Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/m7H66mgYgF2oMhoWkfKtA_7uTxg.roa
File: m7H66mgYgF2oMhoWkfKtA_7uTxg.roa (raw, json)
Hash identifier: t8HKsRxM3lLQvrYKbN0jlaGCPawKtBvquq9bY9ncZvo=
Subject key identifier: 9B:B1:FA:EA:68:18:80:5D:A8:32:1A:16:91:F2:AD:03:FE:EE:4F:18
Certificate issuer: /CN=f60846f21c56a8513d31c155dd199197a3ffc7c0
Certificate serial: 018EA8130F15EDCCFD73C84347E1C2F12C7F
Authority key identifier: F6:08:46:F2:1C:56:A8:51:3D:31:C1:55:DD:19:91:97:A3:FF:C7:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9ghG8hxWqFE9McFV3RmRl6P_x8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/m7H66mgYgF2oMhoWkfKtA_7uTxg.roa
Signing time: Thu 04 Apr 2024 07:46:45 +0000
ROA not before: Thu 04 Apr 2024 07:46:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 13214
IP address blocks: 31.22.88.0/21 maxlen: 21
185.109.84.0/23 maxlen: 23
185.109.86.0/24 maxlen: 24
2a03:1300::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/9ghG8hxWqFE9McFV3RmRl6P_x8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/9ghG8hxWqFE9McFV3RmRl6P_x8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/9ghG8hxWqFE9McFV3RmRl6P_x8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 11:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:a8:13:0f:15:ed:cc:fd:73:c8:43:47:e1:c2:f1:2c:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f60846f21c56a8513d31c155dd199197a3ffc7c0
Validity
Not Before: Apr 4 07:46:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9bb1faea6818805da8321a1691f2ad03feee4f18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:9c:3f:b6:a3:31:2c:3b:80:2f:79:b7:b5:d8:
02:0f:f8:48:c2:52:0a:c9:2a:1e:95:78:a7:0b:24:
ef:79:67:28:0b:9a:02:9f:5c:b2:db:b4:ea:30:7f:
36:47:76:a1:ac:9e:64:22:86:e0:67:7e:19:d1:4a:
2b:67:37:6b:a7:ca:be:12:3f:7b:e5:17:a6:4a:87:
ee:fa:b2:3d:f4:91:1b:b2:a3:85:9a:6d:44:ce:59:
bf:b6:50:2b:db:f4:87:6a:b3:17:5e:3f:0e:3b:1b:
4d:64:6c:c8:fc:91:c9:2c:b0:37:2e:c3:02:eb:36:
9a:95:1d:be:71:ca:31:4d:6b:0e:dc:58:31:fc:7a:
fa:1a:a9:55:53:d2:12:ef:fb:18:78:13:13:c4:57:
18:72:b4:2d:68:40:15:95:c9:a9:f9:95:23:fa:d7:
fe:a4:00:bf:76:a2:ad:76:32:6a:1e:83:c7:c9:1a:
26:de:0d:2b:09:f1:5e:e5:1d:77:61:59:f7:c0:74:
6a:c3:dd:c3:a2:32:7f:f1:ae:0d:53:ff:e1:0c:c7:
22:d3:a6:a5:58:d1:82:96:86:66:60:09:0b:f1:12:
af:5d:75:63:09:1b:ca:bb:7a:b4:fc:83:22:de:d8:
de:f6:1c:27:72:15:e0:91:af:70:08:c4:8f:13:d5:
29:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:B1:FA:EA:68:18:80:5D:A8:32:1A:16:91:F2:AD:03:FE:EE:4F:18
X509v3 Authority Key Identifier:
keyid:F6:08:46:F2:1C:56:A8:51:3D:31:C1:55:DD:19:91:97:A3:FF:C7:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9ghG8hxWqFE9McFV3RmRl6P_x8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/m7H66mgYgF2oMhoWkfKtA_7uTxg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/9ghG8hxWqFE9McFV3RmRl6P_x8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.22.88.0/21
185.109.84.0-185.109.86.255
IPv6:
2a03:1300::/32
Signature Algorithm: sha256WithRSAEncryption
6c:9d:b4:66:71:4f:5d:81:e3:2a:e5:71:04:1d:c5:55:2e:4c:
fb:77:b4:ac:cf:79:af:0e:66:fd:43:72:03:6d:57:da:92:ea:
98:27:37:09:36:34:e1:ee:a7:ed:9d:a0:b7:f6:ef:46:90:3d:
9d:28:80:5d:87:0b:29:91:f2:e0:e0:c0:e5:ff:3b:35:fd:2e:
16:09:37:46:cf:71:61:86:5a:15:bb:ea:9c:ac:64:16:a7:12:
6d:86:5e:e1:46:d7:fb:55:f9:57:a6:e8:06:65:2d:a4:00:e3:
97:67:d7:c0:da:69:67:c2:92:07:c7:f2:9d:68:33:e6:a3:b6:
c0:f0:bb:6f:da:8c:b2:f0:2f:c4:34:36:a0:63:9c:e1:25:0b:
50:02:51:ea:94:3d:ad:10:f1:6c:0d:63:ae:48:8e:0f:45:f2:
7f:fa:1a:13:f0:e5:0d:45:a9:bd:e0:48:7e:f7:27:78:a9:50:
94:0a:c0:f7:91:d5:fe:dd:09:62:89:87:f5:1e:7e:64:1f:3f:
a8:56:90:e7:9a:ea:24:00:dc:9a:07:7a:4a:58:a6:10:2d:56:
a2:4f:e4:2c:40:8b:8d:5f:ce:87:89:b1:2b:7b:9a:74:55:87:
b2:39:24:06:bc:03:07:54:88:88:50:83:ac:f5:90:cc:7b:ba:
8f:a4:bd:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 13:40:07 2024 by rpki-client on console-fra.rpki-client.org