Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/8042bf-71ba-4fbd-9e17-447edc4f9af6/1/iWkzsELdlkbFOug2kHh9ebPCkr0.roa
File: iWkzsELdlkbFOug2kHh9ebPCkr0.roa (raw, json)
Hash identifier: aYd55Y8M1ostXyHuMcy+2YtYP1aZX4GnMrisZwnvtzI=
Subject key identifier: 89:69:33:B0:42:DD:96:46:C5:3A:E8:36:90:78:7D:79:B3:C2:92:BD
Certificate issuer: /CN=e2e8f56bc1f5010291681bc2d8c02f9acbf714a0
Certificate serial: 018CCA9923CFA80CBCE17620FFA79C9418C1
Authority key identifier: E2:E8:F5:6B:C1:F5:01:02:91:68:1B:C2:D8:C0:2F:9A:CB:F7:14:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4uj1a8H1AQKRaBvC2MAvmsv3FKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/8042bf-71ba-4fbd-9e17-447edc4f9af6/1/iWkzsELdlkbFOug2kHh9ebPCkr0.roa
Signing time: Tue 02 Jan 2024 14:34:42 +0000
ROA not before: Tue 02 Jan 2024 14:34:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8326
IP address blocks: 212.122.192.0/20 maxlen: 20
212.122.208.0/21 maxlen: 21
46.239.128.0/20 maxlen: 20
89.191.128.0/20 maxlen: 20
82.146.224.0/19 maxlen: 19
2001:908::/30 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/8042bf-71ba-4fbd-9e17-447edc4f9af6/1/4uj1a8H1AQKRaBvC2MAvmsv3FKA.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/8042bf-71ba-4fbd-9e17-447edc4f9af6/1/4uj1a8H1AQKRaBvC2MAvmsv3FKA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4uj1a8H1AQKRaBvC2MAvmsv3FKA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:99:23:cf:a8:0c:bc:e1:76:20:ff:a7:9c:94:18:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2e8f56bc1f5010291681bc2d8c02f9acbf714a0
Validity
Not Before: Jan 2 14:34:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=896933b042dd9646c53ae83690787d79b3c292bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e0:3e:e0:25:cc:81:8d:1c:16:bd:2a:21:fe:
9b:6b:71:96:00:ba:62:ff:a9:df:d3:e0:f1:3e:d2:
c3:50:ef:ab:b5:0f:c2:ed:a7:58:b0:7f:44:e5:c2:
61:2d:5c:ae:b2:2c:d7:a4:4b:cb:bf:02:38:27:67:
8c:b9:46:44:e7:8f:cf:c9:c6:ec:e7:22:8b:6b:f0:
5a:b5:03:c8:fd:28:29:70:37:9e:c4:84:a8:3e:8a:
46:82:b9:4a:a8:37:76:27:26:05:44:00:67:f9:28:
0d:f0:b8:49:83:eb:1f:8a:1f:fd:81:7d:f5:3b:d3:
fd:b4:6d:f1:45:96:b6:5a:e9:3c:72:9e:1e:58:ee:
78:7f:35:88:87:32:0a:cd:c7:48:80:1e:e4:16:ad:
68:fd:fb:7c:06:f2:8e:54:08:d4:24:f3:b7:fa:30:
65:ce:ce:15:10:0a:96:fe:3b:46:1a:b8:7c:68:0c:
5d:95:a2:f9:c1:5b:c1:87:89:a3:4d:59:39:97:bf:
01:ce:ab:f6:67:ea:f3:6f:85:2f:9a:6f:43:80:99:
db:cc:c3:d5:e2:2d:e2:2f:86:19:3b:cc:2b:c9:7b:
78:8f:c7:ee:db:10:8a:04:f0:6a:e3:98:cb:c8:c2:
9e:be:91:5c:de:d5:6d:70:b7:72:a1:03:68:fb:31:
e2:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:69:33:B0:42:DD:96:46:C5:3A:E8:36:90:78:7D:79:B3:C2:92:BD
X509v3 Authority Key Identifier:
keyid:E2:E8:F5:6B:C1:F5:01:02:91:68:1B:C2:D8:C0:2F:9A:CB:F7:14:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4uj1a8H1AQKRaBvC2MAvmsv3FKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/8042bf-71ba-4fbd-9e17-447edc4f9af6/1/iWkzsELdlkbFOug2kHh9ebPCkr0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/8042bf-71ba-4fbd-9e17-447edc4f9af6/1/4uj1a8H1AQKRaBvC2MAvmsv3FKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.239.128.0/20
82.146.224.0/19
89.191.128.0/20
212.122.192.0-212.122.215.255
IPv6:
2001:908::/30
Signature Algorithm: sha256WithRSAEncryption
2c:9f:0c:e6:1e:66:ea:7c:9e:08:c5:15:55:57:1a:f3:3e:e5:
34:dd:58:6e:6e:24:dd:2f:21:d1:a2:69:2d:52:5f:6f:83:0c:
ac:26:4e:1b:ab:ca:dd:05:72:9b:15:b6:a6:f2:21:24:dc:d4:
8a:25:d9:84:55:13:83:8b:8d:e0:18:d1:c5:82:44:72:ea:84:
8a:36:84:b7:b4:94:7a:56:25:a7:d0:a8:bf:fc:46:e0:68:c6:
8e:f8:d3:03:52:3b:c1:5b:a8:e5:62:f6:60:0d:e0:29:58:56:
7c:3b:8a:a1:87:2a:6f:f1:46:23:96:45:45:ad:e9:1e:8e:ee:
31:d8:c0:30:4f:6c:21:e9:8d:56:de:83:70:d2:6f:cd:8f:0b:
3b:f5:a9:2c:fb:4a:4d:9b:f1:5f:a8:ed:96:cf:7c:89:bf:6e:
6a:c8:ae:86:7c:b8:2c:da:c9:72:53:e7:c1:d8:fe:7b:ab:a5:
a9:1a:ea:ac:03:c5:e0:a6:a6:8d:9f:28:f5:e1:15:89:42:da:
79:d4:bd:2a:d2:f0:a0:9b:19:dc:e1:a1:88:fb:96:de:5c:38:
1c:8b:24:01:ff:8a:e1:59:54:82:4a:fc:22:91:08:35:65:f9:
4c:2d:6c:30:cd:d4:de:6a:21:85:ce:a0:cd:30:6a:1c:99:fb:
e4:45:bd:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 23:49:06 2024 by rpki-client on console-ams.rpki-client.org