Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/4393e8-5f59-4d57-8198-5c0c46d04ee1/1/hBpPDkAyziAUcqMK-cnpnAvwVrk.roa
File: hBpPDkAyziAUcqMK-cnpnAvwVrk.roa (raw, json)
Hash identifier: tDCU4r8z1SJShr8kq4I9hUxz04GiqxTnU2W3l95q9cY=
Subject key identifier: 84:1A:4F:0E:40:32:CE:20:14:72:A3:0A:F9:C9:E9:9C:0B:F0:56:B9
Certificate issuer: /CN=e4ff5bbf540c65954b9913a68c24d174de97d829
Certificate serial: 018CC424808B3722BE42A36ABFDE8C2D47BC
Authority key identifier: E4:FF:5B:BF:54:0C:65:95:4B:99:13:A6:8C:24:D1:74:DE:97:D8:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5P9bv1QMZZVLmROmjCTRdN6X2Ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/4393e8-5f59-4d57-8198-5c0c46d04ee1/1/hBpPDkAyziAUcqMK-cnpnAvwVrk.roa
Signing time: Mon 01 Jan 2024 08:29:35 +0000
ROA not before: Mon 01 Jan 2024 08:29:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49910
IP address blocks: 185.174.36.0/22 maxlen: 24
45.13.24.0/24 maxlen: 24
77.232.224.0/19 maxlen: 24
2a06:3e40::/29 maxlen: 48
2a12:9940::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/4393e8-5f59-4d57-8198-5c0c46d04ee1/1/5P9bv1QMZZVLmROmjCTRdN6X2Ck.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/4393e8-5f59-4d57-8198-5c0c46d04ee1/1/5P9bv1QMZZVLmROmjCTRdN6X2Ck.mft
rsync://rpki.ripe.net/repository/DEFAULT/5P9bv1QMZZVLmROmjCTRdN6X2Ck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 01:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:80:8b:37:22:be:42:a3:6a:bf:de:8c:2d:47:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4ff5bbf540c65954b9913a68c24d174de97d829
Validity
Not Before: Jan 1 08:29:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=841a4f0e4032ce201472a30af9c9e99c0bf056b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b3:81:b2:a4:57:56:bb:8b:d0:33:c4:1b:4b:
98:f4:1f:94:5a:d9:bb:26:29:b4:58:10:02:72:81:
77:93:dd:4d:e1:20:c2:8c:0e:9c:a0:c9:64:3b:46:
19:c5:38:60:bc:cd:41:ee:89:25:42:58:13:1e:40:
66:f7:ea:49:1e:c3:15:7e:27:2a:8a:dc:07:56:49:
f3:af:3f:7f:2a:66:b3:4f:70:06:c0:85:85:d7:12:
e9:01:cd:10:83:b0:32:1e:c4:40:e8:97:16:9c:d0:
f8:84:10:6d:4c:bd:ae:d4:a9:0b:76:36:0b:47:62:
22:46:55:21:71:90:96:f3:40:89:4a:e5:ab:09:4f:
fd:7a:95:85:75:9c:55:bc:6e:6c:e1:7f:fd:c8:85:
a6:54:05:46:4c:4f:51:25:f6:9e:e4:f8:32:1a:9e:
0d:ca:4f:ac:2f:52:95:b4:e1:79:45:f4:82:c7:e6:
1c:64:70:84:9f:15:24:71:a8:83:98:e9:29:6f:2e:
20:5f:b6:d9:b7:f3:86:0a:99:0d:d8:e7:78:b3:e7:
23:6b:9b:1b:1d:31:33:9e:67:86:04:ee:a8:23:e6:
da:cf:a3:66:1c:6d:c7:89:6c:17:28:38:df:e0:8f:
95:d1:e6:b5:38:3b:77:32:a6:81:ba:a5:88:41:42:
98:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:1A:4F:0E:40:32:CE:20:14:72:A3:0A:F9:C9:E9:9C:0B:F0:56:B9
X509v3 Authority Key Identifier:
keyid:E4:FF:5B:BF:54:0C:65:95:4B:99:13:A6:8C:24:D1:74:DE:97:D8:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5P9bv1QMZZVLmROmjCTRdN6X2Ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4393e8-5f59-4d57-8198-5c0c46d04ee1/1/hBpPDkAyziAUcqMK-cnpnAvwVrk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4393e8-5f59-4d57-8198-5c0c46d04ee1/1/5P9bv1QMZZVLmROmjCTRdN6X2Ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.24.0/24
77.232.224.0/19
185.174.36.0/22
IPv6:
2a06:3e40::/29
2a12:9940::/29
Signature Algorithm: sha256WithRSAEncryption
05:a5:27:15:bf:18:13:b9:fe:90:0f:ed:ab:a5:23:2f:db:2e:
95:7a:19:ba:85:29:d1:5e:84:70:82:8c:37:10:7b:97:a1:1d:
7a:3d:16:79:c9:bb:22:c7:08:7f:73:45:e9:19:53:3a:89:f9:
a9:74:eb:5c:6a:5b:bc:df:74:0e:28:ef:a2:2e:d4:f0:8a:31:
e8:32:e7:a2:fb:03:66:1e:10:d4:6d:fc:d6:a9:f2:80:2a:9c:
5c:b9:9c:11:45:bb:b6:ad:dc:f4:31:4b:cf:96:9e:25:81:51:
2d:3b:12:24:1e:6f:61:7e:da:47:85:5d:80:ad:13:a5:b6:39:
e2:fb:f7:17:b3:ac:c8:4d:c3:c3:26:fd:63:3b:71:af:aa:84:
3e:a4:85:77:73:79:cf:56:64:c9:70:28:58:11:42:ef:56:bc:
72:bc:c9:25:f2:1f:43:f1:63:f3:33:b2:75:2e:bd:38:a6:54:
70:43:2a:27:6d:83:f7:fd:3e:9f:87:2f:5e:49:ef:57:da:09:
d0:a9:bc:04:cc:99:d6:69:94:f8:b2:35:9e:44:53:de:01:48:
f4:85:30:52:48:39:e7:4e:d4:f7:40:7f:13:4a:a9:70:fd:53:
6f:37:ce:58:82:b3:b0:5c:9a:3b:10:1f:fb:9d:12:b3:ca:13:
c2:9b:fe:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:38:37 2024 by rpki-client on console-ams.rpki-client.org