Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/18b6da-b02e-40b1-97ae-d7399292019a/1/l5ef7-PI4VPLQzwpp9r9SLHxWmY.roa
File: l5ef7-PI4VPLQzwpp9r9SLHxWmY.roa (raw, json)
Hash identifier: lpaw67m+TtbWpnvDg+ls7j8n5G2cRDsRTamkHoQBJCE=
Subject key identifier: 97:97:9F:EF:E3:C8:E1:53:CB:43:3C:29:A7:DA:FD:48:B1:F1:5A:66
Certificate issuer: /CN=9ededf47822aee27da28d34dab1fe7a3c60a6aaa
Certificate serial: 018CC94DEF85849A5425279527C0BF90E8BB
Authority key identifier: 9E:DE:DF:47:82:2A:EE:27:DA:28:D3:4D:AB:1F:E7:A3:C6:0A:6A:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nt7fR4Iq7ifaKNNNqx_no8YKaqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/18b6da-b02e-40b1-97ae-d7399292019a/1/l5ef7-PI4VPLQzwpp9r9SLHxWmY.roa
Signing time: Tue 02 Jan 2024 08:32:57 +0000
ROA not before: Tue 02 Jan 2024 08:32:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15525
IP address blocks: 176.221.32.0/21 maxlen: 24
185.99.233.0/24 maxlen: 24
185.99.234.0/23 maxlen: 24
2a03:9c80::/34 maxlen: 34
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/18b6da-b02e-40b1-97ae-d7399292019a/1/nt7fR4Iq7ifaKNNNqx_no8YKaqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/18b6da-b02e-40b1-97ae-d7399292019a/1/nt7fR4Iq7ifaKNNNqx_no8YKaqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/nt7fR4Iq7ifaKNNNqx_no8YKaqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:ef:85:84:9a:54:25:27:95:27:c0:bf:90:e8:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ededf47822aee27da28d34dab1fe7a3c60a6aaa
Validity
Not Before: Jan 2 08:32:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=97979fefe3c8e153cb433c29a7dafd48b1f15a66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:64:90:f2:1a:ee:fe:99:4e:8a:8b:24:a2:40:
b9:00:cb:40:e3:62:2b:c6:47:ae:9d:70:39:dc:27:
dd:ef:3b:b7:2b:5d:f8:bb:18:55:b4:ef:9d:58:85:
78:67:a3:c6:e9:9c:ca:a8:67:1b:f7:02:7b:94:b6:
c6:8e:55:f4:97:03:17:f5:fd:7a:06:29:c0:7c:08:
94:b1:4a:3e:38:f5:f2:2a:b0:64:3c:23:f9:cc:1a:
a3:ea:c8:69:0b:29:f5:4f:10:5d:4e:3f:fe:66:e0:
cf:9b:a9:4f:9b:5a:0a:e6:17:19:fa:26:3d:e5:be:
a0:6b:a7:a3:b3:f7:8b:26:b5:8a:68:59:ed:8a:d0:
88:b4:67:50:51:41:e7:ed:48:f4:99:fe:91:0c:e2:
bb:5a:48:42:00:41:85:bc:c2:2b:86:c1:d0:ca:6f:
a7:f7:4b:bc:db:6e:99:8e:7c:07:df:a4:80:8a:84:
bd:f9:ae:d3:43:72:ed:9e:7d:dc:f3:be:ff:1b:e1:
68:fc:e4:0f:5d:39:e2:44:78:f6:26:5f:e3:16:57:
29:d3:42:99:5e:7a:0d:db:70:06:cf:b1:33:33:98:
9a:a4:3f:d5:a1:1e:8e:97:1d:65:0b:86:50:f5:fb:
6d:8a:a7:54:2a:fd:ee:7a:43:e1:2d:a5:21:fb:be:
c6:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:97:9F:EF:E3:C8:E1:53:CB:43:3C:29:A7:DA:FD:48:B1:F1:5A:66
X509v3 Authority Key Identifier:
keyid:9E:DE:DF:47:82:2A:EE:27:DA:28:D3:4D:AB:1F:E7:A3:C6:0A:6A:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nt7fR4Iq7ifaKNNNqx_no8YKaqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/18b6da-b02e-40b1-97ae-d7399292019a/1/l5ef7-PI4VPLQzwpp9r9SLHxWmY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/18b6da-b02e-40b1-97ae-d7399292019a/1/nt7fR4Iq7ifaKNNNqx_no8YKaqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.221.32.0/21
185.99.233.0-185.99.235.255
IPv6:
2a03:9c80::/34
Signature Algorithm: sha256WithRSAEncryption
1d:c7:9b:24:aa:fd:20:f7:bf:69:20:d7:c1:9f:df:b8:27:0b:
3c:92:67:7e:79:1f:ba:22:9d:32:f3:92:c6:c4:40:9a:db:56:
aa:ab:a8:ad:ab:88:f4:0d:b4:00:60:6b:14:1f:ba:29:d1:a9:
c1:1f:ee:1d:d7:13:ef:79:48:27:d9:92:ac:9a:55:21:59:f3:
4f:cc:7e:6b:05:e6:6d:26:38:c8:10:03:03:d7:05:9c:84:d0:
27:3c:d3:b3:2f:13:14:58:a1:6b:f7:64:55:b2:2d:5d:d1:2f:
8a:4e:f0:7f:83:76:f3:b3:25:ed:a6:07:df:17:c1:61:a2:8c:
f4:67:34:d6:96:79:be:62:b4:3a:e9:4d:0d:f6:80:35:16:22:
b0:11:1f:86:d3:bb:45:63:e9:4e:34:f5:c5:f8:83:9d:a4:7e:
b9:53:10:3c:a9:a5:93:62:07:03:6b:e7:47:2f:4c:b5:13:87:
13:55:4e:17:42:7e:c9:ea:50:c0:81:94:18:cd:54:f6:90:12:
1b:18:7c:b2:3f:03:e3:cf:2a:3b:c3:94:81:c0:0e:e4:d0:33:
de:b3:d6:18:c6:98:69:01:72:a6:f5:5f:89:d2:93:3e:15:ab:
33:7a:df:4b:29:a6:8d:17:2c:0e:3b:54:77:e5:03:27:32:58:
b8:be:a7:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 01:58:27 2024 by rpki-client on console-ams.rpki-client.org