Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/EDrcb5gFFWwoxKQeydC92rZryZM.roa
File: EDrcb5gFFWwoxKQeydC92rZryZM.roa (raw, json)
Hash identifier: 1z5YNLLMX7TsfC7a8AlZHltzbPoGpYuikHJRuVZIuGs=
Subject key identifier: 10:3A:DC:6F:98:05:15:6C:28:C4:A4:1E:C9:D0:BD:DA:B6:6B:C9:93
Certificate issuer: /CN=2f7a464b894841b3b940e0b357b865e393b1dd46
Certificate serial: 01925D8F0BF223B92AF8185C9D8E9FB0DD2C
Authority key identifier: 2F:7A:46:4B:89:48:41:B3:B9:40:E0:B3:57:B8:65:E3:93:B1:DD:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L3pGS4lIQbO5QOCzV7hl45Ox3UY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/EDrcb5gFFWwoxKQeydC92rZryZM.roa
Signing time: Sat 05 Oct 2024 16:41:48 +0000
ROA not before: Sat 05 Oct 2024 16:41:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210619
IP address blocks: 185.137.221.0/24 maxlen: 24
185.137.223.0/24 maxlen: 24
2a0a:a501::/48 maxlen: 48
2a0a:a502::/48 maxlen: 48
2a0a:a503::/32 maxlen: 32
2a0a:a504::/32 maxlen: 32
2a0a:a505::/32 maxlen: 32
2a0a:a506::/32 maxlen: 32
2a0a:a507::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/L3pGS4lIQbO5QOCzV7hl45Ox3UY.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/L3pGS4lIQbO5QOCzV7hl45Ox3UY.mft
rsync://rpki.ripe.net/repository/DEFAULT/L3pGS4lIQbO5QOCzV7hl45Ox3UY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 16:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:5d:8f:0b:f2:23:b9:2a:f8:18:5c:9d:8e:9f:b0:dd:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f7a464b894841b3b940e0b357b865e393b1dd46
Validity
Not Before: Oct 5 16:41:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=103adc6f9805156c28c4a41ec9d0bddab66bc993
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:69:9a:e3:bf:d9:18:97:d4:fe:ca:c5:fd:74:
d2:42:a5:89:21:b4:39:28:c7:86:b6:c1:38:d5:eb:
07:a4:95:54:d7:7d:f8:1f:f9:c8:03:49:10:6c:c1:
34:8c:7e:47:ef:8b:4e:93:d5:80:79:f2:f3:7f:d7:
36:af:9b:55:b5:cc:a8:0f:32:86:d9:5d:3e:07:a5:
f4:de:2b:5e:14:82:aa:c7:61:3b:ed:51:76:08:85:
d5:a1:a0:5a:cc:5b:ad:dc:40:9f:93:0d:41:b6:72:
c3:f9:df:bf:6a:36:73:55:5c:65:f4:6d:1e:67:b4:
ac:16:21:ac:a9:b7:af:63:69:0e:f6:34:3f:2b:a6:
cd:ed:35:06:e4:47:77:39:05:34:13:27:e0:94:f1:
dd:83:ba:4d:cf:bc:96:39:32:6e:c1:2d:2c:02:22:
48:c4:74:69:10:cb:cd:53:92:c7:63:e5:2e:36:07:
5d:25:73:82:04:59:6d:37:87:1e:a8:c7:52:01:79:
e9:8c:a1:57:02:a0:ed:01:01:0d:f4:b8:ab:70:3b:
c1:17:11:4f:98:06:a8:3c:02:86:b5:74:9b:3a:24:
1b:b5:ff:44:c1:6d:cf:60:16:95:4b:93:3f:2a:c3:
eb:de:60:73:fa:31:17:e2:5a:ef:e5:ad:39:55:e3:
a0:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:3A:DC:6F:98:05:15:6C:28:C4:A4:1E:C9:D0:BD:DA:B6:6B:C9:93
X509v3 Authority Key Identifier:
keyid:2F:7A:46:4B:89:48:41:B3:B9:40:E0:B3:57:B8:65:E3:93:B1:DD:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L3pGS4lIQbO5QOCzV7hl45Ox3UY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/EDrcb5gFFWwoxKQeydC92rZryZM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/L3pGS4lIQbO5QOCzV7hl45Ox3UY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.137.221.0/24
185.137.223.0/24
IPv6:
2a0a:a501::/48
2a0a:a502::/48
2a0a:a503::-2a0a:a507:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
40:8e:87:ca:28:01:30:e6:b5:f2:22:94:e2:e3:69:f4:f9:e6:
36:7f:12:27:4f:dd:68:a9:71:77:8c:05:1c:37:55:1b:c0:7f:
c5:eb:67:ed:a0:02:07:bf:7c:25:9a:45:b5:96:fe:06:1b:4a:
c3:a3:40:f3:5a:5c:a4:2c:4a:e1:77:01:c2:dc:5b:1a:42:3e:
11:f2:e0:af:5c:02:8d:e8:ff:62:3d:73:e2:30:39:21:60:a7:
5c:d1:d3:05:7d:ba:db:c1:f8:0b:a1:0b:e6:be:f1:d3:ac:b8:
22:a6:8c:18:09:05:02:51:ec:65:6a:9b:fd:df:2a:3b:a6:9b:
30:96:51:f5:9a:75:b5:cc:ec:5a:42:e4:7c:18:a6:4c:33:ee:
8c:47:09:95:d0:a4:71:3b:b6:73:b7:85:95:3c:8b:4a:fa:88:
12:2c:94:88:a7:cc:cb:b8:ec:c3:03:fa:40:dc:8c:8f:e6:62:
e7:53:9b:dc:43:40:35:10:26:9d:1e:6e:5a:73:1a:f7:94:38:
3d:8d:52:f8:b5:71:8f:71:55:fa:fd:64:c1:a6:ef:a8:21:54:
06:5b:82:b2:1a:8b:87:3f:3a:f8:aa:38:5d:06:cb:61:c6:44:
5d:5b:5c:6e:8d:ce:f8:14:1b:f4:1b:8e:3e:54:42:fa:4e:0e:
ca:4e:e9:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 00:38:11 2024 by rpki-client on console-ams.rpki-client.org