Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/7f13a9-7289-4e1e-bb43-c7161dc5c087/1/bk1HaROtwgqOL6v8H4pih5VVV7M.roa
File: bk1HaROtwgqOL6v8H4pih5VVV7M.roa (raw, json)
Hash identifier: YSBEC7svBSNsA8Nm0QUFNVJq7J3+RLjeXTs9zhdAZqo=
Subject key identifier: 6E:4D:47:69:13:AD:C2:0A:8E:2F:AB:FC:1F:8A:62:87:95:55:57:B3
Certificate issuer: /CN=3b80edd425050865eafba8089db9da3f3519b334
Certificate serial: 018CC2DAD7DDB85FD7F78DD1BBD8C711E687
Authority key identifier: 3B:80:ED:D4:25:05:08:65:EA:FB:A8:08:9D:B9:DA:3F:35:19:B3:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O4Dt1CUFCGXq-6gInbnaPzUZszQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/7f13a9-7289-4e1e-bb43-c7161dc5c087/1/bk1HaROtwgqOL6v8H4pih5VVV7M.roa
Signing time: Mon 01 Jan 2024 02:29:31 +0000
ROA not before: Mon 01 Jan 2024 02:29:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 1759
IP address blocks: 185.31.70.0/23 maxlen: 23
77.247.196.0/24 maxlen: 24
2a12:b440:100::/48 maxlen: 64
2a12:b440:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/7f13a9-7289-4e1e-bb43-c7161dc5c087/1/O4Dt1CUFCGXq-6gInbnaPzUZszQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/7f13a9-7289-4e1e-bb43-c7161dc5c087/1/O4Dt1CUFCGXq-6gInbnaPzUZszQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/O4Dt1CUFCGXq-6gInbnaPzUZszQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:d7:dd:b8:5f:d7:f7:8d:d1:bb:d8:c7:11:e6:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b80edd425050865eafba8089db9da3f3519b334
Validity
Not Before: Jan 1 02:29:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6e4d476913adc20a8e2fabfc1f8a6287955557b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:f4:04:ab:e6:d4:f5:3e:44:95:3a:b5:da:76:
8a:96:9e:77:12:1c:7d:fd:34:09:7b:be:94:32:5b:
a9:ca:d2:f8:32:2e:a6:3d:56:17:21:5c:e1:08:82:
da:9b:ff:d1:19:6d:1f:0e:13:81:3a:78:0f:93:fa:
fb:2e:46:78:04:c8:b7:bf:45:67:1a:99:9f:0f:22:
de:20:28:ed:5b:05:07:04:62:55:72:b2:83:83:f9:
ec:cd:c2:37:a1:54:3d:09:da:a1:88:56:93:28:90:
e2:10:ee:86:ef:72:ce:bd:71:f0:1b:dc:93:6b:d4:
4c:68:8b:c1:ab:c2:96:df:ed:89:9a:85:82:d8:9b:
5d:bc:50:21:ba:e2:03:76:69:70:dc:12:2b:d0:de:
71:c9:f6:0a:53:bb:aa:53:da:f9:22:08:31:0a:fe:
a0:8f:c7:d1:db:4d:08:4e:e3:63:20:fa:c4:33:65:
fc:cb:f5:0e:da:93:2b:13:b5:e5:a8:62:0c:b8:cf:
76:17:c2:16:b9:e9:2e:0c:31:1c:ee:cc:2d:94:3b:
00:50:8f:1c:fb:ce:99:a1:6e:67:58:6f:e6:4c:81:
0c:8e:ad:e9:ba:d2:aa:70:69:44:af:09:0c:69:e9:
ef:96:8c:8f:e8:02:7a:9a:f4:be:0e:b7:57:58:1b:
ea:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:4D:47:69:13:AD:C2:0A:8E:2F:AB:FC:1F:8A:62:87:95:55:57:B3
X509v3 Authority Key Identifier:
keyid:3B:80:ED:D4:25:05:08:65:EA:FB:A8:08:9D:B9:DA:3F:35:19:B3:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O4Dt1CUFCGXq-6gInbnaPzUZszQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/7f13a9-7289-4e1e-bb43-c7161dc5c087/1/bk1HaROtwgqOL6v8H4pih5VVV7M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/7f13a9-7289-4e1e-bb43-c7161dc5c087/1/O4Dt1CUFCGXq-6gInbnaPzUZszQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.247.196.0/24
185.31.70.0/23
IPv6:
2a12:b440:1::/48
2a12:b440:100::/48
Signature Algorithm: sha256WithRSAEncryption
23:c2:ac:34:83:67:94:26:3d:44:46:a2:0c:c1:b2:4b:7c:2d:
31:32:98:c4:df:4b:93:4b:01:08:58:99:40:cc:3d:bb:ed:80:
d6:ad:18:b7:f0:17:bc:4c:17:80:ae:8f:90:78:60:f0:9a:4e:
45:2d:d9:39:ed:05:d1:ff:89:aa:10:9f:00:83:f6:dc:c4:00:
c0:ad:18:7b:61:e1:fb:ee:3d:25:c3:31:09:7d:61:9e:cc:bf:
a4:59:44:31:49:73:3f:f3:ff:d1:df:25:7e:7a:71:44:b2:1f:
9c:c5:e9:4d:74:26:6c:ad:ef:0a:27:7b:59:c2:e2:45:d9:10:
ae:a3:b9:ff:b0:3d:56:cd:11:6e:de:63:2f:69:4e:26:75:ee:
67:43:f2:b3:bc:bf:6e:06:2d:d9:3a:79:47:73:b9:5d:7e:fc:
55:cb:b9:a5:2a:54:f8:d1:82:e1:51:5b:dd:b9:ae:50:0d:40:
14:cf:c9:14:63:ab:bf:e6:d2:b1:80:85:77:d7:54:f2:5f:b9:
d4:11:50:f4:53:24:ce:b8:38:44:25:59:8d:c5:12:14:63:66:
ad:33:22:57:e6:e9:91:0a:76:5a:bd:eb:9d:dd:9f:64:cc:a1:
52:85:ad:e7:8d:0d:78:85:02:9f:29:c2:94:e2:1c:17:cc:d6:
dd:66:9a:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 04:41:40 2024 by rpki-client on console-ams.rpki-client.org