Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/8e8227-cd20-4db8-a40e-6a3dfb47f8c4/1/tDUcPMXmA801pCtLp79TCda6Y4Q.roa
File: tDUcPMXmA801pCtLp79TCda6Y4Q.roa (raw, json)
Hash identifier: 1t+I6huwkTU42gSkozFuiY7t0kkxSue2BNaGxvrnskY=
Subject key identifier: B4:35:1C:3C:C5:E6:03:CD:35:A4:2B:4B:A7:BF:53:09:D6:BA:63:84
Certificate issuer: /CN=13c9fd37c7431ce6aa3c93a6952c67f0f0c9846e
Certificate serial: 018CC348EC4D95B0783F0BCC28C89D925D4A
Authority key identifier: 13:C9:FD:37:C7:43:1C:E6:AA:3C:93:A6:95:2C:67:F0:F0:C9:84:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E8n9N8dDHOaqPJOmlSxn8PDJhG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/8e8227-cd20-4db8-a40e-6a3dfb47f8c4/1/tDUcPMXmA801pCtLp79TCda6Y4Q.roa
Signing time: Mon 01 Jan 2024 04:29:45 +0000
ROA not before: Mon 01 Jan 2024 04:29:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12835
IP address blocks: 185.38.252.0/22 maxlen: 24
46.226.200.0/21 maxlen: 24
77.72.192.0/21 maxlen: 24
109.205.104.0/21 maxlen: 24
194.105.48.0/21 maxlen: 24
37.128.136.0/21 maxlen: 24
2a00:10c8::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/8e8227-cd20-4db8-a40e-6a3dfb47f8c4/1/E8n9N8dDHOaqPJOmlSxn8PDJhG4.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/8e8227-cd20-4db8-a40e-6a3dfb47f8c4/1/E8n9N8dDHOaqPJOmlSxn8PDJhG4.mft
rsync://rpki.ripe.net/repository/DEFAULT/E8n9N8dDHOaqPJOmlSxn8PDJhG4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 20:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:ec:4d:95:b0:78:3f:0b:cc:28:c8:9d:92:5d:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13c9fd37c7431ce6aa3c93a6952c67f0f0c9846e
Validity
Not Before: Jan 1 04:29:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b4351c3cc5e603cd35a42b4ba7bf5309d6ba6384
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:fc:08:06:c3:9b:70:64:71:79:1a:c5:fe:c1:
ec:5c:7a:1f:15:e8:6e:a2:3e:66:52:a1:9f:b5:65:
42:55:59:7d:d3:f4:e1:9a:d9:93:25:97:04:3b:4b:
e0:bf:61:05:22:e6:ea:ef:48:ec:d5:6e:36:dc:6f:
3d:8b:f7:e8:df:af:49:4d:90:68:ed:45:79:12:72:
5f:33:c3:2d:f6:0d:22:c0:05:48:22:fe:e3:ad:25:
e0:60:29:bb:fe:1b:23:ea:95:e1:e5:ba:f2:54:37:
9d:97:21:83:24:08:69:96:cc:3c:4e:99:1f:04:a9:
54:69:c0:8e:0d:f0:d5:9b:21:81:d9:92:34:c7:6a:
4c:45:37:e2:f7:c4:7c:8b:4b:2a:e9:6e:ba:cc:69:
1a:ae:13:66:b3:d9:e6:3d:ec:fc:18:f3:96:4b:cf:
39:78:15:7c:4d:ff:bb:43:ec:86:35:91:8b:51:ba:
38:ef:08:02:d4:7c:c4:ba:63:6b:b5:97:7f:cc:56:
0b:99:9c:21:3f:a3:37:d3:2a:ab:ac:8d:e6:a5:45:
fd:d0:26:fc:ac:17:70:0d:01:97:7b:48:e6:29:51:
f9:c7:ba:09:f8:91:0a:2d:49:db:57:2f:ae:13:f4:
83:7c:c5:4c:9b:af:64:99:2b:32:e2:25:14:38:01:
aa:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:35:1C:3C:C5:E6:03:CD:35:A4:2B:4B:A7:BF:53:09:D6:BA:63:84
X509v3 Authority Key Identifier:
keyid:13:C9:FD:37:C7:43:1C:E6:AA:3C:93:A6:95:2C:67:F0:F0:C9:84:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E8n9N8dDHOaqPJOmlSxn8PDJhG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/8e8227-cd20-4db8-a40e-6a3dfb47f8c4/1/tDUcPMXmA801pCtLp79TCda6Y4Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/8e8227-cd20-4db8-a40e-6a3dfb47f8c4/1/E8n9N8dDHOaqPJOmlSxn8PDJhG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.128.136.0/21
46.226.200.0/21
77.72.192.0/21
109.205.104.0/21
185.38.252.0/22
194.105.48.0/21
IPv6:
2a00:10c8::/32
Signature Algorithm: sha256WithRSAEncryption
6d:2a:6c:c3:a5:13:6f:f8:5b:f8:40:74:e0:1c:c2:1e:a2:7a:
4c:cc:6b:11:1b:c2:5e:72:d4:99:4d:5c:17:10:48:27:fc:b2:
4b:51:5c:9e:2e:65:2f:10:fa:47:08:fb:42:56:6d:f9:ff:9e:
32:80:73:08:36:5a:b6:c0:26:0c:dc:0c:da:dd:10:47:0b:a7:
32:74:e8:f1:80:1a:11:11:0e:2f:03:9c:98:75:95:37:fb:ca:
06:94:87:e6:3f:fd:b7:56:63:0d:be:51:98:b3:58:73:23:0c:
26:b3:3c:1d:11:ec:f8:9d:e6:42:ab:ec:b5:f8:20:96:e1:44:
2b:de:99:23:c1:4f:4f:13:df:b9:65:bc:de:7a:17:ad:c8:4a:
4d:a2:dc:1f:07:fb:77:d6:d0:5e:d9:9e:5e:21:45:2c:4d:a1:
81:c3:b7:99:4a:40:70:e9:25:30:cb:9d:a3:f2:b6:27:2e:32:
6b:f3:c8:01:79:23:39:9f:be:83:e7:dd:e1:7a:b5:fc:74:1a:
2c:bf:e6:62:e0:cd:12:df:dc:bb:ef:7f:2a:96:74:79:5a:d6:
0b:f2:69:ee:df:e3:18:1a:ad:76:ee:41:fb:28:14:a0:ad:44:
a3:b4:35:d2:c0:1c:0b:13:b4:7a:9d:5a:5a:9b:3d:45:f6:af:
ad:fe:4c:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 00:41:32 2024 by rpki-client on console-ams.rpki-client.org