:1E:A8:87:DC:EF:EE:61:36:15:5B:8B:D8:33:92:93:7C:16:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/POoeqIfc7-5hNhVbi9gzkpN8FnE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/b2DyTRb7Aq3dTbfS4J_fhfmZMqs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/POoeqIfc7-5hNhVbi9gzkpN8FnE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.138.64.0/22
193.239.212.0/23
Signature Algorithm: sha256WithRSAEncryption
af:43:40:c3:66:bb:05:43:bc:9a:28:af:31:ec:64:75:34:6d:
3b:7a:85:b6:e8:c7:b9:5c:4d:46:cb:13:66:76:3e:64:97:26:
35:dc:93:6b:04:e4:2e:e6:c0:c0:3c:7e:31:40:d5:2e:db:f7:
ea:e8:e4:f7:94:d1:b9:0f:87:8b:16:45:8c:6d:0c:a5:1e:f1:
81:f7:f8:52:83:3f:36:57:86:88:c4:89:59:8c:b9:e8:bc:83:
f0:0a:7e:8c:29:4a:d1:df:0d:66:0c:6c:c4:4d:45:bf:84:b2:
27:86:80:8f:01:c6:7d:d5:8c:c2:62:b3:49:76:9c:80:61:08:
62:d6:f8:9b:67:31:95:38:99:23:c7:79:62:af:35:6e:ca:28:
04:98:d3:59:20:dc:af:17:ea:7d:67:f5:e2:83:8e:4d:2d:bf:
e3:9a:1f:ab:41:13:ab:76:fd:fd:83:a8:a3:e0:b5:70:11:b7:
6a:df:27:11:0d:3a:f4:6f:60:06:0a:41:c1:cd:18:41:e7:14:
af:a2:59:1b:10:04:28:c5:44:26:4c:46:9b:02:82:b0:47:4b:
e8:b8:ca:17:c1:54:51:53:8b:19:a0:6d:ed:e8:9a:36:8b:eb:
82:9d:40:fa:2d:8c:08:bf:68:90:ab:d9:4c:e7:af:97:eb:3d:
36:a2:1e:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 1 01:02:51 2024 by rpki-client on console-ams.rpki-client.org