Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/eed853-3b36-45ed-9533-b17c2affa30b/1/cIlDDAuEbPAnRn4Qtr2LOISF6wc.roa
File: cIlDDAuEbPAnRn4Qtr2LOISF6wc.roa (raw, json)
Hash identifier: hmoIVvqkMOYFP3SeUd5ogS67VZNE35qduPA2zqKLkGE=
Subject key identifier: 70:89:43:0C:0B:84:6C:F0:27:46:7E:10:B6:BD:8B:38:84:85:EB:07
Certificate issuer: /CN=ba0f864ba0fa204de93ac5aa84f728b6220c6f7c
Certificate serial: 018CC4249B38EDA913981E373FFCD7E01DDD
Authority key identifier: BA:0F:86:4B:A0:FA:20:4D:E9:3A:C5:AA:84:F7:28:B6:22:0C:6F:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ug-GS6D6IE3pOsWqhPcotiIMb3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/eed853-3b36-45ed-9533-b17c2affa30b/1/cIlDDAuEbPAnRn4Qtr2LOISF6wc.roa
Signing time: Mon 01 Jan 2024 08:29:42 +0000
ROA not before: Mon 01 Jan 2024 08:29:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201962
IP address blocks: 91.205.12.0/22 maxlen: 22
185.58.28.0/22 maxlen: 22
45.153.176.0/22 maxlen: 22
2a04:df80::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/eed853-3b36-45ed-9533-b17c2affa30b/1/ug-GS6D6IE3pOsWqhPcotiIMb3w.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/eed853-3b36-45ed-9533-b17c2affa30b/1/ug-GS6D6IE3pOsWqhPcotiIMb3w.mft
rsync://rpki.ripe.net/repository/DEFAULT/ug-GS6D6IE3pOsWqhPcotiIMb3w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 07:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:9b:38:ed:a9:13:98:1e:37:3f:fc:d7:e0:1d:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba0f864ba0fa204de93ac5aa84f728b6220c6f7c
Validity
Not Before: Jan 1 08:29:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7089430c0b846cf027467e10b6bd8b388485eb07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:33:1f:70:68:79:67:97:d6:fc:fc:82:c4:19:
63:c3:f1:85:20:bb:ad:3f:49:99:ff:41:3e:da:4c:
13:12:e7:89:1a:1a:40:42:41:49:15:db:33:ef:b6:
3b:e4:03:26:88:3c:ed:03:63:64:91:7b:70:4d:34:
51:9e:01:a5:53:f8:a7:bc:3c:ec:24:ec:c5:46:e7:
d8:54:e7:4e:c6:cf:13:29:a6:40:e7:fb:b2:25:63:
c9:82:06:aa:c2:00:18:7c:ee:f6:00:10:77:63:77:
1d:a1:23:43:06:7e:80:c0:5c:ab:f5:1b:ff:af:6e:
81:fc:0e:cb:31:31:ac:e9:7b:26:cd:a2:ec:5c:a0:
78:5d:0e:45:ca:73:ca:af:24:29:9d:72:7b:b1:ce:
6d:78:26:a4:f1:c3:1e:b7:8b:ce:93:c3:ac:d9:8e:
67:ca:ed:5c:7b:e7:d9:b7:19:89:61:39:9a:36:90:
78:84:b4:65:fb:37:27:4d:c4:13:11:48:61:e1:7f:
5e:26:cf:63:2d:5c:0f:94:c1:c5:7e:7a:4b:87:2d:
74:da:7e:5c:a8:1b:39:d5:95:45:b2:10:c3:e1:e3:
9b:e7:23:d8:e0:35:ef:f4:3d:9b:53:54:2d:41:21:
fe:1a:78:8f:f9:e2:f1:f1:93:b7:42:39:48:1f:9a:
90:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:89:43:0C:0B:84:6C:F0:27:46:7E:10:B6:BD:8B:38:84:85:EB:07
X509v3 Authority Key Identifier:
keyid:BA:0F:86:4B:A0:FA:20:4D:E9:3A:C5:AA:84:F7:28:B6:22:0C:6F:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ug-GS6D6IE3pOsWqhPcotiIMb3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/eed853-3b36-45ed-9533-b17c2affa30b/1/cIlDDAuEbPAnRn4Qtr2LOISF6wc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/eed853-3b36-45ed-9533-b17c2affa30b/1/ug-GS6D6IE3pOsWqhPcotiIMb3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.153.176.0/22
91.205.12.0/22
185.58.28.0/22
IPv6:
2a04:df80::/29
Signature Algorithm: sha256WithRSAEncryption
6b:9b:7e:78:6e:cd:1c:5d:62:0f:53:8b:66:c9:6a:d2:cb:03:
d5:a9:3d:ef:92:1b:b7:9a:60:c6:e0:a0:e0:51:f9:1d:1b:f0:
b5:a0:96:7f:8b:9a:0b:a0:49:5a:fa:b8:50:53:bc:26:00:05:
65:ab:75:ab:15:78:84:b3:e3:3c:24:2c:9a:83:d4:ca:19:92:
16:68:c4:be:fa:52:ef:7e:b5:62:89:ae:b1:84:b4:4d:96:62:
c8:85:1b:8b:8b:82:5a:f0:62:d2:e3:f7:e2:36:d7:53:c2:5a:
a7:a6:ac:73:f8:2c:05:b2:25:41:a0:85:9a:7d:ea:8a:dc:b7:
f0:8d:11:68:f5:ce:12:86:76:c2:bf:40:e2:21:d2:e4:53:0e:
7d:4c:64:28:62:a0:1c:fb:f3:a8:c7:7c:6d:4c:9c:02:ab:4f:
3d:d8:61:ef:7e:9a:1e:4b:ba:2b:56:ff:00:3a:3c:78:f7:bc:
05:53:08:d9:7d:84:38:fb:df:6c:f8:c2:4f:36:6c:28:20:74:
a2:df:c6:39:83:05:15:65:fd:c2:4f:fc:77:22:e6:4c:ad:07:
72:d6:93:c8:32:32:45:6c:57:9d:42:61:e2:45:23:71:72:50:
24:70:9c:bd:eb:39:59:74:8e:7c:fe:3b:83:94:ae:03:b9:3e:
94:7c:06:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 12:33:30 2024 by rpki-client on console-ams.rpki-client.org