Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/410eaf-f82d-47ff-9926-0b1b30895602/1/8VoHdW-URMj98aBcJnZFQYh7VKE.roa
File: 8VoHdW-URMj98aBcJnZFQYh7VKE.roa (raw, json)
Hash identifier: upqgg8DePi0vE9pu3FFzCEbUV18zPi2U5mdGaWD/WAk=
Subject key identifier: F1:5A:07:75:6F:94:44:C8:FD:F1:A0:5C:26:76:45:41:88:7B:54:A1
Certificate issuer: /CN=13d59fd683e3570d63895530ceb9f2c84fefe0a3
Certificate serial: 018F39213FFB743B04FF3D9186DA88F1DBFA
Authority key identifier: 13:D5:9F:D6:83:E3:57:0D:63:89:55:30:CE:B9:F2:C8:4F:EF:E0:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E9Wf1oPjVw1jiVUwzrnyyE_v4KM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/410eaf-f82d-47ff-9926-0b1b30895602/1/8VoHdW-URMj98aBcJnZFQYh7VKE.roa
Signing time: Thu 02 May 2024 11:47:11 +0000
ROA not before: Thu 02 May 2024 11:47:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 38955
IP address blocks: 81.19.144.0/20 maxlen: 24
178.23.80.0/21 maxlen: 23
185.16.188.0/22 maxlen: 24
185.16.188.0/24 maxlen: 32
185.16.190.0/24 maxlen: 24
185.115.184.0/23 maxlen: 23
185.115.186.0/23 maxlen: 23
185.164.4.0/23 maxlen: 23
185.164.6.0/23 maxlen: 23
185.173.140.0/22 maxlen: 24
2a00:1a68::/32 maxlen: 34
2a0a:7c00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/410eaf-f82d-47ff-9926-0b1b30895602/1/E9Wf1oPjVw1jiVUwzrnyyE_v4KM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/410eaf-f82d-47ff-9926-0b1b30895602/1/E9Wf1oPjVw1jiVUwzrnyyE_v4KM.mft
rsync://rpki.ripe.net/repository/DEFAULT/E9Wf1oPjVw1jiVUwzrnyyE_v4KM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 14:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:39:21:3f:fb:74:3b:04:ff:3d:91:86:da:88:f1:db:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13d59fd683e3570d63895530ceb9f2c84fefe0a3
Validity
Not Before: May 2 11:47:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f15a07756f9444c8fdf1a05c26764541887b54a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:40:43:4a:75:04:51:96:fe:79:d1:66:fd:12:
d4:64:94:32:a7:20:e9:af:14:d7:7c:34:70:b7:14:
f5:06:d3:5f:37:d1:ee:ba:83:37:1d:f4:be:79:6b:
cb:1d:b3:fb:2b:75:0f:c7:61:a3:9c:5d:bd:17:66:
fc:2a:6c:6c:52:0c:c0:49:1d:e4:05:3d:26:79:a2:
25:0d:21:e5:7c:8f:1d:6a:9d:ac:26:3b:84:16:52:
63:26:b0:4f:f9:f8:08:b1:98:40:be:7b:15:3c:32:
e1:7a:cc:92:95:67:b0:e3:7b:50:f8:66:ac:a3:38:
d3:22:8d:2e:fe:0d:7f:f9:2a:14:12:47:72:1c:9a:
87:f1:44:47:a3:c3:97:d7:34:61:07:58:2a:dd:a7:
3e:84:92:e2:2e:b9:77:b8:40:1a:f0:ad:93:4f:05:
76:28:52:39:ce:31:1a:3c:a2:23:b1:6e:68:81:4f:
a3:18:cf:df:66:7f:d2:26:39:50:05:84:8f:bf:52:
74:3c:bd:e2:7f:5b:c4:bb:02:42:6d:a1:71:b9:1b:
a7:63:43:b2:fb:0c:c0:29:09:7e:d1:48:71:ae:9a:
bd:e6:a2:52:96:06:c7:9d:09:9f:c6:a5:2a:dc:10:
e0:9a:7c:50:c8:45:cd:6d:04:98:68:0b:96:fa:55:
a5:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:5A:07:75:6F:94:44:C8:FD:F1:A0:5C:26:76:45:41:88:7B:54:A1
X509v3 Authority Key Identifier:
keyid:13:D5:9F:D6:83:E3:57:0D:63:89:55:30:CE:B9:F2:C8:4F:EF:E0:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E9Wf1oPjVw1jiVUwzrnyyE_v4KM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/410eaf-f82d-47ff-9926-0b1b30895602/1/8VoHdW-URMj98aBcJnZFQYh7VKE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/410eaf-f82d-47ff-9926-0b1b30895602/1/E9Wf1oPjVw1jiVUwzrnyyE_v4KM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.144.0/20
178.23.80.0/21
185.16.188.0/22
185.115.184.0/22
185.164.4.0/22
185.173.140.0/22
IPv6:
2a00:1a68::/32
2a0a:7c00::/29
Signature Algorithm: sha256WithRSAEncryption
13:50:07:bb:d6:39:20:77:6a:92:be:3a:d9:35:f0:80:82:c3:
f0:56:67:ac:6c:b7:62:e8:27:35:c4:46:85:90:37:76:40:24:
2f:79:f0:5c:e3:6b:45:d5:d5:fd:66:20:ce:48:81:9f:b6:d7:
36:f1:6e:b4:74:b1:29:e4:1d:6c:6b:ea:98:75:31:cc:40:59:
ac:d9:40:90:67:fe:e8:88:c6:3b:e2:fa:18:4e:7c:fb:bd:98:
11:b1:91:3b:30:73:bc:0c:fa:ac:66:00:7a:35:fb:11:74:b5:
f0:95:a6:8a:18:70:57:40:d0:7f:0d:0e:00:14:d6:c7:86:1c:
90:98:c1:40:8d:9e:48:98:56:60:6b:f1:4e:ba:83:e0:77:14:
39:7e:4e:ec:35:db:9b:dc:85:56:28:7c:8d:85:0d:c6:b9:83:
e1:8e:36:a5:d5:74:02:c4:c7:3a:a2:cc:d1:69:55:01:ca:3b:
12:23:aa:e8:f6:28:20:bd:ca:3c:2c:4c:7d:56:ba:e1:0e:55:
50:ad:3e:fb:12:71:01:9f:d3:43:0f:60:e1:61:44:1f:e6:3e:
de:6f:28:c0:18:7f:53:e9:5d:e2:12:cb:d6:4b:e5:bb:b7:1c:
be:50:c2:1e:5c:45:d4:34:d7:ed:37:01:5a:77:7e:29:06:ad:
11:dd:e2:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 22:12:55 2024 by rpki-client on console-ams.rpki-client.org