Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/RofCJdTLYi_DnwBaMpzoNeZt9bU.roa
File: RofCJdTLYi_DnwBaMpzoNeZt9bU.roa (raw, json)
Hash identifier: glHxrEzpwvq4xssgFqafrDV5YKQ1Tf11FfcJ0Wu/D04=
Subject key identifier: 46:87:C2:25:D4:CB:62:2F:C3:9F:00:5A:32:9C:E8:35:E6:6D:F5:B5
Certificate issuer: /CN=179301dcc7fae4f7ce01e4987a77cb82a336abff
Certificate serial: 018CC26CF12CC99FC1A01C963E69992181FA
Authority key identifier: 17:93:01:DC:C7:FA:E4:F7:CE:01:E4:98:7A:77:CB:82:A3:36:AB:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F5MB3Mf65PfOAeSYenfLgqM2q_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/RofCJdTLYi_DnwBaMpzoNeZt9bU.roa
Signing time: Mon 01 Jan 2024 00:29:28 +0000
ROA not before: Mon 01 Jan 2024 00:29:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20960
IP address blocks: 88.199.0.0/16 maxlen: 16
94.40.0.0/16 maxlen: 17
82.160.0.0/16 maxlen: 16
78.131.128.0/17 maxlen: 17
213.199.192.0/18 maxlen: 18
2a02:f40::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/F5MB3Mf65PfOAeSYenfLgqM2q_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/F5MB3Mf65PfOAeSYenfLgqM2q_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/F5MB3Mf65PfOAeSYenfLgqM2q_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6c:f1:2c:c9:9f:c1:a0:1c:96:3e:69:99:21:81:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=179301dcc7fae4f7ce01e4987a77cb82a336abff
Validity
Not Before: Jan 1 00:29:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4687c225d4cb622fc39f005a329ce835e66df5b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:4c:d0:64:b1:3e:a3:81:15:ca:36:f2:46:64:
e8:56:8b:e3:d2:00:7c:a2:d1:90:f0:7f:89:a3:81:
22:dd:60:aa:57:ed:80:1a:0d:d9:2d:62:eb:b6:1a:
18:8a:57:8b:67:c5:75:da:59:b9:e9:d1:eb:b6:83:
89:24:3c:53:21:40:1a:57:37:ec:be:d4:85:ce:8d:
50:8e:75:45:e0:69:a8:1d:66:21:dc:04:4a:d2:ce:
29:db:2a:6f:43:2e:9c:7a:f8:e1:fb:52:b5:9f:01:
f5:bf:2d:b2:db:9a:a2:8d:db:5f:c5:7a:c2:db:56:
1d:e5:cd:06:39:f7:51:0f:f9:10:72:a8:e2:a8:6a:
09:b3:d7:82:50:43:c7:af:dd:bf:31:ea:fa:35:b9:
e3:9f:b6:c3:d5:d0:5b:84:e6:f0:56:6b:c4:1f:56:
41:ac:76:45:bf:f9:ff:6d:ea:eb:99:06:06:22:04:
7f:07:f7:87:37:b4:19:95:ec:ab:15:c5:92:84:79:
b6:36:df:f9:1c:15:79:c8:d2:20:80:2f:0b:79:7b:
4f:53:68:6b:5f:1e:22:4f:40:3e:f1:93:63:a1:db:
af:8d:21:8b:78:a2:c5:18:42:55:eb:47:db:22:4a:
26:a3:50:f4:1a:f3:29:48:45:da:8d:43:48:54:19:
6a:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:87:C2:25:D4:CB:62:2F:C3:9F:00:5A:32:9C:E8:35:E6:6D:F5:B5
X509v3 Authority Key Identifier:
keyid:17:93:01:DC:C7:FA:E4:F7:CE:01:E4:98:7A:77:CB:82:A3:36:AB:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F5MB3Mf65PfOAeSYenfLgqM2q_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/RofCJdTLYi_DnwBaMpzoNeZt9bU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/F5MB3Mf65PfOAeSYenfLgqM2q_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.131.128.0/17
82.160.0.0/16
88.199.0.0/16
94.40.0.0/16
213.199.192.0/18
IPv6:
2a02:f40::/32
Signature Algorithm: sha256WithRSAEncryption
cd:6b:8f:be:2b:34:1c:4d:72:e8:18:0f:69:6f:d7:28:6a:c6:
11:b2:76:08:56:ca:6b:51:4e:5a:45:af:5b:cb:85:20:b4:0d:
60:8c:99:6f:ab:e3:63:a2:c6:01:cf:47:85:78:21:41:68:f2:
2a:61:8c:c3:9d:ae:a9:d9:9e:b0:5d:fc:14:23:f4:2d:99:a8:
d5:bc:f1:47:73:63:1a:ec:95:3d:e8:be:27:2d:6a:80:a2:da:
6c:a5:d1:74:2a:1f:fc:54:cc:11:c3:57:4f:9a:09:e1:f8:9c:
34:fd:82:d2:e0:77:94:c8:fa:71:80:6b:80:19:2e:7f:6b:f4:
48:29:40:79:1a:d8:e5:47:37:ed:59:d8:e8:42:bf:07:bf:ce:
d7:e8:37:bc:f7:e8:aa:91:82:a2:2f:b6:23:e9:a3:2d:ae:65:
6a:06:c3:fb:4b:a1:bc:4b:ec:d9:a0:6a:ec:f5:97:74:bf:28:
d9:e5:58:1c:dd:8b:06:f9:79:46:b5:b7:a7:c6:29:00:e5:3e:
ca:c3:6d:8b:5a:b8:24:af:e7:95:7f:e6:2a:d4:fb:a0:a3:6e:
c4:47:c6:fa:45:a0:d2:9f:22:ce:03:ed:0b:ac:18:8d:c7:f7:
79:ef:61:fc:fa:29:69:89:ed:a9:3b:a3:d4:ac:31:3f:59:3e:
3f:9d:4d:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:22:03 2024 by rpki-client on console-fra.rpki-client.org