Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/2b37df-8ffe-41e5-ac07-c0f89ad36bca/1/1BvCsJznHGLNFOHArgYWZGPh9f0.roa
File: 1BvCsJznHGLNFOHArgYWZGPh9f0.roa (raw, json)
Hash identifier: 0WdKYdeBfO69OvX5O3ihCgHfW1tDcAkL1dMvyVRKd3k=
Subject key identifier: D4:1B:C2:B0:9C:E7:1C:62:CD:14:E1:C0:AE:06:16:64:63:E1:F5:FD
Certificate issuer: /CN=cd626bbb7b69eec9f6790b03705545b892fa2e8a
Certificate serial: 018CC64B4940F9A6F1400050C68DC0C8E6C1
Authority key identifier: CD:62:6B:BB:7B:69:EE:C9:F6:79:0B:03:70:55:45:B8:92:FA:2E:8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zWJru3tp7sn2eQsDcFVFuJL6Loo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/2b37df-8ffe-41e5-ac07-c0f89ad36bca/1/1BvCsJznHGLNFOHArgYWZGPh9f0.roa
Signing time: Mon 01 Jan 2024 18:31:11 +0000
ROA not before: Mon 01 Jan 2024 18:31:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48500
IP address blocks: 134.90.224.0/20 maxlen: 20
94.230.64.0/21 maxlen: 21
217.196.140.0/23 maxlen: 23
109.104.224.0/21 maxlen: 21
37.99.224.0/20 maxlen: 20
185.46.100.0/22 maxlen: 22
37.99.240.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/2b37df-8ffe-41e5-ac07-c0f89ad36bca/1/zWJru3tp7sn2eQsDcFVFuJL6Loo.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/2b37df-8ffe-41e5-ac07-c0f89ad36bca/1/zWJru3tp7sn2eQsDcFVFuJL6Loo.mft
rsync://rpki.ripe.net/repository/DEFAULT/zWJru3tp7sn2eQsDcFVFuJL6Loo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 16:03:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:49:40:f9:a6:f1:40:00:50:c6:8d:c0:c8:e6:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd626bbb7b69eec9f6790b03705545b892fa2e8a
Validity
Not Before: Jan 1 18:31:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d41bc2b09ce71c62cd14e1c0ae06166463e1f5fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:ed:c4:98:96:80:8b:79:74:5f:62:79:bd:fe:
58:c4:2e:78:7f:41:f5:68:cd:24:90:92:fd:a8:55:
b2:5c:b3:4a:c8:ed:e4:0f:2b:da:ec:86:4d:d2:87:
f5:c4:05:a7:13:ef:b6:33:2b:db:2c:bc:94:26:6f:
78:66:23:21:7d:5e:19:48:9a:91:65:1d:25:96:bb:
39:5a:04:fc:a2:43:2e:f4:61:50:a3:c1:dd:b1:88:
58:a0:26:9c:41:a6:9e:f8:a3:34:95:6b:5f:c3:fe:
d5:6d:1a:24:7e:c5:b4:34:11:7c:fd:71:a6:45:7f:
d5:e2:09:3b:92:da:32:28:ed:cc:dd:39:ce:61:8e:
59:85:e2:a1:da:d7:93:76:22:99:5e:79:4c:73:2e:
28:92:1d:0a:8e:24:38:cb:f3:7a:49:39:ca:08:4a:
86:2f:87:de:9d:25:d6:a2:59:35:87:34:02:34:37:
a1:13:39:9b:f0:be:53:26:e8:36:d3:0d:2a:bd:a3:
75:a4:a0:73:1a:96:ba:db:29:fa:c2:1f:24:2f:56:
17:87:63:7e:72:c7:45:99:b8:75:a4:bc:5b:30:49:
9d:6c:ae:40:6e:5a:7a:05:9d:42:de:7e:eb:b5:9b:
0d:41:93:b1:c3:a5:57:55:c7:31:3a:1a:a6:a4:a1:
cb:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:1B:C2:B0:9C:E7:1C:62:CD:14:E1:C0:AE:06:16:64:63:E1:F5:FD
X509v3 Authority Key Identifier:
keyid:CD:62:6B:BB:7B:69:EE:C9:F6:79:0B:03:70:55:45:B8:92:FA:2E:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zWJru3tp7sn2eQsDcFVFuJL6Loo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2b37df-8ffe-41e5-ac07-c0f89ad36bca/1/1BvCsJznHGLNFOHArgYWZGPh9f0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2b37df-8ffe-41e5-ac07-c0f89ad36bca/1/zWJru3tp7sn2eQsDcFVFuJL6Loo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.99.224.0-37.99.247.255
94.230.64.0/21
109.104.224.0/21
134.90.224.0/20
185.46.100.0/22
217.196.140.0/23
Signature Algorithm: sha256WithRSAEncryption
b1:4c:0e:c0:c7:16:33:6c:eb:a1:50:48:77:2c:6f:a5:05:87:
4d:44:c1:e2:58:ff:a0:9c:ba:e4:65:1f:07:96:7c:66:4d:e5:
e3:41:63:2b:77:dc:2b:3c:65:ca:4e:e6:10:f4:f8:9c:84:47:
b3:8a:50:27:b5:ec:19:f3:a3:d3:36:67:de:ef:7d:fe:63:c6:
dd:f1:b8:5d:cd:e6:1d:d8:6d:0e:36:17:b6:1e:17:2e:2b:b4:
18:98:29:a1:d5:44:9f:b6:05:a2:93:8c:32:bb:19:32:48:8d:
64:ca:1e:b9:c8:0e:91:dc:de:27:e6:17:b7:07:18:aa:64:09:
90:39:a7:29:4c:e3:6a:7b:e2:57:b0:be:f3:08:42:13:d2:2a:
9a:26:f5:16:e8:e7:1a:0e:01:a4:59:e1:49:dd:62:2e:00:d0:
ce:8a:9f:32:5a:36:e4:a9:aa:ba:b6:70:8c:ef:7c:be:1b:31:
60:fe:3b:99:5f:33:a1:9c:5d:de:5f:2f:ec:dc:4a:85:b8:b6:
99:be:d6:b4:0d:47:ed:48:8d:ae:47:79:27:6d:a0:b2:2c:ba:
ed:c0:dd:12:e1:3b:71:8a:45:2a:54:e5:64:09:44:90:6d:fd:
e4:ba:87:9a:b5:98:d8:2a:94:57:fc:8d:69:03:ff:fe:57:23:
45:43:3d:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 20:07:03 2024 by rpki-client on console-ams.rpki-client.org