Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/c64d50-fcdd-4a9f-9047-293f6122a19d/1/CLbHJ-gOSp0zgytrxELGELOIpqs.roa
File: CLbHJ-gOSp0zgytrxELGELOIpqs.roa (raw, json)
Hash identifier: H2G35B0P1aQCUIj72197sHI9IIF45lNrqePH3PtdAjA=
Subject key identifier: 08:B6:C7:27:E8:0E:4A:9D:33:83:2B:6B:C4:42:C6:10:B3:88:A6:AB
Certificate issuer: /CN=92fb8fa10dff3473e653dbf61c9a86432180a5c7
Certificate serial: 018CC4934BCB317CA76A1BAA9A2A5ECA49E8
Authority key identifier: 92:FB:8F:A1:0D:FF:34:73:E6:53:DB:F6:1C:9A:86:43:21:80:A5:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kvuPoQ3_NHPmU9v2HJqGQyGApcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/c64d50-fcdd-4a9f-9047-293f6122a19d/1/CLbHJ-gOSp0zgytrxELGELOIpqs.roa
Signing time: Mon 01 Jan 2024 10:30:36 +0000
ROA not before: Mon 01 Jan 2024 10:30:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211331
IP address blocks: 185.119.10.0/24 maxlen: 24
185.119.10.0/23 maxlen: 23
185.119.11.0/24 maxlen: 24
2a10:80c0::/29 maxlen: 29
2a10:80c0::/48 maxlen: 48
2a10:80c0:1000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/c64d50-fcdd-4a9f-9047-293f6122a19d/1/kvuPoQ3_NHPmU9v2HJqGQyGApcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/c64d50-fcdd-4a9f-9047-293f6122a19d/1/kvuPoQ3_NHPmU9v2HJqGQyGApcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/kvuPoQ3_NHPmU9v2HJqGQyGApcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:4b:cb:31:7c:a7:6a:1b:aa:9a:2a:5e:ca:49:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92fb8fa10dff3473e653dbf61c9a86432180a5c7
Validity
Not Before: Jan 1 10:30:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=08b6c727e80e4a9d33832b6bc442c610b388a6ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:2a:86:89:bb:68:50:a2:8c:15:25:af:47:b9:
f7:f1:e6:99:35:21:7e:df:6c:a6:f5:53:93:df:56:
5e:cf:15:aa:89:51:41:cd:2e:b1:f9:b3:35:4f:38:
87:51:4c:da:0b:da:09:de:c6:74:bc:dc:af:e6:a0:
8a:1f:97:bc:c1:b6:9d:a6:29:b4:5a:f9:11:20:b2:
4b:39:38:00:a9:2d:46:26:af:21:54:18:ea:61:d0:
26:87:82:d7:c7:a3:5b:28:9b:a4:74:1a:4b:d8:e8:
8b:30:88:db:7d:d1:b3:13:30:04:0f:d6:93:52:57:
a4:41:7f:e7:3f:d2:f6:43:69:e0:aa:25:a8:a9:56:
9a:37:00:cc:ad:ab:a6:7a:91:4c:73:1e:78:71:74:
1f:5b:00:b7:fb:2b:32:f9:62:15:07:46:49:ae:d1:
89:4c:22:a9:a2:e0:b9:07:b0:7d:f7:36:02:fa:26:
67:bd:87:06:dc:07:eb:59:66:6d:34:fc:d1:df:11:
23:9e:21:0b:6d:95:e1:5c:24:1c:d1:3e:9a:ce:98:
5b:2e:07:c0:e6:42:f6:7d:9b:36:c6:87:86:53:32:
34:d7:4a:56:a2:e9:39:bc:09:a2:65:18:0a:6f:2a:
54:07:87:f7:58:ff:3f:79:5e:2a:74:38:40:47:18:
d6:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:B6:C7:27:E8:0E:4A:9D:33:83:2B:6B:C4:42:C6:10:B3:88:A6:AB
X509v3 Authority Key Identifier:
keyid:92:FB:8F:A1:0D:FF:34:73:E6:53:DB:F6:1C:9A:86:43:21:80:A5:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kvuPoQ3_NHPmU9v2HJqGQyGApcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/c64d50-fcdd-4a9f-9047-293f6122a19d/1/CLbHJ-gOSp0zgytrxELGELOIpqs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/c64d50-fcdd-4a9f-9047-293f6122a19d/1/kvuPoQ3_NHPmU9v2HJqGQyGApcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.119.10.0/23
IPv6:
2a10:80c0::/29
Signature Algorithm: sha256WithRSAEncryption
7a:6a:40:53:d8:2b:cc:9c:4d:ce:67:7a:a6:cb:62:24:52:7e:
10:e6:a9:0c:2d:07:7f:ff:62:c3:93:e3:5c:fd:b3:e6:41:42:
72:66:f6:b6:9f:d7:df:e9:ca:d0:27:cd:a6:5a:65:1d:4e:2d:
76:92:a4:1b:87:15:5d:4f:84:6e:35:f1:fc:d9:c1:61:e8:b6:
f5:db:bb:52:34:00:36:17:50:31:9c:20:83:ea:94:20:f0:d9:
07:de:ac:fe:25:96:16:ea:81:f0:58:2d:02:fe:7e:54:fc:86:
83:d0:04:e2:3a:9e:25:75:04:e1:1f:34:6b:83:b7:b7:4e:76:
60:9a:ff:23:eb:69:b8:92:ad:75:57:9d:7f:40:5f:fc:9c:bc:
f1:6f:79:48:80:75:45:3f:52:53:82:b7:ef:84:0a:8b:c5:60:
ba:81:ff:dc:16:78:ad:2c:37:5d:e2:3c:06:3c:7c:4f:12:3c:
a9:b6:1b:c1:d2:d5:61:35:66:f7:d8:63:57:b1:2e:f5:30:24:
66:ab:15:4e:2b:9b:7a:f0:81:ec:e0:cf:9f:ee:1f:0d:8c:d7:
82:ad:b8:9b:db:9b:f1:08:e3:7b:89:9f:e1:8b:fc:62:61:3d:
48:6e:01:d0:ec:c9:88:42:d7:de:56:ab:e4:fd:87:ff:8e:95:
a7:c7:9b:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:18:48 2024 by rpki-client on console-fra.rpki-client.org