Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/tZr1mRUT5WVDSTOZrtWl-benvkI.roa
File: tZr1mRUT5WVDSTOZrtWl-benvkI.roa (raw, json)
Hash identifier: ygW3CH+Gpi0XqwD9BFNVk6zliFA8ROp1qIgzYB0jql4=
Subject key identifier: B5:9A:F5:99:15:13:E5:65:43:49:33:99:AE:D5:A5:F9:B7:A7:BE:42
Certificate issuer: /CN=3e75d49ded20566ca745c28f80cfd9a92f4b7d47
Certificate serial: 018CC8DF416B7B39CDAFFE32421C52C28E11
Authority key identifier: 3E:75:D4:9D:ED:20:56:6C:A7:45:C2:8F:80:CF:D9:A9:2F:4B:7D:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PnXUne0gVmynRcKPgM_ZqS9LfUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/tZr1mRUT5WVDSTOZrtWl-benvkI.roa
Signing time: Tue 02 Jan 2024 06:32:03 +0000
ROA not before: Tue 02 Jan 2024 06:32:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6663
IP address blocks: 31.210.8.0/21 maxlen: 21
86.106.122.0/23 maxlen: 23
185.74.20.0/22 maxlen: 22
89.43.132.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.mft
rsync://rpki.ripe.net/repository/DEFAULT/PnXUne0gVmynRcKPgM_ZqS9LfUc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 09:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:41:6b:7b:39:cd:af:fe:32:42:1c:52:c2:8e:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e75d49ded20566ca745c28f80cfd9a92f4b7d47
Validity
Not Before: Jan 2 06:32:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b59af5991513e56543493399aed5a5f9b7a7be42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ba:aa:78:ff:f9:98:35:d1:ee:f0:ec:60:1c:
10:85:28:6a:f0:99:af:fa:8d:69:64:ce:4c:96:eb:
d6:dc:f3:ff:cf:6e:3f:20:82:b9:3f:05:0b:82:dc:
fe:9c:21:54:31:c9:13:52:9d:bb:9e:40:f1:f2:4f:
60:7a:d1:fa:49:30:ae:ce:d4:9e:48:bf:96:7b:d9:
23:74:61:da:1f:56:db:6b:5f:d4:af:09:1a:f7:1c:
3f:4c:bf:cc:cd:43:ae:df:02:24:d3:b5:fe:69:3c:
7e:17:e9:c5:32:d2:2a:c5:1e:1a:71:0d:f0:82:7f:
5e:2f:f0:f1:8f:04:a3:0d:eb:7c:fe:39:ca:2a:39:
e5:d2:c6:10:90:fa:c1:38:69:5c:9f:4e:cb:18:2d:
24:0e:b4:0e:53:be:3d:8a:33:9a:07:57:ca:83:e0:
16:66:21:3f:e3:0a:12:aa:3d:9a:14:b6:72:f9:ae:
35:ce:32:e4:91:fb:c2:0f:d3:6a:11:84:72:a7:2b:
54:48:d2:13:d9:99:54:eb:ca:56:8b:2b:08:40:f3:
74:35:ad:51:be:50:9a:96:b9:79:31:36:1e:d8:86:
f9:b2:ac:8c:0c:33:fd:0a:96:de:a9:16:09:b3:0e:
88:9c:82:9e:24:63:2d:7f:db:14:6f:64:3c:d6:8a:
2d:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:9A:F5:99:15:13:E5:65:43:49:33:99:AE:D5:A5:F9:B7:A7:BE:42
X509v3 Authority Key Identifier:
keyid:3E:75:D4:9D:ED:20:56:6C:A7:45:C2:8F:80:CF:D9:A9:2F:4B:7D:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PnXUne0gVmynRcKPgM_ZqS9LfUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/tZr1mRUT5WVDSTOZrtWl-benvkI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.210.8.0/21
86.106.122.0/23
89.43.132.0/22
185.74.20.0/22
Signature Algorithm: sha256WithRSAEncryption
63:7b:83:43:4a:31:2a:ff:97:81:d0:55:22:ed:fe:41:7e:48:
50:a3:18:1f:6a:9e:24:e3:58:5c:51:37:9e:bd:de:9f:9b:ab:
ac:68:14:0c:43:7e:2b:a3:87:8e:1b:c3:ea:c2:65:5f:d2:59:
a2:5e:50:08:09:c6:e3:5d:7e:f3:fd:6d:ab:f7:bb:ff:65:3e:
46:6d:b4:b8:ba:cd:5a:cf:a2:2c:59:0a:6d:25:2c:ea:01:1d:
35:e6:34:32:ec:ea:cc:85:f9:ba:df:84:7a:3a:62:5b:db:83:
fc:f2:81:eb:03:a5:3a:0a:d5:50:aa:b4:4e:89:66:ac:da:6a:
cc:98:ea:88:bd:39:ed:ea:45:10:08:7c:93:5b:fd:7e:f0:86:
f3:ab:07:ef:b6:0a:72:b5:f6:5f:1d:46:0c:17:d0:82:1b:75:
49:fd:ff:aa:03:7c:c7:5f:52:72:b8:bf:49:37:8b:9f:4b:ee:
15:80:67:be:da:48:26:74:d1:4a:63:1a:07:e5:95:1e:57:ef:
6a:22:36:11:1e:c4:7f:fb:e6:12:f4:4d:02:aa:9d:f0:d6:a6:
c9:27:ef:97:bb:dc:1d:ec:a3:b8:cc:5f:ec:15:06:93:41:ca:
6f:53:05:f5:18:ab:94:6c:c3:c0:0b:e1:66:ba:ab:58:46:f4:
7b:1f:f1:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 12:54:25 2024 by rpki-client on console-ams.rpki-client.org