Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/9fc395-98bc-4aed-939e-886f66bb6ee8/1/D2IlFf4s8VcS2i9pgTYbU-XvVKk.roa
File: D2IlFf4s8VcS2i9pgTYbU-XvVKk.roa (raw, json)
Hash identifier: rDlz741tQQM9X2bOardgbfhn+LzUVzj7ZAPO2SRIdNU=
Subject key identifier: 0F:62:25:15:FE:2C:F1:57:12:DA:2F:69:81:36:1B:53:E5:EF:54:A9
Certificate issuer: /CN=00855dd897256e86da3cbe6994e94ce2e969af26
Certificate serial: 018CC802625FA1B241730245A2A6E73C11D0
Authority key identifier: 00:85:5D:D8:97:25:6E:86:DA:3C:BE:69:94:E9:4C:E2:E9:69:AF:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AIVd2JclbobaPL5plOlM4ulpryY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/9fc395-98bc-4aed-939e-886f66bb6ee8/1/D2IlFf4s8VcS2i9pgTYbU-XvVKk.roa
Signing time: Tue 02 Jan 2024 02:30:48 +0000
ROA not before: Tue 02 Jan 2024 02:30:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49242
IP address blocks: 80.68.224.0/21 maxlen: 21
80.68.232.0/21 maxlen: 21
185.21.148.0/22 maxlen: 22
93.158.232.0/22 maxlen: 22
188.121.0.0/19 maxlen: 19
89.35.144.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/9fc395-98bc-4aed-939e-886f66bb6ee8/1/AIVd2JclbobaPL5plOlM4ulpryY.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/9fc395-98bc-4aed-939e-886f66bb6ee8/1/AIVd2JclbobaPL5plOlM4ulpryY.mft
rsync://rpki.ripe.net/repository/DEFAULT/AIVd2JclbobaPL5plOlM4ulpryY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:02:62:5f:a1:b2:41:73:02:45:a2:a6:e7:3c:11:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00855dd897256e86da3cbe6994e94ce2e969af26
Validity
Not Before: Jan 2 02:30:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0f622515fe2cf15712da2f6981361b53e5ef54a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e2:85:77:02:b7:71:73:46:79:73:ed:5f:ce:
c6:f6:dc:1d:76:6f:7c:9a:45:d2:b3:0d:97:18:ff:
ce:ab:a4:ef:af:c9:6f:c5:54:7e:75:c9:b3:94:cc:
87:27:4e:8d:5b:13:1c:61:51:de:13:c9:b0:ef:4b:
8f:15:f6:73:54:5b:6c:d8:49:50:66:6b:8f:50:f2:
b5:b0:55:5d:8a:db:76:e7:86:77:b1:3c:91:ea:63:
2e:76:00:aa:09:00:65:44:7d:bf:94:87:2a:94:cf:
d9:6a:e8:00:bc:e3:4a:77:b5:a5:d7:a5:bb:5a:9e:
1e:de:dc:3e:1e:ab:93:ac:75:1e:ea:78:7e:78:75:
72:08:00:19:c8:41:12:cd:92:6f:04:0c:8f:f4:58:
9a:e9:ba:3c:12:49:04:fe:0e:39:3e:a0:8d:d4:e0:
41:43:b7:12:0d:3a:e9:e1:e0:bc:5e:c5:c3:d3:08:
7e:7f:c2:78:a5:d9:1c:63:1f:d7:02:3c:0e:9a:ff:
c9:55:fb:13:26:16:7e:79:29:db:af:ae:d2:6a:8d:
8f:13:ab:61:7c:34:fd:d9:ae:7d:97:23:6b:7b:4c:
8a:1b:3c:39:47:1b:9b:f4:7e:b4:60:6e:32:02:c1:
a9:2f:4d:f7:6d:1e:fd:ac:88:c5:e5:89:b6:5c:fa:
f0:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:62:25:15:FE:2C:F1:57:12:DA:2F:69:81:36:1B:53:E5:EF:54:A9
X509v3 Authority Key Identifier:
keyid:00:85:5D:D8:97:25:6E:86:DA:3C:BE:69:94:E9:4C:E2:E9:69:AF:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AIVd2JclbobaPL5plOlM4ulpryY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/9fc395-98bc-4aed-939e-886f66bb6ee8/1/D2IlFf4s8VcS2i9pgTYbU-XvVKk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/9fc395-98bc-4aed-939e-886f66bb6ee8/1/AIVd2JclbobaPL5plOlM4ulpryY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.68.224.0/20
89.35.144.0/22
93.158.232.0/22
185.21.148.0/22
188.121.0.0/19
Signature Algorithm: sha256WithRSAEncryption
3d:5b:10:d6:16:d5:06:65:26:38:00:f0:e6:67:54:44:6c:2d:
98:d4:de:70:cd:47:01:95:db:89:39:b5:28:ad:8c:05:7d:3b:
1e:f3:c8:dc:d3:fb:1f:7f:f7:10:95:92:6e:ca:9a:e9:43:49:
f4:11:0d:85:8b:15:da:b8:22:11:84:26:12:e3:38:99:75:53:
11:95:ea:6f:10:c0:f0:f2:90:41:30:e2:cb:9b:ab:3d:ce:78:
39:cd:86:ab:2f:2b:38:0f:e9:e5:0f:09:61:59:27:78:05:0e:
1c:fc:09:4d:91:6a:57:ed:4a:a5:6c:e9:3a:77:c6:d5:7c:14:
b9:2e:a5:54:39:19:8c:c0:1f:f4:9f:07:97:02:d6:14:2b:8d:
30:9c:07:89:76:b8:46:22:fd:fc:ed:6d:3f:f4:8b:95:50:e7:
2b:b8:3e:00:f5:da:94:40:b2:b9:c1:fc:bd:d7:99:1e:db:a5:
d5:5a:86:c6:0b:f9:11:eb:d9:10:e9:27:19:df:9b:c7:e0:57:
a1:cc:f6:50:0a:5b:7d:08:45:48:7f:90:b1:7d:de:b2:4d:2a:
63:13:f2:ff:b7:69:b6:0d:1f:66:41:52:5a:25:9d:4e:0d:46:
b4:94:8d:e9:31:36:53:f5:94:aa:0d:6d:27:bc:b4:2e:f8:96:
b7:70:d9:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 23:59:26 2024 by rpki-client on console-ams.rpki-client.org