Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/9d-kLIZJ4l1Iaxa6cFNhdN5L-bs.roa
File: 9d-kLIZJ4l1Iaxa6cFNhdN5L-bs.roa (raw, json)
Hash identifier: 3l284LA6RJ8Tq1ytl1kYEz2hCU81RLzr0rj4a84sN24=
Subject key identifier: F5:DF:A4:2C:86:49:E2:5D:48:6B:16:BA:70:53:61:74:DE:4B:F9:BB
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 018EDC60FD7ED05387E085ABD000FD9599F4
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/9d-kLIZJ4l1Iaxa6cFNhdN5L-bs.roa
Signing time: Sun 14 Apr 2024 11:32:07 +0000
ROA not before: Sun 14 Apr 2024 11:32:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48749
IP address blocks: 80.96.106.0/24 maxlen: 24
80.96.236.0/23 maxlen: 23
81.180.94.0/23 maxlen: 23
81.181.173.0/24 maxlen: 24
85.121.36.0/23 maxlen: 23
85.122.84.0/23 maxlen: 23
194.102.216.0/24 maxlen: 24
217.156.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:dc:60:fd:7e:d0:53:87:e0:85:ab:d0:00:fd:95:99:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Apr 14 11:32:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f5dfa42c8649e25d486b16ba70536174de4bf9bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:24:ed:38:9d:1c:57:2c:b6:4a:c3:92:2a:aa:
85:a6:a7:b9:38:54:0c:75:4b:b2:c8:71:6a:95:b7:
fe:75:94:6a:c0:83:76:40:b3:6e:18:3c:4c:44:dc:
6e:bb:93:81:4a:6c:ed:a3:58:92:52:a3:5a:72:c7:
b8:06:53:df:9b:1b:ba:0b:ba:28:e5:91:eb:c3:98:
0f:38:14:1a:b3:51:51:ce:d8:f8:57:82:70:e6:9b:
bd:99:3d:e3:15:7b:a7:7c:f9:2c:4f:6b:55:a9:12:
1b:71:4e:57:3d:2b:c3:e2:f4:39:83:dc:21:8c:b3:
2c:1e:09:5a:d1:cf:43:b6:8b:87:19:b3:a5:02:24:
4b:83:4c:d6:f8:df:91:53:c4:25:60:67:3f:eb:75:
94:11:6b:a3:0d:5c:f3:5f:7b:67:80:20:b1:ec:af:
18:68:36:fc:ed:94:a8:05:d5:31:f7:2a:03:b1:d8:
95:e8:a1:60:36:4c:94:8b:1c:9c:e1:cd:93:7e:cb:
82:f5:6a:e1:3b:ec:5f:e4:6c:5c:4f:06:d9:31:0e:
8d:f8:29:3c:ef:77:e9:e0:5a:e1:e0:2a:1f:3c:bd:
6c:c6:17:dd:4f:23:f7:9f:53:b2:de:c6:dd:ee:be:
13:35:cd:4f:71:bd:4a:1c:6c:2a:b2:91:75:2a:e7:
59:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:DF:A4:2C:86:49:E2:5D:48:6B:16:BA:70:53:61:74:DE:4B:F9:BB
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/9d-kLIZJ4l1Iaxa6cFNhdN5L-bs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.96.106.0/24
80.96.236.0/23
81.180.94.0/23
81.181.173.0/24
85.121.36.0/23
85.122.84.0/23
194.102.216.0/24
217.156.91.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:50:d7:f7:3a:34:b3:b7:19:87:93:51:21:1d:9d:58:a7:3f:
44:fa:e2:1f:49:4f:27:4c:21:1c:cf:f2:45:eb:15:e3:31:ce:
3d:fc:67:dc:67:fd:46:3c:43:59:59:8e:ff:46:2d:17:5f:b3:
50:b5:8a:9f:eb:7e:ad:ee:02:f5:68:ab:d9:72:0d:19:32:5f:
c1:fe:84:af:65:49:c9:05:9f:a8:ff:27:c8:3f:4e:c7:19:f9:
bb:fe:77:f7:f1:6d:c3:d5:04:40:b0:1e:39:23:6d:08:c7:18:
16:ff:dc:de:49:9c:14:fb:4b:c9:f5:87:e7:6f:3b:15:64:cc:
9c:63:06:79:ce:92:16:e2:92:33:b4:0b:d4:01:1e:ae:ba:f1:
28:b0:9c:b9:36:5d:6b:5d:7e:60:9a:e5:33:a4:97:63:f8:d3:
b7:cc:7c:43:8c:ed:a6:e1:8b:0a:af:7e:56:82:46:5b:f8:bd:
dd:d6:24:71:4a:e6:77:f5:6e:df:5b:53:0d:6a:d7:e9:b6:3e:
a1:d4:b2:2e:fc:49:38:48:6d:b7:9e:7b:91:c1:c5:8f:d9:ac:
00:2c:e9:67:0d:17:fb:2a:a7:b2:9e:f2:ce:30:44:70:39:47:
46:d5:1c:a9:b5:35:38:37:bc:eb:07:29:fc:59:cc:30:47:ce:
9a:59:43:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:18:34 2024 by rpki-client on console-ams.rpki-client.org