Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/16afe5-a443-4237-ad7d-dab6e2c5fdd9/1/s3ri8apkEfVbKGUv3PIfkphxlIU.roa
File: s3ri8apkEfVbKGUv3PIfkphxlIU.roa (raw, json)
Hash identifier: 4Kqsl9d0YfXigPd+tBKSAjMlgcOul3EFgGigvfNBrFI=
Subject key identifier: B3:7A:E2:F1:AA:64:11:F5:5B:28:65:2F:DC:F2:1F:92:98:71:94:85
Certificate issuer: /CN=cef84e4749cccd583fefc7797c3d67b10898a188
Certificate serial: 018CC6B784CC926BB2FEDC0006EBA617A55B
Authority key identifier: CE:F8:4E:47:49:CC:CD:58:3F:EF:C7:79:7C:3D:67:B1:08:98:A1:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zvhOR0nMzVg_78d5fD1nsQiYoYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/16afe5-a443-4237-ad7d-dab6e2c5fdd9/1/s3ri8apkEfVbKGUv3PIfkphxlIU.roa
Signing time: Mon 01 Jan 2024 20:29:25 +0000
ROA not before: Mon 01 Jan 2024 20:29:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43627
IP address blocks: 185.61.65.0/24 maxlen: 24
185.61.66.0/24 maxlen: 24
185.61.67.0/24 maxlen: 24
213.164.120.0/23 maxlen: 24
213.164.124.0/23 maxlen: 24
213.164.122.0/23 maxlen: 24
213.164.126.0/23 maxlen: 24
46.36.92.0/22 maxlen: 24
185.61.64.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/16afe5-a443-4237-ad7d-dab6e2c5fdd9/1/zvhOR0nMzVg_78d5fD1nsQiYoYg.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/16afe5-a443-4237-ad7d-dab6e2c5fdd9/1/zvhOR0nMzVg_78d5fD1nsQiYoYg.mft
rsync://rpki.ripe.net/repository/DEFAULT/zvhOR0nMzVg_78d5fD1nsQiYoYg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 07:02:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:84:cc:92:6b:b2:fe:dc:00:06:eb:a6:17:a5:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cef84e4749cccd583fefc7797c3d67b10898a188
Validity
Not Before: Jan 1 20:29:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b37ae2f1aa6411f55b28652fdcf21f9298719485
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:3c:bd:73:77:0d:3c:8c:62:a0:05:5e:89:58:
5c:02:a5:31:7d:38:f3:a9:64:57:02:d3:88:ca:e6:
0c:2b:6c:5a:92:a2:33:39:cd:c7:5e:84:da:b8:ed:
74:49:a9:7f:6c:eb:2e:22:e6:cf:cd:cf:7e:62:0b:
88:c6:87:4d:38:d0:66:dc:e7:aa:09:26:e5:d7:c4:
60:1b:f8:f0:db:ae:a0:1b:5d:13:50:0e:54:26:6b:
82:36:7e:ff:7e:2b:f7:09:53:02:71:55:f1:12:cd:
8c:f6:71:e0:fa:18:51:b4:64:f0:38:19:41:be:e9:
3d:3e:4c:79:82:40:ed:5a:4e:e4:87:ff:90:79:84:
4d:8d:69:e9:08:d2:9a:f8:8f:e5:1d:78:06:91:d3:
8c:fe:1e:cc:cd:55:54:42:d8:fb:5a:e9:e6:40:19:
0e:c9:13:1e:ff:1b:b9:a6:48:9b:2c:e1:7e:48:db:
4b:e0:1d:e1:7e:99:09:c1:4d:74:0e:8b:0c:19:01:
83:9a:99:71:91:a1:04:79:88:c2:8f:f2:4f:d9:3e:
ea:ed:01:f1:aa:00:df:4f:0a:d5:97:94:55:4b:8f:
95:d1:9d:c6:44:6f:62:82:11:9f:2f:ec:dc:b8:de:
88:d1:d9:3b:24:0b:9b:a0:78:17:bc:01:d4:c7:a5:
cf:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:7A:E2:F1:AA:64:11:F5:5B:28:65:2F:DC:F2:1F:92:98:71:94:85
X509v3 Authority Key Identifier:
keyid:CE:F8:4E:47:49:CC:CD:58:3F:EF:C7:79:7C:3D:67:B1:08:98:A1:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvhOR0nMzVg_78d5fD1nsQiYoYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/16afe5-a443-4237-ad7d-dab6e2c5fdd9/1/s3ri8apkEfVbKGUv3PIfkphxlIU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/16afe5-a443-4237-ad7d-dab6e2c5fdd9/1/zvhOR0nMzVg_78d5fD1nsQiYoYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.36.92.0/22
185.61.64.0/22
213.164.120.0/21
Signature Algorithm: sha256WithRSAEncryption
47:de:44:be:26:72:3c:8c:26:e1:a5:07:7f:4c:fe:35:a2:e6:
55:a1:37:9a:f7:e4:5b:9c:45:01:8c:c3:76:88:64:d2:d2:de:
9d:fc:bf:4b:26:a2:d2:c3:7b:1d:da:87:01:6c:66:5e:a3:15:
e4:e3:2b:dc:29:f6:2c:0f:7a:2f:7a:e3:f1:ac:7a:7a:80:4d:
b9:66:4b:b6:08:cf:f8:ed:23:d2:fe:3d:58:eb:99:c6:aa:33:
5c:fa:c8:67:5c:19:2f:07:6b:ab:74:72:2d:46:18:8d:6b:ac:
a1:86:fd:cc:6d:e6:02:52:c2:a4:0e:e2:c0:02:fe:88:a2:8c:
3f:33:78:6c:8d:2c:7e:f3:fb:fc:a8:a1:bb:90:3c:8d:ec:64:
04:e4:76:1f:05:84:e2:52:d2:58:9f:f2:a0:26:23:6a:60:0b:
66:19:ae:15:f0:2e:e2:a8:7e:6e:ec:23:17:fe:07:f1:f8:80:
7a:61:20:b8:91:4a:cd:d4:36:54:83:e8:a2:20:4e:eb:6d:fc:
00:87:e3:1e:75:68:98:ef:b6:54:89:a2:c1:1f:f6:a9:63:9c:
bf:2a:ff:c3:f5:b4:f9:e3:27:fd:03:84:7b:ce:81:44:99:60:
6f:bc:8f:5f:65:5b:af:03:dc:98:fc:d9:d8:94:fd:65:b4:e1:
ab:a5:24:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 12:56:52 2024 by rpki-client on console-ams.rpki-client.org