Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/2e2747-ad74-4d31-9256-d35edb9fdd21/1/cNxHY5lXvWDLNhviwdXl1HhTzXY.roa
File: cNxHY5lXvWDLNhviwdXl1HhTzXY.roa (raw, json)
Hash identifier: wbFEpw4vM76XaQRLTzUMZKTkSZE9UeJVPlk6eox06e4=
Subject key identifier: 70:DC:47:63:99:57:BD:60:CB:36:1B:E2:C1:D5:E5:D4:78:53:CD:76
Certificate issuer: /CN=f48b3f0c6a87c045bdcffabd900db8892be702e1
Certificate serial: 018CC6B785DD25342CA54D3F61187C642DF0
Authority key identifier: F4:8B:3F:0C:6A:87:C0:45:BD:CF:FA:BD:90:0D:B8:89:2B:E7:02:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Is_DGqHwEW9z_q9kA24iSvnAuE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/2e2747-ad74-4d31-9256-d35edb9fdd21/1/cNxHY5lXvWDLNhviwdXl1HhTzXY.roa
Signing time: Mon 01 Jan 2024 20:29:25 +0000
ROA not before: Mon 01 Jan 2024 20:29:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5539
IP address blocks: 82.118.32.0/19 maxlen: 19
194.97.128.0/19 maxlen: 19
195.24.96.0/19 maxlen: 19
194.97.64.0/19 maxlen: 19
193.149.32.0/19 maxlen: 19
195.30.0.0/16 maxlen: 16
185.54.120.0/22 maxlen: 22
2001:608::/32 maxlen: 32
2001:4150::/32 maxlen: 32
2001:67c:158c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/2e2747-ad74-4d31-9256-d35edb9fdd21/1/9Is_DGqHwEW9z_q9kA24iSvnAuE.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/2e2747-ad74-4d31-9256-d35edb9fdd21/1/9Is_DGqHwEW9z_q9kA24iSvnAuE.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Is_DGqHwEW9z_q9kA24iSvnAuE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:85:dd:25:34:2c:a5:4d:3f:61:18:7c:64:2d:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f48b3f0c6a87c045bdcffabd900db8892be702e1
Validity
Not Before: Jan 1 20:29:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=70dc47639957bd60cb361be2c1d5e5d47853cd76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:23:f5:53:09:cc:61:8b:3d:56:68:35:89:79:
ce:88:f0:ca:75:f0:ab:48:ea:7e:47:88:7b:47:29:
f0:c9:80:bd:fe:3e:28:be:a6:ad:4e:8f:d4:45:22:
97:3c:e4:d5:88:73:d3:c8:66:c8:5f:db:74:b9:12:
90:00:7a:47:84:99:7c:de:bd:bd:b5:10:59:14:f3:
8c:c9:f7:5f:95:1e:05:e4:7c:a0:ac:0c:de:35:5d:
3d:91:ac:17:1c:d1:92:74:a2:1b:43:6b:6c:0a:ff:
9e:6a:43:8b:77:15:aa:dd:20:fd:dc:18:7f:3b:a8:
d5:0d:f9:22:43:f3:c4:fa:64:96:ee:6c:d9:43:09:
ef:44:d2:48:d3:cc:1b:f8:39:41:ab:8b:2a:e5:b1:
97:ad:28:1b:28:fd:0c:56:5e:8d:23:10:f2:c3:f2:
48:95:9b:82:17:d8:79:40:8c:f5:4f:ed:d9:b7:ec:
42:3a:0e:1c:a6:e0:dc:bd:0e:14:39:5e:8b:df:67:
7a:fb:7f:b2:13:c4:97:38:53:92:34:c0:05:cf:d1:
74:1d:25:0f:38:94:0d:71:10:7c:6a:14:01:28:f4:
93:c1:59:25:1c:27:68:a8:60:0e:8b:34:a4:b3:07:
71:99:04:1f:aa:0a:d1:f1:42:5d:bc:53:ca:5b:d2:
5b:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:DC:47:63:99:57:BD:60:CB:36:1B:E2:C1:D5:E5:D4:78:53:CD:76
X509v3 Authority Key Identifier:
keyid:F4:8B:3F:0C:6A:87:C0:45:BD:CF:FA:BD:90:0D:B8:89:2B:E7:02:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Is_DGqHwEW9z_q9kA24iSvnAuE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/2e2747-ad74-4d31-9256-d35edb9fdd21/1/cNxHY5lXvWDLNhviwdXl1HhTzXY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/2e2747-ad74-4d31-9256-d35edb9fdd21/1/9Is_DGqHwEW9z_q9kA24iSvnAuE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.118.32.0/19
185.54.120.0/22
193.149.32.0/19
194.97.64.0/19
194.97.128.0/19
195.24.96.0/19
195.30.0.0/16
IPv6:
2001:608::/32
2001:67c:158c::/48
2001:4150::/32
Signature Algorithm: sha256WithRSAEncryption
bf:71:7d:87:2c:d6:54:70:b8:51:ad:a9:79:4a:32:90:cf:b1:
fb:51:d3:3e:87:e7:54:c5:79:81:0a:f6:30:6b:7d:8e:70:13:
2b:84:f2:a3:91:06:6e:ea:ce:fa:0c:cd:16:9e:7e:12:91:57:
c2:1a:ca:ac:61:c9:0b:53:49:04:03:b9:3c:ec:6b:9a:69:da:
44:b4:2d:08:8e:3f:5b:6a:73:33:c9:10:6f:d5:e7:f5:c3:17:
ea:80:e6:8d:dd:e3:d3:26:b1:62:03:02:81:c3:98:87:c7:ab:
66:31:39:55:77:15:25:68:63:30:f7:c0:24:0d:d7:6d:11:9a:
a4:27:53:8d:6e:41:51:13:46:6b:62:46:34:4a:45:27:0e:30:
bf:0d:a6:5f:91:89:56:ea:d8:98:2f:63:ff:d7:3a:b0:b4:2c:
39:3e:fc:19:bd:3e:55:fe:cf:cb:d0:cf:11:57:dd:93:88:fb:
93:a7:05:25:49:61:ea:9f:0d:2e:12:4e:fe:b5:3d:0a:67:19:
c3:1b:fa:85:29:ff:ce:fe:22:04:31:4a:25:fe:b6:cc:82:16:
be:4a:20:0b:9f:04:50:f7:9d:21:65:66:62:06:4d:c9:4f:9f:
a7:fd:0a:dd:db:ae:13:c3:10:0f:b4:d9:79:9c:da:a7:08:27:
4a:ab:51:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:16:08 2024 by rpki-client on console-fra.rpki-client.org