Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/15b16a-f76b-41a4-88bc-91cf616d2c52/1/lIEyS_6vJbgr_ft2wjBpBQwqQ-Y.roa
File: lIEyS_6vJbgr_ft2wjBpBQwqQ-Y.roa (raw, json)
Hash identifier: Q5MtSJiKrCLPnt4H1QAkBjY416nd5fswkDK/ccgU3PY=
Subject key identifier: 94:81:32:4B:FE:AF:25:B8:2B:FD:FB:76:C2:30:69:05:0C:2A:43:E6
Certificate issuer: /CN=4044fd1980ba01788a353a26fef8954ed7c11f96
Certificate serial: 018CC3B6A29EF2F2B00A8811EF4BEC7158DE
Authority key identifier: 40:44:FD:19:80:BA:01:78:8A:35:3A:26:FE:F8:95:4E:D7:C1:1F:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QET9GYC6AXiKNTom_viVTtfBH5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/15b16a-f76b-41a4-88bc-91cf616d2c52/1/lIEyS_6vJbgr_ft2wjBpBQwqQ-Y.roa
Signing time: Mon 01 Jan 2024 06:29:35 +0000
ROA not before: Mon 01 Jan 2024 06:29:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62365
IP address blocks: 139.28.0.0/22 maxlen: 22
185.38.48.0/22 maxlen: 22
155.133.200.0/21 maxlen: 21
155.133.208.0/20 maxlen: 20
141.98.144.0/22 maxlen: 22
185.202.180.0/22 maxlen: 22
80.249.116.0/22 maxlen: 22
2a00:fda0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/15b16a-f76b-41a4-88bc-91cf616d2c52/1/QET9GYC6AXiKNTom_viVTtfBH5Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/15b16a-f76b-41a4-88bc-91cf616d2c52/1/QET9GYC6AXiKNTom_viVTtfBH5Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/QET9GYC6AXiKNTom_viVTtfBH5Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:a2:9e:f2:f2:b0:0a:88:11:ef:4b:ec:71:58:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4044fd1980ba01788a353a26fef8954ed7c11f96
Validity
Not Before: Jan 1 06:29:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9481324bfeaf25b82bfdfb76c23069050c2a43e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:20:9b:1e:89:7d:22:33:97:11:ee:db:20:9b:
59:93:0d:0d:2a:19:71:1f:50:5a:fe:95:7b:80:8c:
39:6c:ef:ad:61:4b:89:50:e3:17:83:7b:d0:31:46:
cc:a3:79:99:25:d8:89:e2:da:12:e4:57:00:16:8e:
6c:1a:60:56:06:90:0d:a1:91:ff:63:57:37:7e:6f:
6d:cc:36:4d:12:82:1d:76:81:e3:93:39:e4:0f:15:
84:53:43:7d:2c:05:4f:e2:2c:73:1f:af:f7:61:69:
c6:df:b8:37:11:47:02:f1:7c:f3:d3:da:e8:6f:9c:
40:c1:e0:39:86:b7:f3:2a:72:bc:c5:f2:33:b5:26:
d9:91:70:b3:cb:8a:f9:f0:5b:45:5d:ce:42:26:7b:
f8:bb:e6:c5:5a:df:74:ce:41:5a:62:52:db:e3:b7:
42:91:a0:88:11:85:f7:2d:e5:64:11:e1:23:c7:54:
39:71:3b:00:4c:b1:b4:70:02:19:70:a6:79:d1:0c:
a5:e9:87:01:c8:26:4a:56:4d:2e:c7:72:0c:88:9a:
1e:77:ca:9a:3c:9a:61:e8:63:96:13:e6:3d:f6:0a:
29:e9:b4:05:f6:b3:07:7e:ee:a3:72:95:0b:96:14:
7d:10:c2:50:6a:41:12:33:83:68:78:af:7f:b5:44:
ee:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:81:32:4B:FE:AF:25:B8:2B:FD:FB:76:C2:30:69:05:0C:2A:43:E6
X509v3 Authority Key Identifier:
keyid:40:44:FD:19:80:BA:01:78:8A:35:3A:26:FE:F8:95:4E:D7:C1:1F:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QET9GYC6AXiKNTom_viVTtfBH5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/15b16a-f76b-41a4-88bc-91cf616d2c52/1/lIEyS_6vJbgr_ft2wjBpBQwqQ-Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/15b16a-f76b-41a4-88bc-91cf616d2c52/1/QET9GYC6AXiKNTom_viVTtfBH5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.249.116.0/22
139.28.0.0/22
141.98.144.0/22
155.133.200.0-155.133.223.255
185.38.48.0/22
185.202.180.0/22
IPv6:
2a00:fda0::/32
Signature Algorithm: sha256WithRSAEncryption
6f:78:e6:bf:6c:5a:cb:3f:ba:78:89:3b:0a:0d:60:ca:de:fe:
77:21:04:77:d9:19:04:40:6f:c2:7a:70:78:ea:12:e7:27:c5:
0b:ed:cb:cc:cd:e9:03:47:b9:95:f5:7e:54:00:e6:7e:67:d3:
bb:e1:8a:7d:4f:67:2b:ae:bd:a2:0a:1b:ad:d6:60:fc:29:5f:
c2:20:52:85:42:b2:02:4d:ef:f0:b2:7f:c4:6b:21:99:67:7b:
ac:a7:8f:4a:56:3a:21:16:ec:b3:42:a0:5a:93:4c:e4:40:3c:
33:19:19:4d:0f:cb:f2:45:08:44:f3:48:66:a9:16:34:0d:14:
1d:b1:8d:da:33:3b:54:df:83:87:f4:88:6d:80:67:45:76:fc:
8e:91:be:6e:cf:f7:df:85:b1:e3:6c:08:f0:9e:b0:51:1f:05:
e9:16:b1:ba:4c:45:88:b9:fa:09:4f:c3:90:9d:c9:f0:0a:ac:
b3:96:32:78:9a:01:20:00:2f:ea:d4:c3:79:ea:cb:c7:bb:cc:
9c:8d:af:e0:a8:d8:6f:aa:56:b9:7d:3d:fe:e1:e4:76:de:3d:
42:bd:17:49:40:76:8a:cf:15:ec:5d:d1:4a:a7:e1:c2:e5:63:
31:49:e6:fd:8f:a7:c4:b7:31:c5:42:2c:20:5f:45:98:68:c7:
73:3e:a0:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 16:51:41 2024 by rpki-client on console-ams.rpki-client.org