Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/d53d7c-a832-47b3-9f94-59c23054442d/1/3lbLDTy4DDrq4j3YCSSmI_IRmE0.roa
File: 3lbLDTy4DDrq4j3YCSSmI_IRmE0.roa (raw, json)
Hash identifier: IoUuUbzkJZQFz9eosOV9VxYsDRot5cms+DGPyu87TrI=
Subject key identifier: DE:56:CB:0D:3C:B8:0C:3A:EA:E2:3D:D8:09:24:A6:23:F2:11:98:4D
Certificate issuer: /CN=9efd8a0e6e6dd56a6ef8289e4b184f0ca00c33dd
Certificate serial: 018CC94D4AE68689AB3579DA5912EAD8673B
Authority key identifier: 9E:FD:8A:0E:6E:6D:D5:6A:6E:F8:28:9E:4B:18:4F:0C:A0:0C:33:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nv2KDm5t1Wpu-CieSxhPDKAMM90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/d53d7c-a832-47b3-9f94-59c23054442d/1/3lbLDTy4DDrq4j3YCSSmI_IRmE0.roa
Signing time: Tue 02 Jan 2024 08:32:14 +0000
ROA not before: Tue 02 Jan 2024 08:32:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15525
IP address blocks: 185.17.228.0/22 maxlen: 24
62.28.0.0/16 maxlen: 24
192.91.177.0/24 maxlen: 24
192.133.15.0/24 maxlen: 24
192.88.123.0/24 maxlen: 24
212.55.160.0/20 maxlen: 24
83.240.128.0/17 maxlen: 24
62.48.128.0/17 maxlen: 24
212.55.176.0/21 maxlen: 24
2a02:818::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/d53d7c-a832-47b3-9f94-59c23054442d/1/nv2KDm5t1Wpu-CieSxhPDKAMM90.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/d53d7c-a832-47b3-9f94-59c23054442d/1/nv2KDm5t1Wpu-CieSxhPDKAMM90.mft
rsync://rpki.ripe.net/repository/DEFAULT/nv2KDm5t1Wpu-CieSxhPDKAMM90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:4a:e6:86:89:ab:35:79:da:59:12:ea:d8:67:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9efd8a0e6e6dd56a6ef8289e4b184f0ca00c33dd
Validity
Not Before: Jan 2 08:32:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=de56cb0d3cb80c3aeae23dd80924a623f211984d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:28:0e:34:5c:4e:2d:7e:a6:3d:e9:12:e4:76:
2c:f8:b8:ad:09:90:26:78:4a:1f:e6:7d:15:32:da:
94:7c:57:00:19:0f:21:1e:e6:ae:8b:ad:60:2a:57:
56:2e:58:ef:91:3e:9b:d9:45:26:ee:6b:01:35:ae:
77:46:b4:a0:1c:b9:c1:5c:61:09:c6:5e:22:1e:1b:
6b:d8:31:86:50:47:16:3f:60:64:23:41:fc:5b:ff:
d8:20:6e:c2:f2:c2:cf:6e:92:cb:9a:fc:3c:bc:f3:
80:bd:54:c5:6d:9c:bb:ae:2c:bd:25:cb:fb:b4:4e:
df:e8:43:d0:c6:60:76:fa:a7:2a:0c:ac:6c:d6:68:
0d:5f:68:25:3b:4f:1a:c1:c2:9a:b4:cb:37:12:9a:
6c:8a:e3:ca:72:3c:bb:ff:70:e7:11:6a:ac:32:6a:
f9:d7:c6:41:f5:fa:d4:2b:62:65:4b:f0:ca:7d:b4:
f8:87:9a:19:ad:73:5c:d0:3f:b8:2f:7e:3f:e8:21:
3d:e0:44:bf:44:9d:4e:8a:61:c2:f9:cf:97:d5:fe:
f4:c4:19:05:e9:ec:54:3a:6b:69:27:eb:b1:36:55:
4e:3e:0b:5e:c6:7f:e3:3b:cb:1b:b5:89:cb:35:27:
45:de:2b:46:d5:c4:94:5b:f5:6c:56:99:5c:2c:8c:
b3:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:56:CB:0D:3C:B8:0C:3A:EA:E2:3D:D8:09:24:A6:23:F2:11:98:4D
X509v3 Authority Key Identifier:
keyid:9E:FD:8A:0E:6E:6D:D5:6A:6E:F8:28:9E:4B:18:4F:0C:A0:0C:33:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nv2KDm5t1Wpu-CieSxhPDKAMM90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/d53d7c-a832-47b3-9f94-59c23054442d/1/3lbLDTy4DDrq4j3YCSSmI_IRmE0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/d53d7c-a832-47b3-9f94-59c23054442d/1/nv2KDm5t1Wpu-CieSxhPDKAMM90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.28.0.0/16
62.48.128.0/17
83.240.128.0/17
185.17.228.0/22
192.88.123.0/24
192.91.177.0/24
192.133.15.0/24
212.55.160.0-212.55.183.255
IPv6:
2a02:818::/32
Signature Algorithm: sha256WithRSAEncryption
63:ba:d3:db:f7:ed:e6:ba:31:99:92:af:49:c1:ca:ea:bf:fa:
a8:cc:fe:8a:ed:43:17:1b:d2:7b:dc:f6:7e:f0:33:3b:6e:66:
db:c8:83:16:39:0d:b7:75:76:fb:ab:01:46:95:33:85:aa:87:
63:48:59:dd:06:38:fe:f9:4e:83:44:60:61:db:6a:f3:8a:5c:
12:a3:1b:58:db:09:92:3c:15:92:59:d3:0b:28:df:c4:58:f5:
f9:bf:ed:88:a3:48:aa:e4:d5:5b:f9:1f:24:af:43:8f:97:96:
e5:a4:4b:3f:0d:12:48:c0:6a:3a:f1:bb:7f:ae:09:b3:37:95:
9b:1e:56:83:1a:a3:24:70:5e:a5:d8:74:a9:16:c3:4d:c9:46:
c0:ca:b8:cc:36:e8:49:72:7f:cf:e6:2a:a3:04:25:dd:74:be:
a6:04:53:c1:e5:40:49:a0:31:b4:44:42:28:c0:75:4a:a3:ae:
f0:5c:f8:88:8d:7e:e2:16:49:32:60:e4:d6:17:a8:a5:e7:15:
ed:38:70:d1:02:66:b7:ed:5a:a8:b5:90:85:a3:fb:e9:a5:de:
f2:04:91:ae:f7:11:7c:6e:d9:02:eb:03:c1:02:0e:17:f6:9a:
84:12:15:00:97:32:fa:9a:39:dc:b4:9b:2c:00:8d:b1:66:d4:
d0:eb:99:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:47:15 2024 by rpki-client on console-fra.rpki-client.org