Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/acd28e-52ae-4ac9-b028-669f7a761631/1/v6f3SFpnn8ggWHtio3Sq08ytZ3U.roa
File: v6f3SFpnn8ggWHtio3Sq08ytZ3U.roa (raw, json)
Hash identifier: 5qtgmz98Wl/iAEoLvphTLUORNFxBXfE69Mcy0xqnK78=
Subject key identifier: BF:A7:F7:48:5A:67:9F:C8:20:58:7B:62:A3:74:AA:D3:CC:AD:67:75
Certificate issuer: /CN=29b3a717665a1137e99dc8fad22e3e7f98db8973
Certificate serial: 01918DEB21A18EFC415F93D641BCD84A11A2
Authority key identifier: 29:B3:A7:17:66:5A:11:37:E9:9D:C8:FA:D2:2E:3E:7F:98:DB:89:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KbOnF2ZaETfpncj60i4-f5jbiXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/acd28e-52ae-4ac9-b028-669f7a761631/1/v6f3SFpnn8ggWHtio3Sq08ytZ3U.roa
Signing time: Mon 26 Aug 2024 09:01:22 +0000
ROA not before: Mon 26 Aug 2024 09:01:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42675
IP address blocks: 185.157.160.0/23 maxlen: 23
185.157.162.0/24 maxlen: 24
185.157.163.0/24 maxlen: 24
217.64.148.0/23 maxlen: 23
217.64.150.0/24 maxlen: 24
2a07:a880:3101::/48 maxlen: 48
2a07:a880:4601::/48 maxlen: 48
2a07:a880:4602::/48 maxlen: 48
2a07:a880:4603::/48 maxlen: 48
2a07:a880:4604::/48 maxlen: 48
2a07:a880:4701::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/acd28e-52ae-4ac9-b028-669f7a761631/1/KbOnF2ZaETfpncj60i4-f5jbiXM.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/acd28e-52ae-4ac9-b028-669f7a761631/1/KbOnF2ZaETfpncj60i4-f5jbiXM.mft
rsync://rpki.ripe.net/repository/DEFAULT/KbOnF2ZaETfpncj60i4-f5jbiXM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:8d:eb:21:a1:8e:fc:41:5f:93:d6:41:bc:d8:4a:11:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29b3a717665a1137e99dc8fad22e3e7f98db8973
Validity
Not Before: Aug 26 09:01:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bfa7f7485a679fc820587b62a374aad3ccad6775
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:15:2e:6a:da:4f:fe:db:04:b4:d9:41:b0:25:
f2:1b:75:c9:e7:63:d0:79:39:a4:9f:b3:70:d6:85:
28:7a:8b:29:3b:86:c6:2c:07:5b:96:6f:38:5c:b4:
0f:83:31:02:92:03:9c:2b:19:fa:e4:a7:3b:c3:50:
92:3f:56:03:01:ab:a6:87:16:d1:a7:49:31:ea:f8:
73:35:90:15:cf:fe:31:51:26:1d:01:bc:68:ac:ae:
19:cf:11:bc:42:16:1b:01:f5:6b:07:a1:70:36:69:
11:0f:52:93:c9:5c:4b:65:96:cc:bf:e5:f1:58:16:
5a:c7:be:bf:91:e7:a9:d3:ea:90:02:3f:e7:ad:05:
f9:33:7d:54:99:8f:95:ad:57:06:ba:72:28:e9:2b:
76:8f:0e:9a:28:7b:3d:17:e8:ca:e8:10:c9:fb:8d:
f2:6f:26:03:07:b6:10:17:78:ee:f7:89:e2:38:e2:
d1:c1:be:86:f2:7f:39:68:ad:0c:7c:43:50:6e:6f:
8d:c0:5c:a1:8a:15:7e:d2:96:6f:d5:3e:30:a5:48:
37:f1:bd:fb:8f:6d:53:6a:48:c7:ed:1c:f7:24:51:
89:7a:d1:54:70:4f:72:c3:ce:e8:74:b9:b0:e5:db:
c7:03:c8:c2:3d:a7:a1:94:3a:c1:58:d0:f8:d5:fe:
74:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:A7:F7:48:5A:67:9F:C8:20:58:7B:62:A3:74:AA:D3:CC:AD:67:75
X509v3 Authority Key Identifier:
keyid:29:B3:A7:17:66:5A:11:37:E9:9D:C8:FA:D2:2E:3E:7F:98:DB:89:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KbOnF2ZaETfpncj60i4-f5jbiXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/acd28e-52ae-4ac9-b028-669f7a761631/1/v6f3SFpnn8ggWHtio3Sq08ytZ3U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/acd28e-52ae-4ac9-b028-669f7a761631/1/KbOnF2ZaETfpncj60i4-f5jbiXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.157.160.0/22
217.64.148.0-217.64.150.255
IPv6:
2a07:a880:3101::/48
2a07:a880:4601::-2a07:a880:4604:ffff:ffff:ffff:ffff:ffff
2a07:a880:4701::/48
Signature Algorithm: sha256WithRSAEncryption
a2:8e:f5:9a:5d:06:9e:58:17:fd:00:b0:24:50:28:32:2e:ff:
a0:0d:3d:48:3d:ec:a0:04:96:40:09:0d:cd:b2:94:c7:86:14:
9e:6b:e2:14:ae:ba:3c:cf:ca:70:57:e9:4e:50:5e:31:47:bf:
db:0c:c0:7f:17:d0:12:9d:d1:80:52:bf:a9:02:9d:bb:5b:e5:
3c:af:15:ff:34:b2:f1:5a:09:d3:12:18:01:7f:e8:2f:73:97:
65:9b:f8:65:dd:0e:ec:04:3a:79:70:87:4b:e7:00:b6:84:66:
c3:74:c5:09:12:ad:8a:de:02:9a:13:26:de:4b:12:61:28:e6:
e6:60:54:89:ca:56:61:de:0e:1c:d0:40:66:b2:53:ca:c6:db:
d0:89:9c:ce:cf:93:1f:ff:9a:f2:23:9f:40:d9:8e:88:af:6e:
25:93:c7:a0:e8:a7:2b:74:3c:f5:f8:26:3b:e0:78:a0:f8:ef:
8a:40:7c:f5:21:3f:29:f4:86:cd:54:64:d9:1b:8a:02:bf:15:
9b:47:2d:e0:44:fa:29:df:09:bd:8b:5a:50:6f:bc:06:46:d4:
b2:b4:4b:bb:9a:c6:4e:a2:78:41:a8:a7:ab:55:ad:0b:b0:40:
d5:28:b5:ac:70:27:9a:2e:17:3d:89:c1:08:8c:75:92:ce:05:
f0:67:e6:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:50:09 2024 by rpki-client on console-fra.rpki-client.org