Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/1DH92buv-T2szdryWgghoDrAyxI.roa
File: 1DH92buv-T2szdryWgghoDrAyxI.roa (raw, json)
Hash identifier: OuiYTRZsb7XNk0vUJufF7l3zNCIth+G4Y5ZGU75S9bs=
Subject key identifier: D4:31:FD:D9:BB:AF:F9:3D:AC:CD:DA:F2:5A:08:21:A0:3A:C0:CB:12
Certificate issuer: /CN=a9b75b64d5da17d70bbabd811a39a602ddaf963a
Certificate serial: 018CC56EFE76BE3586224ED8204649FAC7D3
Authority key identifier: A9:B7:5B:64:D5:DA:17:D7:0B:BA:BD:81:1A:39:A6:02:DD:AF:96:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qbdbZNXaF9cLur2BGjmmAt2vljo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/1DH92buv-T2szdryWgghoDrAyxI.roa
Signing time: Mon 01 Jan 2024 14:30:34 +0000
ROA not before: Mon 01 Jan 2024 14:30:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51191
IP address blocks: 185.24.68.0/22 maxlen: 22
195.138.240.0/21 maxlen: 21
195.138.241.0/24 maxlen: 24
195.138.244.0/24 maxlen: 24
130.185.104.0/21 maxlen: 21
2a01:4a0:2002::/48 maxlen: 48
2a01:4a0:2000::/48 maxlen: 48
2a01:4a0:2001::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/qbdbZNXaF9cLur2BGjmmAt2vljo.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/qbdbZNXaF9cLur2BGjmmAt2vljo.mft
rsync://rpki.ripe.net/repository/DEFAULT/qbdbZNXaF9cLur2BGjmmAt2vljo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:fe:76:be:35:86:22:4e:d8:20:46:49:fa:c7:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9b75b64d5da17d70bbabd811a39a602ddaf963a
Validity
Not Before: Jan 1 14:30:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d431fdd9bbaff93daccddaf25a0821a03ac0cb12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:a1:19:a3:17:74:17:b3:21:4f:f3:2d:0f:12:
95:55:63:13:d1:38:85:01:49:1c:ce:fc:ee:e8:f1:
b7:41:23:66:ce:43:24:df:1f:2f:4a:cd:31:ec:e1:
44:89:43:46:4c:d7:67:09:e4:2c:47:c5:94:60:7a:
14:a0:ca:c1:66:cd:a0:ce:b1:ed:02:7f:c0:e8:96:
0d:1a:51:7a:0d:72:99:27:7d:f0:86:a0:b2:62:75:
61:a8:42:25:be:3a:c8:c3:da:02:0e:b1:b7:56:a1:
4d:c0:60:e8:2c:ab:c1:cf:2f:78:cc:ba:ce:13:1a:
95:39:0e:17:df:37:e9:fc:ca:0f:89:fc:ea:ce:e8:
cf:63:35:84:f6:2d:86:39:3b:60:c0:d3:c3:b1:2f:
d6:f8:cc:fa:59:25:4e:d9:9f:cc:60:fb:64:a5:b2:
e4:17:c2:17:3c:28:2a:96:70:64:a7:02:d5:2d:f5:
44:67:ed:06:43:b4:6c:02:b8:4b:57:f7:82:7d:b6:
1e:aa:a3:20:d8:c2:64:ea:db:64:86:23:c1:12:a6:
ab:cc:a4:00:1d:2b:4c:76:26:db:e2:dd:15:19:74:
44:79:0d:d7:61:a6:29:68:41:c5:3e:2b:bf:2b:43:
79:0b:4a:96:8a:25:07:16:c2:a0:da:2b:b4:b7:e8:
ae:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:31:FD:D9:BB:AF:F9:3D:AC:CD:DA:F2:5A:08:21:A0:3A:C0:CB:12
X509v3 Authority Key Identifier:
keyid:A9:B7:5B:64:D5:DA:17:D7:0B:BA:BD:81:1A:39:A6:02:DD:AF:96:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qbdbZNXaF9cLur2BGjmmAt2vljo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/1DH92buv-T2szdryWgghoDrAyxI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/qbdbZNXaF9cLur2BGjmmAt2vljo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.185.104.0/21
185.24.68.0/22
195.138.240.0/21
IPv6:
2a01:4a0:2000::-2a01:4a0:2002:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
41:e7:95:6b:4a:d8:b3:02:f8:0d:e6:da:64:ce:51:a6:f9:22:
6a:2b:62:c3:cc:3c:bb:b0:e6:38:82:59:58:a9:1c:6d:e8:69:
9e:e6:1d:ea:ba:66:36:24:4c:0e:08:7c:25:4f:27:f2:4c:b6:
e9:53:b7:33:27:81:5c:76:7d:73:77:8d:29:29:18:a4:18:e3:
36:14:6c:a5:dc:c4:52:3d:81:3b:1f:83:26:79:23:cd:4d:45:
93:33:2d:8a:ca:fd:47:79:6f:ca:65:72:41:6b:0a:d8:fd:7f:
3e:96:27:43:04:ee:0a:32:b8:ea:2c:51:37:b8:a3:c1:e0:94:
f2:e4:a1:6c:ff:e9:43:e8:c3:26:0c:6f:15:b9:9f:72:bb:a3:
32:2d:73:2b:f0:bd:49:37:28:db:d9:e6:e4:6a:21:4d:8c:6d:
2e:0e:73:ff:de:30:aa:f8:dc:16:92:95:79:28:d4:50:77:8c:
1b:ef:89:b4:90:8b:0f:a6:19:18:56:07:08:36:75:48:38:04:
c8:b2:7f:a8:7a:54:f9:21:6e:90:db:1b:f4:a2:04:d4:3f:f9:
74:bc:92:0f:39:40:28:1b:6a:32:28:ac:25:d3:9e:f4:c4:95:
ec:17:4b:c4:73:f2:1f:0d:d7:01:55:e5:4e:a2:dd:ae:9d:1a:
fc:8c:29:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:54:14 2024 by rpki-client on console-fra.rpki-client.org