Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/RKBYJYopkNCVXC53geAVpFI6nfo.roa
File: RKBYJYopkNCVXC53geAVpFI6nfo.roa (raw, json)
Hash identifier: 9VGSYQakDMu0eUJbLsjTWWW4wZcvHqvu6SHya6YCk4I=
Subject key identifier: 44:A0:58:25:8A:29:90:D0:95:5C:2E:77:81:E0:15:A4:52:3A:9D:FA
Certificate issuer: /CN=98c1d03b49504d34465dc40a3d0f9086cacfdb8e
Certificate serial: 019094006DC15B9B89176356E8B79FD54D41
Authority key identifier: 98:C1:D0:3B:49:50:4D:34:46:5D:C4:0A:3D:0F:90:86:CA:CF:DB:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mMHQO0lQTTRGXcQKPQ-QhsrP244.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/RKBYJYopkNCVXC53geAVpFI6nfo.roa
Signing time: Mon 08 Jul 2024 20:19:34 +0000
ROA not before: Mon 08 Jul 2024 20:19:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56655
IP address blocks: 45.88.200.0/24 maxlen: 24
45.88.201.0/24 maxlen: 24
185.14.97.0/24 maxlen: 24
185.125.168.0/22 maxlen: 22
185.181.60.0/22 maxlen: 22
185.243.216.0/24 maxlen: 24
185.243.217.0/24 maxlen: 24
185.243.218.0/24 maxlen: 24
193.243.189.0/24 maxlen: 24
194.32.107.0/24 maxlen: 24
195.16.73.0/24 maxlen: 24
2a03:94e0::/32 maxlen: 32
2a03:94e1::/32 maxlen: 32
2a03:94e2::/32 maxlen: 32
2a03:94e3::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/mMHQO0lQTTRGXcQKPQ-QhsrP244.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/mMHQO0lQTTRGXcQKPQ-QhsrP244.mft
rsync://rpki.ripe.net/repository/DEFAULT/mMHQO0lQTTRGXcQKPQ-QhsrP244.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Sep 2024 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:94:00:6d:c1:5b:9b:89:17:63:56:e8:b7:9f:d5:4d:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98c1d03b49504d34465dc40a3d0f9086cacfdb8e
Validity
Not Before: Jul 8 20:19:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=44a058258a2990d0955c2e7781e015a4523a9dfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:21:fc:fa:7e:d6:a9:d6:b1:87:b5:4e:46:cc:
fb:63:02:90:99:b8:b8:22:b6:e6:40:a0:1d:00:6d:
36:52:99:f9:fc:81:27:0d:ce:b4:20:7f:34:12:d5:
59:57:c7:17:75:66:21:7a:83:b2:f0:29:21:fc:58:
06:9f:e6:1e:d9:2e:2d:68:db:38:1e:02:79:d1:c0:
98:9c:b6:2a:d8:3a:19:82:16:76:69:3b:54:00:1f:
c2:19:a5:1b:fb:fe:b8:9a:72:1f:46:09:3b:e5:fa:
6f:c9:24:33:f7:5b:65:75:1c:bb:23:6b:1a:8a:5e:
a6:3c:23:0a:1d:ca:b2:7f:63:af:62:0b:eb:a5:63:
91:b2:c8:58:6a:0b:61:5d:6c:f9:68:f6:38:44:dc:
ef:5f:de:61:8b:0e:17:62:68:19:7f:4c:01:3a:6a:
c4:9d:f6:56:05:01:08:a2:63:bf:55:ee:60:da:ae:
94:f7:c0:c0:9f:7b:45:4b:d5:9e:37:34:ba:c8:62:
a7:93:1f:9f:a3:c6:d2:db:db:b7:a5:fd:e3:35:2b:
fc:19:e6:1f:f3:d9:da:a2:a3:e1:2a:0b:44:6f:02:
a4:15:16:db:28:96:96:a7:58:72:64:f2:21:2b:a6:
ea:9d:f7:e8:c4:e6:61:36:70:7a:78:c3:27:56:1f:
68:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:A0:58:25:8A:29:90:D0:95:5C:2E:77:81:E0:15:A4:52:3A:9D:FA
X509v3 Authority Key Identifier:
keyid:98:C1:D0:3B:49:50:4D:34:46:5D:C4:0A:3D:0F:90:86:CA:CF:DB:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mMHQO0lQTTRGXcQKPQ-QhsrP244.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/RKBYJYopkNCVXC53geAVpFI6nfo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/mMHQO0lQTTRGXcQKPQ-QhsrP244.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.200.0/23
185.14.97.0/24
185.125.168.0/22
185.181.60.0/22
185.243.216.0-185.243.218.255
193.243.189.0/24
194.32.107.0/24
195.16.73.0/24
IPv6:
2a03:94e0::/30
Signature Algorithm: sha256WithRSAEncryption
17:66:98:fd:a9:b3:9f:06:04:55:03:3d:16:6d:49:63:a6:3d:
be:ef:ab:f2:de:31:9e:43:2f:65:6a:da:3e:bb:4b:79:c6:ba:
23:80:29:dd:1a:e9:aa:ac:58:1e:8c:9e:c4:4d:1f:75:2a:49:
55:70:49:0f:14:3e:e4:b9:9b:1f:1f:d1:d4:3e:a7:73:9b:0b:
5c:c5:c1:77:71:53:aa:e0:cd:6a:f1:90:6d:b1:2c:98:12:b8:
cf:c8:5b:b1:f1:0e:cf:b2:a5:98:3f:fb:b8:d2:c1:13:79:fd:
91:7a:d8:e2:cd:df:06:9c:9a:20:c5:31:ea:d8:24:09:c6:dc:
a0:a2:7e:2e:1b:5e:85:06:6f:85:95:35:b1:fe:8a:4d:e8:b1:
7c:d8:a6:da:c6:bb:bf:81:af:d9:00:ea:9c:7a:47:f4:25:d9:
01:6b:97:6d:d6:d8:a3:df:04:21:a7:39:62:cd:8d:f0:2e:33:
28:02:76:fc:0e:08:6a:39:96:4d:02:7e:3a:90:0d:9f:59:71:
71:a5:30:59:6f:97:00:bf:c2:11:ee:46:fe:37:14:d9:69:66:
2a:d3:22:39:23:08:9c:47:cb:a2:7e:19:46:87:5c:6f:42:45:
1e:74:79:15:bb:af:04:2f:8f:c6:08:37:b0:2e:54:9a:47:01:
26:e3:b6:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 18 23:22:28 2024 by rpki-client on console-ams.rpki-client.org