Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/190JYTtc51IpjeONJbUG4-1NnjI.roa
File: 190JYTtc51IpjeONJbUG4-1NnjI.roa (raw, json)
Hash identifier: Kavx5humuAqW5NyjHKQdNqi/W3Mm8bTbuDDp/7aoDp4=
Subject key identifier: D7:DD:09:61:3B:5C:E7:52:29:8D:E3:8D:25:B5:06:E3:ED:4D:9E:32
Certificate issuer: /CN=ad243dcff0cb38211f7fe7db3f913169b44cf456
Certificate serial: 018CC726E9D1925FBCD0F666333455553DB9
Authority key identifier: AD:24:3D:CF:F0:CB:38:21:1F:7F:E7:DB:3F:91:31:69:B4:4C:F4:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/190JYTtc51IpjeONJbUG4-1NnjI.roa
Signing time: Mon 01 Jan 2024 22:31:05 +0000
ROA not before: Mon 01 Jan 2024 22:31:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49455
IP address blocks: 82.194.192.0/19 maxlen: 19
188.113.64.0/18 maxlen: 18
109.108.192.0/19 maxlen: 19
46.249.224.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.mft
rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 18:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:26:e9:d1:92:5f:bc:d0:f6:66:33:34:55:55:3d:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad243dcff0cb38211f7fe7db3f913169b44cf456
Validity
Not Before: Jan 1 22:31:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d7dd09613b5ce752298de38d25b506e3ed4d9e32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:15:72:b9:56:da:d6:cf:0c:22:87:4b:27:d7:
d0:57:14:60:2e:10:62:de:ce:01:44:b0:41:3f:96:
ad:57:44:d4:01:52:cf:96:ae:fa:f5:b1:97:4a:dd:
66:b7:20:fd:42:01:79:18:47:c7:36:fe:34:fa:99:
e1:8f:1d:1d:de:4b:4d:04:f9:ff:d4:e6:59:44:6c:
7f:10:24:92:85:7f:13:ae:77:73:fa:d6:e3:1a:ee:
34:4b:ee:ef:77:7e:76:a6:4e:10:88:15:04:3b:22:
cd:3b:62:26:9d:d1:6c:aa:7a:c7:0d:10:d9:e2:ae:
47:a4:d8:91:a2:f0:55:3e:e9:e9:9a:e6:b3:21:64:
4a:a0:fb:b3:61:28:c2:2a:c9:d4:ac:b5:f4:60:d7:
fc:12:6f:ed:e9:bc:01:43:98:fa:59:75:a5:11:ba:
43:66:80:ed:0d:6f:ea:6f:c7:78:a5:a3:d6:f2:10:
25:6c:93:09:50:95:d5:56:e8:d1:a2:bd:1d:dd:cf:
db:f1:36:1c:03:d9:4a:82:22:d0:15:7a:2f:72:9d:
49:0e:1b:4d:ff:52:c7:3a:e8:e4:87:fe:d7:82:01:
6b:1d:18:04:b4:a1:88:e2:93:2d:e9:71:55:7e:ec:
05:33:96:b9:7b:7b:47:77:04:df:03:af:61:a7:90:
5a:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:DD:09:61:3B:5C:E7:52:29:8D:E3:8D:25:B5:06:E3:ED:4D:9E:32
X509v3 Authority Key Identifier:
keyid:AD:24:3D:CF:F0:CB:38:21:1F:7F:E7:DB:3F:91:31:69:B4:4C:F4:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/190JYTtc51IpjeONJbUG4-1NnjI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.249.224.0/19
82.194.192.0/19
109.108.192.0/19
188.113.64.0/18
Signature Algorithm: sha256WithRSAEncryption
09:a7:6e:14:b7:0f:7f:3c:7d:7a:18:59:dc:d1:f8:c4:3c:08:
b7:7e:78:30:1c:0d:97:19:0d:da:3d:2e:7f:8f:ca:0f:1f:eb:
e5:a1:c9:f4:2c:73:6a:18:c3:da:c7:84:7d:53:ca:46:67:7c:
1a:36:67:a8:e6:e4:eb:de:f2:60:7e:ee:34:04:c4:d0:42:f7:
16:30:87:e4:31:90:a3:c3:89:8f:5c:e3:b0:f7:40:2f:e8:0c:
15:1d:b0:65:f0:7e:56:f8:1c:04:e7:01:28:db:06:a2:76:57:
76:a6:a2:36:60:4e:70:38:1d:70:81:92:29:b4:45:88:fe:f7:
ae:a3:f1:72:56:b0:c2:0c:92:2a:8c:1e:85:15:c1:85:de:05:
c6:e4:fd:9c:eb:bb:46:38:e2:12:1a:6f:a0:e6:32:96:9b:32:
c8:34:1c:1a:d1:b1:da:e0:45:0f:fd:c4:7a:e8:fa:4b:dd:3e:
21:5e:b6:05:b2:77:d9:58:13:90:5e:2b:9d:40:d1:af:bf:fe:
d5:d1:3f:be:73:ea:42:6e:4e:21:30:7b:9b:a4:b5:06:00:1a:
c3:ea:4a:6e:1f:74:2c:54:7d:4a:19:10:7d:f6:bc:a1:bc:0b:
43:fa:fd:c9:88:52:6c:88:2b:65:93:6f:5c:dc:be:92:0a:29:
f1:5e:a8:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 01:59:35 2024 by rpki-client on console-ams.rpki-client.org