Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/k40yXu1UEmZb9gTI6SDgmU4f3rs.roa
File: k40yXu1UEmZb9gTI6SDgmU4f3rs.roa (raw, json)
Hash identifier: uS6R9my3hIwXBFyUtPt4kng5gPIYw/gGJFuvgkA6344=
Subject key identifier: 93:8D:32:5E:ED:54:12:66:5B:F6:04:C8:E9:20:E0:99:4E:1F:DE:BB
Certificate issuer: /CN=979f5ca8c33f134c3c157d48b9c2ae4e91b630bf
Certificate serial: 018CC49226AD013AC19C6BE6A0FE45984F02
Authority key identifier: 97:9F:5C:A8:C3:3F:13:4C:3C:15:7D:48:B9:C2:AE:4E:91:B6:30:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l59cqMM_E0w8FX1IucKuTpG2ML8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/k40yXu1UEmZb9gTI6SDgmU4f3rs.roa
Signing time: Mon 01 Jan 2024 10:29:21 +0000
ROA not before: Mon 01 Jan 2024 10:29:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43652
IP address blocks: 195.200.252.0/23 maxlen: 24
185.83.248.0/22 maxlen: 24
2a05:a040::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.mft
rsync://rpki.ripe.net/repository/DEFAULT/l59cqMM_E0w8FX1IucKuTpG2ML8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 05:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:92:26:ad:01:3a:c1:9c:6b:e6:a0:fe:45:98:4f:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=979f5ca8c33f134c3c157d48b9c2ae4e91b630bf
Validity
Not Before: Jan 1 10:29:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=938d325eed5412665bf604c8e920e0994e1fdebb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:7e:0d:3d:ac:64:01:5c:67:cf:0d:04:2c:ce:
cb:c3:84:eb:ff:ac:d3:42:1f:58:f5:df:17:f1:34:
17:88:ff:ec:e7:4b:be:c3:1e:d8:75:e1:06:8e:24:
72:f5:5c:c2:38:97:d3:cc:95:88:a2:ad:b4:29:c4:
b6:3c:34:0c:5d:da:c2:a7:55:29:35:92:45:5e:df:
bd:2a:ac:a1:c3:89:85:b5:27:16:e8:80:64:c1:41:
a6:3b:37:33:38:ec:d3:64:52:b0:e0:f6:9f:f0:77:
89:cf:3f:01:33:d3:69:bf:0f:df:a2:c4:cc:5c:b3:
56:0d:3c:94:48:1d:56:18:fd:3d:48:b5:02:fd:42:
97:9a:ef:8f:01:75:25:dd:14:87:69:b0:c7:7c:ad:
97:dd:62:fb:3b:ce:74:6e:c0:c0:91:be:e4:50:f5:
2d:f5:a2:06:9a:a1:cb:a1:ae:3b:36:62:bc:3a:50:
e2:7a:f2:32:d1:d0:a2:c4:e2:b7:eb:bd:4c:cb:7f:
f5:93:75:3b:db:d6:1d:ef:14:79:54:52:56:94:2e:
37:2b:6e:d2:c6:c0:8b:6c:42:39:0d:b9:1a:ad:8f:
0b:f4:24:d6:e5:11:e1:66:24:42:28:d3:cb:83:72:
a5:02:a8:77:98:0c:2e:55:d4:6e:72:14:0a:6e:04:
91:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:8D:32:5E:ED:54:12:66:5B:F6:04:C8:E9:20:E0:99:4E:1F:DE:BB
X509v3 Authority Key Identifier:
keyid:97:9F:5C:A8:C3:3F:13:4C:3C:15:7D:48:B9:C2:AE:4E:91:B6:30:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l59cqMM_E0w8FX1IucKuTpG2ML8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/k40yXu1UEmZb9gTI6SDgmU4f3rs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.83.248.0/22
195.200.252.0/23
IPv6:
2a05:a040::/29
Signature Algorithm: sha256WithRSAEncryption
3b:f1:f1:47:3f:a4:29:bd:ed:11:ca:04:cc:9c:fa:11:8a:ba:
47:e5:8b:48:cc:dc:bc:04:ae:ef:c7:d2:97:15:52:a0:99:63:
31:8e:6b:fc:b5:a6:e3:75:1a:71:c2:a2:fd:db:a6:85:b8:ce:
39:e7:db:a2:a2:be:5b:75:ea:9e:d5:55:a0:00:f7:3a:5d:93:
db:25:5b:e1:f2:dc:c5:b9:05:93:3d:f8:a0:5b:81:bb:55:80:
29:ae:40:9a:b4:f6:ba:d0:31:29:6b:53:79:7c:b4:61:07:98:
e6:32:de:07:6a:db:44:4c:41:5e:bf:72:3d:d5:4a:10:81:d2:
a9:4a:90:fd:f6:ad:cc:3c:68:e8:4a:8f:c0:04:fe:8b:59:52:
b2:a7:92:1a:b2:c1:35:a4:57:46:e3:a0:6e:03:81:97:d4:5d:
ed:fc:a4:58:1c:57:35:9a:96:2b:a9:25:1e:08:5e:b3:03:7a:
95:12:24:cc:49:90:1d:1d:56:5f:07:10:db:b1:76:74:83:dd:
66:c7:43:34:49:d0:72:d8:1c:f4:cd:b3:26:03:8d:f5:12:e9:
39:26:95:eb:67:9f:03:68:18:27:01:cd:00:e0:4f:21:65:01:
60:9a:9e:8c:c7:f8:58:53:e2:62:68:5d:57:f4:45:a1:82:75:
56:57:f5:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 13:04:01 2024 by rpki-client on console-ams.rpki-client.org