Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/a85f3d-65a2-4f6c-9cb9-82660ee4eac4/1/1cYpTHI7_pPog-z7NMPe6JzQ92A.roa
File: 1cYpTHI7_pPog-z7NMPe6JzQ92A.roa (raw, json)
Hash identifier: K4wTknA/c585K2Qu88QAMX4xhAv+nr64IfUY5P/IJR8=
Subject key identifier: D5:C6:29:4C:72:3B:FE:93:E8:83:EC:FB:34:C3:DE:E8:9C:D0:F7:60
Certificate issuer: /CN=dc3cb20c5ca7c4ed8e42078b1a67287a0d991cec
Certificate serial: 018CC56E49753318752BB65138D2DB1B4084
Authority key identifier: DC:3C:B2:0C:5C:A7:C4:ED:8E:42:07:8B:1A:67:28:7A:0D:99:1C:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3DyyDFynxO2OQgeLGmcoeg2ZHOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/a85f3d-65a2-4f6c-9cb9-82660ee4eac4/1/1cYpTHI7_pPog-z7NMPe6JzQ92A.roa
Signing time: Mon 01 Jan 2024 14:29:48 +0000
ROA not before: Mon 01 Jan 2024 14:29:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200960
IP address blocks: 185.18.197.0/24 maxlen: 24
185.45.72.0/24 maxlen: 24
185.18.196.0/24 maxlen: 24
31.14.255.0/24 maxlen: 24
217.148.137.0/24 maxlen: 24
217.148.136.0/24 maxlen: 24
31.14.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/a85f3d-65a2-4f6c-9cb9-82660ee4eac4/1/3DyyDFynxO2OQgeLGmcoeg2ZHOw.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/a85f3d-65a2-4f6c-9cb9-82660ee4eac4/1/3DyyDFynxO2OQgeLGmcoeg2ZHOw.mft
rsync://rpki.ripe.net/repository/DEFAULT/3DyyDFynxO2OQgeLGmcoeg2ZHOw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 11:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:49:75:33:18:75:2b:b6:51:38:d2:db:1b:40:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc3cb20c5ca7c4ed8e42078b1a67287a0d991cec
Validity
Not Before: Jan 1 14:29:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d5c6294c723bfe93e883ecfb34c3dee89cd0f760
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:91:46:92:7b:a0:52:2b:ec:30:11:3b:78:36:
6b:9e:31:2f:b8:7a:b7:4b:fc:f9:f1:29:46:ce:19:
31:83:ca:ac:08:40:ee:bd:47:dd:d5:da:df:9e:38:
14:ab:05:ad:a2:df:df:fd:10:ce:dc:9e:c8:a1:b4:
90:20:a4:96:e8:7b:39:2c:b5:61:7e:96:69:03:55:
0a:b0:0f:4f:fa:19:2e:db:b1:96:65:f0:4f:fc:15:
10:82:4a:72:a8:8f:46:23:31:78:b9:64:41:04:72:
98:5a:ed:27:66:75:01:cc:26:1d:6b:0c:24:1f:19:
cd:07:d9:b1:0e:86:92:ee:a6:8c:5d:fe:60:2d:2f:
3b:e6:e8:41:84:0c:ef:36:94:c1:d5:15:0f:2e:10:
00:ed:1e:a0:59:3e:bf:c3:79:db:6b:d6:47:b2:ad:
87:54:76:a9:9d:44:05:14:5d:72:33:55:3b:0f:57:
f1:43:c2:1a:05:75:e7:36:d7:b5:58:c2:d5:91:eb:
17:5c:ff:75:ba:48:db:73:e5:30:ad:2b:2b:3b:c5:
c3:d2:9b:d7:0b:0e:86:6d:d6:35:47:a0:b5:ce:25:
a4:d7:8d:82:f7:96:e4:91:a3:32:3a:76:9b:d0:8a:
38:66:fd:6e:10:2d:6c:04:0c:b2:22:06:15:bb:ea:
41:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:C6:29:4C:72:3B:FE:93:E8:83:EC:FB:34:C3:DE:E8:9C:D0:F7:60
X509v3 Authority Key Identifier:
keyid:DC:3C:B2:0C:5C:A7:C4:ED:8E:42:07:8B:1A:67:28:7A:0D:99:1C:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3DyyDFynxO2OQgeLGmcoeg2ZHOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a85f3d-65a2-4f6c-9cb9-82660ee4eac4/1/1cYpTHI7_pPog-z7NMPe6JzQ92A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a85f3d-65a2-4f6c-9cb9-82660ee4eac4/1/3DyyDFynxO2OQgeLGmcoeg2ZHOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.14.103.0/24
31.14.255.0/24
185.18.196.0/23
185.45.72.0/24
217.148.136.0/23
Signature Algorithm: sha256WithRSAEncryption
27:7a:d0:5c:3f:10:a4:7c:c4:c5:9d:51:17:83:47:23:af:76:
31:50:a6:0e:62:9c:83:b3:4b:98:23:3b:b7:51:fb:81:4e:dd:
e9:3f:97:2d:21:f2:cd:0b:22:54:f7:57:a1:15:70:a2:96:3f:
bd:2e:c3:17:c1:80:8d:f1:9e:62:76:53:11:b2:e2:11:53:a3:
75:a3:d9:b4:f9:74:64:44:77:dd:c7:da:44:91:17:9f:f1:c5:
24:7a:bb:ee:bf:e5:3f:40:5a:98:1e:1b:5d:a3:98:fb:ae:fc:
2b:25:7e:c6:80:98:17:2c:65:2f:28:b3:0a:6d:47:42:f3:13:
b8:34:3f:c4:4a:e8:a4:d2:99:aa:36:f9:0f:a1:01:45:73:32:
cc:60:5b:9e:ad:3f:e1:0f:16:9b:e2:da:f4:7d:21:a7:04:5c:
40:40:3d:1c:8b:0a:af:5b:df:0c:42:b6:63:59:e5:86:7c:4b:
be:b7:b6:07:26:4c:61:c3:c7:a4:d2:6b:5e:11:c1:65:be:8b:
73:d9:6b:10:da:2e:eb:d9:b9:e3:0b:71:4d:10:97:85:37:e0:
bf:7c:3a:4b:9e:a1:d6:d8:07:42:d8:93:31:e7:e9:18:70:23:
b3:3f:8c:da:25:7e:4f:bf:fd:71:f1:90:8e:0a:69:6e:4f:e7:
bb:38:48:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 20:05:38 2024 by rpki-client on console-ams.rpki-client.org