Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/2c5af2-0937-4f40-88e0-1104841d374e/1/wL9-6JPOXhFsXbx0iZf9v8br3C4.roa
File: wL9-6JPOXhFsXbx0iZf9v8br3C4.roa (raw, json)
Hash identifier: GmmUPT1nw31vIcUm5LWXyMJkHttdMwwubcouC7fqOag=
Subject key identifier: C0:BF:7E:E8:93:CE:5E:11:6C:5D:BC:74:89:97:FD:BF:C6:EB:DC:2E
Certificate issuer: /CN=479762e88d8f67fad4aa059a1b8b46fa4cc7a893
Certificate serial: 0192630F219E05E44CABAB53401354FF76A7
Authority key identifier: 47:97:62:E8:8D:8F:67:FA:D4:AA:05:9A:1B:8B:46:FA:4C:C7:A8:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R5di6I2PZ_rUqgWaG4tG-kzHqJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/2c5af2-0937-4f40-88e0-1104841d374e/1/wL9-6JPOXhFsXbx0iZf9v8br3C4.roa
Signing time: Sun 06 Oct 2024 18:19:48 +0000
ROA not before: Sun 06 Oct 2024 18:19:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211325
IP address blocks: 92.61.180.0/22 maxlen: 22
185.119.240.0/24 maxlen: 24
2a13:f480::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/2c5af2-0937-4f40-88e0-1104841d374e/1/R5di6I2PZ_rUqgWaG4tG-kzHqJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/2c5af2-0937-4f40-88e0-1104841d374e/1/R5di6I2PZ_rUqgWaG4tG-kzHqJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/R5di6I2PZ_rUqgWaG4tG-kzHqJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 18:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:63:0f:21:9e:05:e4:4c:ab:ab:53:40:13:54:ff:76:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=479762e88d8f67fad4aa059a1b8b46fa4cc7a893
Validity
Not Before: Oct 6 18:19:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c0bf7ee893ce5e116c5dbc748997fdbfc6ebdc2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:fc:e2:92:9d:dc:d3:53:b1:cd:38:da:10:cb:
3f:62:92:1a:be:82:5a:4f:43:3e:7b:33:ea:8b:5f:
be:54:42:9b:c1:5c:f8:33:09:df:fb:06:a9:c4:07:
80:67:d7:9f:63:2b:18:3a:df:84:3b:a7:47:57:9d:
32:0f:79:9e:1a:9f:97:10:1a:fc:47:70:96:c5:85:
e5:4e:f2:ad:76:3a:72:8f:56:a0:c3:6c:f8:2e:79:
04:24:fb:20:23:89:a5:1c:fe:74:e1:0f:ae:d7:ba:
b1:11:e7:a4:11:c3:6b:9b:66:7a:0b:61:06:49:b0:
08:7c:c8:f6:de:e1:a9:e4:9f:a1:c7:7e:12:d3:35:
09:37:67:f3:a4:ac:7e:91:83:5c:99:81:70:bd:31:
49:cb:50:93:4b:fd:50:4f:5c:0c:4a:61:81:f5:b2:
3f:1e:86:28:46:df:d5:0d:b0:06:15:3b:3e:42:04:
d4:5c:ce:14:78:3c:51:b0:09:2f:44:3c:3b:80:4f:
22:19:45:66:7b:56:45:f5:d9:f5:57:93:e4:23:ac:
19:fa:60:fb:6c:74:36:c3:00:8a:07:16:18:c9:9c:
c0:37:05:84:c2:2e:62:da:13:c0:8e:38:aa:16:1e:
5b:c2:36:13:96:e7:5c:5a:57:2b:1a:d6:8d:e1:1d:
a6:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:BF:7E:E8:93:CE:5E:11:6C:5D:BC:74:89:97:FD:BF:C6:EB:DC:2E
X509v3 Authority Key Identifier:
keyid:47:97:62:E8:8D:8F:67:FA:D4:AA:05:9A:1B:8B:46:FA:4C:C7:A8:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R5di6I2PZ_rUqgWaG4tG-kzHqJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/2c5af2-0937-4f40-88e0-1104841d374e/1/wL9-6JPOXhFsXbx0iZf9v8br3C4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/2c5af2-0937-4f40-88e0-1104841d374e/1/R5di6I2PZ_rUqgWaG4tG-kzHqJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.61.180.0/22
185.119.240.0/24
IPv6:
2a13:f480::/29
Signature Algorithm: sha256WithRSAEncryption
00:bc:6a:d4:b9:63:56:46:ca:f6:9e:e4:6f:7b:5a:6a:65:eb:
83:7a:05:4a:b0:72:e8:c3:fb:e4:a8:35:6f:a7:27:3f:b9:bf:
3d:3a:57:07:39:0e:3d:d2:ac:47:0e:5f:82:b8:9e:51:72:b3:
a3:6b:12:de:fb:80:59:28:ce:f5:82:be:35:53:e0:7d:c4:6a:
aa:5a:f5:1d:6a:92:90:5b:59:5e:ca:e1:f3:db:a3:74:98:9d:
0e:d7:46:9b:60:19:4e:75:2b:0c:7f:5e:6e:0c:e1:4a:2b:82:
6e:57:60:8f:6f:f9:35:3a:1c:9a:f1:17:1d:01:a0:fc:b6:2d:
51:55:f3:a1:ce:2b:68:73:ef:3a:b0:3c:54:0b:8c:7d:ca:4d:
3e:7f:cb:6f:ba:32:61:6c:04:9f:42:89:08:a1:32:1f:59:7b:
35:6c:40:99:71:fc:a8:dc:88:83:df:50:a1:d6:53:94:b8:42:
5c:51:f7:34:ef:00:80:1e:df:3a:c4:2c:07:50:4b:2d:07:03:
f0:66:45:80:2a:ce:81:a6:a2:ba:64:d0:2c:83:4a:10:be:57:
0a:e4:15:0f:4d:e1:e0:3b:fe:f4:3c:41:f2:e9:40:7e:cb:9e:
05:aa:f6:2b:1a:03:08:04:7d:81:81:00:79:63:ab:22:8e:b3:
3b:71:81:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:19:37 2024 by rpki-client on console-ams.rpki-client.org