Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/3kbmRsWZk6H5E6V3WDd3C4ABzio.roa
File: 3kbmRsWZk6H5E6V3WDd3C4ABzio.roa (raw, json)
Hash identifier: MdavDzhasdfFHA7YWby4v8S76Cti+FWviPo9cwM3et4=
Subject key identifier: DE:46:E6:46:C5:99:93:A1:F9:13:A5:77:58:37:77:0B:80:01:CE:2A
Certificate issuer: /CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Certificate serial: 018CC6B8C6267D57B8B2BA8E18DD949665E5
Authority key identifier: 4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/3kbmRsWZk6H5E6V3WDd3C4ABzio.roa
Signing time: Mon 01 Jan 2024 20:30:47 +0000
ROA not before: Mon 01 Jan 2024 20:30:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6939
IP address blocks: 31.40.196.0/22 maxlen: 22
77.241.72.0/22 maxlen: 22
212.115.100.0/22 maxlen: 22
84.54.0.0/22 maxlen: 22
85.8.144.0/22 maxlen: 22
212.87.196.0/22 maxlen: 22
139.28.212.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.mft
rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Apr 2024 01:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:c6:26:7d:57:b8:b2:ba:8e:18:dd:94:96:65:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Validity
Not Before: Jan 1 20:30:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=de46e646c59993a1f913a5775837770b8001ce2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:84:81:44:84:46:a3:b5:ef:fe:70:ff:af:20:
7e:73:61:d4:74:00:31:3f:e4:99:21:6d:90:91:98:
88:dd:28:06:d1:75:9b:83:af:46:41:da:3c:ac:fc:
b7:f9:0b:99:67:18:80:15:ec:87:2e:4d:47:e0:fb:
c7:74:b4:a7:9e:bd:e5:c7:57:a9:91:2b:2a:6b:cf:
fb:f7:ab:21:34:0f:18:c6:34:12:3e:72:a7:e1:32:
cf:00:fb:9f:37:24:00:29:aa:dc:3b:cb:15:22:80:
a2:47:3e:53:a9:30:4d:33:e5:ea:e9:95:fb:65:88:
d0:35:16:a2:28:5a:91:e9:c6:8b:d1:52:0d:f8:7f:
22:9d:63:f6:22:02:33:28:96:a7:90:60:ae:94:25:
d2:f9:f2:ed:b5:af:9f:71:b0:b7:59:64:cb:07:77:
c9:ea:f1:77:4e:f5:86:63:7e:0a:86:0c:5b:1a:23:
ea:37:2f:1d:eb:04:9e:c0:67:a6:67:29:20:09:a7:
a4:14:46:c1:fe:04:c2:6e:8f:61:a7:80:b0:0d:33:
e5:49:da:05:07:b7:18:07:bb:09:5a:52:0a:5d:c5:
d8:07:c9:aa:7e:c2:f6:61:f1:e6:53:56:22:12:81:
ce:77:05:c5:85:d6:a7:8c:81:ef:b5:8e:b0:00:15:
da:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:46:E6:46:C5:99:93:A1:F9:13:A5:77:58:37:77:0B:80:01:CE:2A
X509v3 Authority Key Identifier:
keyid:4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/3kbmRsWZk6H5E6V3WDd3C4ABzio.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.40.196.0/22
77.241.72.0/22
84.54.0.0/22
85.8.144.0/22
139.28.212.0/22
212.87.196.0/22
212.115.100.0/22
Signature Algorithm: sha256WithRSAEncryption
aa:95:fa:1e:4f:da:91:0c:e3:9e:ac:11:d6:38:c9:ce:85:8f:
54:49:b9:bc:9d:d5:e9:61:10:77:e2:dd:cf:32:62:a1:3c:84:
b8:ff:b2:40:f0:5b:d8:0b:d9:81:04:e0:a7:4f:d0:f0:32:39:
30:22:bf:3d:25:b3:a2:9e:74:52:84:88:bb:76:cb:42:3c:a9:
d7:67:d5:10:03:eb:d3:1c:44:5d:55:ec:a5:a8:8c:90:1f:85:
36:54:14:11:f2:63:9a:91:a9:8a:5a:fd:4c:56:5d:e6:f6:39:
a5:e6:e6:65:3e:e5:dc:64:fd:32:86:b1:bd:10:4a:65:65:eb:
25:44:c8:79:02:b1:9f:b8:05:85:a8:21:d9:a9:6d:4d:52:3d:
fe:20:d6:8b:de:cd:3d:15:4b:82:3e:45:a0:52:b3:a9:c6:69:
d5:d2:58:f1:5a:9f:be:a7:25:1b:63:30:8f:02:67:0f:3f:ba:
c4:74:19:76:69:9d:79:76:a7:a1:5a:2a:44:0b:de:26:42:d4:
2e:45:05:15:2d:15:ad:6a:46:52:8e:a5:e0:02:8d:8a:bd:25:
49:26:df:43:20:61:3a:64:5b:f0:7c:b2:ba:9f:1d:f9:21:2b:
ab:0d:fc:5f:63:28:12:95:9b:7e:17:8a:e9:28:16:cf:c5:70:
2b:4b:98:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:52:12 2024 by rpki-client on console-ams.rpki-client.org