Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/43xkqhf8qJADnvq2LhUbT8yMRdA.roa
File: 43xkqhf8qJADnvq2LhUbT8yMRdA.roa (raw, json)
Hash identifier: yYSmzZPQN0uGyNR+jCS734f49ZlS4CaVOwtgqUhaQPA=
Subject key identifier: E3:7C:64:AA:17:FC:A8:90:03:9E:FA:B6:2E:15:1B:4F:CC:8C:45:D0
Certificate issuer: /CN=dfee2bf43f21a81c492c6e6a9fc6f074d2f0a217
Certificate serial: 018CC79532CE7A809B979CF250873F095ABF
Authority key identifier: DF:EE:2B:F4:3F:21:A8:1C:49:2C:6E:6A:9F:C6:F0:74:D2:F0:A2:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3-4r9D8hqBxJLG5qn8bwdNLwohc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/43xkqhf8qJADnvq2LhUbT8yMRdA.roa
Signing time: Tue 02 Jan 2024 00:31:33 +0000
ROA not before: Tue 02 Jan 2024 00:31:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41480
IP address blocks: 89.20.64.0/19 maxlen: 19
89.20.64.0/20 maxlen: 20
212.124.64.0/19 maxlen: 19
212.124.64.0/20 maxlen: 20
212.124.64.0/22 maxlen: 22
212.124.80.0/20 maxlen: 20
89.20.80.0/20 maxlen: 20
2a02:2170::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/3-4r9D8hqBxJLG5qn8bwdNLwohc.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/3-4r9D8hqBxJLG5qn8bwdNLwohc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3-4r9D8hqBxJLG5qn8bwdNLwohc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Jun 2024 20:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:32:ce:7a:80:9b:97:9c:f2:50:87:3f:09:5a:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfee2bf43f21a81c492c6e6a9fc6f074d2f0a217
Validity
Not Before: Jan 2 00:31:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e37c64aa17fca890039efab62e151b4fcc8c45d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:71:bc:ef:bd:e4:b3:6b:7e:ac:88:a3:8d:14:
79:77:a1:d5:60:69:f3:45:9e:8b:00:d6:45:d3:06:
ea:b6:cd:89:0c:94:12:13:25:15:d0:2b:b5:bd:7d:
a2:ed:c2:7c:a9:30:99:9a:3e:2d:9b:aa:f1:e8:aa:
48:e1:5f:bc:09:fd:b9:8e:37:83:16:10:98:3f:69:
0c:4a:34:04:b2:88:f2:01:34:fd:78:7e:6a:54:84:
59:3e:7b:59:0c:c7:80:36:c3:eb:35:c6:86:f7:70:
db:c2:a8:a5:68:43:d7:26:32:4b:3a:00:7b:fc:dd:
15:37:07:54:0f:72:f5:f5:6f:9b:48:9d:c2:dc:aa:
6c:1d:d5:5a:20:2e:1d:b1:4d:3b:6e:de:18:08:aa:
30:a8:66:69:4c:61:44:71:b9:83:d4:9a:af:51:10:
90:3d:69:d1:82:1f:fe:a6:31:c4:d5:59:7c:c2:90:
95:9a:c8:b3:97:0b:3e:07:16:a4:f0:40:42:3f:00:
09:64:5d:ac:ab:7a:1d:d5:05:dc:07:dc:0c:0e:b8:
cd:49:32:21:2d:0e:ae:0f:d8:db:ef:46:5d:5a:30:
e0:03:0f:c6:07:42:73:1a:b9:dd:ac:09:d5:3a:83:
de:e6:c7:98:14:95:6c:8e:bc:17:04:97:22:70:ba:
30:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:7C:64:AA:17:FC:A8:90:03:9E:FA:B6:2E:15:1B:4F:CC:8C:45:D0
X509v3 Authority Key Identifier:
keyid:DF:EE:2B:F4:3F:21:A8:1C:49:2C:6E:6A:9F:C6:F0:74:D2:F0:A2:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3-4r9D8hqBxJLG5qn8bwdNLwohc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/43xkqhf8qJADnvq2LhUbT8yMRdA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/3-4r9D8hqBxJLG5qn8bwdNLwohc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.20.64.0/19
212.124.64.0/19
IPv6:
2a02:2170::/32
Signature Algorithm: sha256WithRSAEncryption
79:d0:1f:d9:fe:10:52:34:d2:4c:67:a8:58:cc:30:50:28:47:
36:c0:1a:f0:b4:b4:d4:f1:6b:54:c4:90:08:94:9b:59:ab:92:
13:57:b9:e0:a3:93:aa:bc:2c:c9:85:16:14:b2:52:eb:3d:e9:
7a:80:7d:b8:16:50:5f:b9:9e:44:c8:37:cf:7e:1a:4f:2c:07:
7d:c2:70:b2:b2:eb:30:80:9f:82:e7:15:8d:96:36:08:c0:03:
52:d2:c8:48:76:8a:cd:82:7b:e8:92:dc:ae:16:99:99:f4:42:
a6:64:cd:d5:d2:ac:32:7e:42:93:cc:75:8f:05:fb:36:f1:6a:
26:b6:fa:87:9c:00:01:bb:de:53:1b:c4:37:25:6a:79:82:35:
74:d4:3c:ee:a6:0b:64:19:1d:a2:f6:10:cc:98:c0:04:49:7a:
11:98:43:4c:5d:28:67:d4:fd:2f:cb:1c:99:b2:24:5a:2f:6a:
50:23:5d:20:43:3f:bf:ee:8e:71:70:df:54:d3:e9:67:ca:52:
0d:76:a3:26:ea:ed:49:f7:00:c6:42:6c:67:ff:ca:8c:2b:8c:
8b:13:db:86:cb:e2:12:e1:c1:90:f6:70:78:bb:5b:c5:a4:e7:
c1:66:d3:cd:31:86:ce:5e:ea:56:56:10:54:e6:0f:d0:4f:9d:
fe:40:f5:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 23:19:39 2024 by rpki-client on console-fra.rpki-client.org