Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/f2111a-3f47-4ff0-a51d-b251377add86/1/0lEDI-XocBIwjCKqCMNAQNnQe_k.roa
File: 0lEDI-XocBIwjCKqCMNAQNnQe_k.roa (raw, json)
Hash identifier: y2g1IA6H0q3s6EDaG+oyXVNETWxuN37hr6/C/Nk0Awo=
Subject key identifier: D2:51:03:23:E5:E8:70:12:30:8C:22:AA:08:C3:40:40:D9:D0:7B:F9
Certificate issuer: /CN=13d83b225dd33860c51dc44aa88db5f03dc15a74
Certificate serial: 018CC80190BB979933B987404D6ED4988A79
Authority key identifier: 13:D8:3B:22:5D:D3:38:60:C5:1D:C4:4A:A8:8D:B5:F0:3D:C1:5A:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E9g7Il3TOGDFHcRKqI218D3BWnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/f2111a-3f47-4ff0-a51d-b251377add86/1/0lEDI-XocBIwjCKqCMNAQNnQe_k.roa
Signing time: Tue 02 Jan 2024 02:29:54 +0000
ROA not before: Tue 02 Jan 2024 02:29:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43858
IP address blocks: 185.11.160.0/22 maxlen: 22
185.80.176.0/22 maxlen: 22
91.198.199.0/24 maxlen: 24
146.255.168.0/21 maxlen: 21
2a03:39c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/f2111a-3f47-4ff0-a51d-b251377add86/1/E9g7Il3TOGDFHcRKqI218D3BWnQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/f2111a-3f47-4ff0-a51d-b251377add86/1/E9g7Il3TOGDFHcRKqI218D3BWnQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/E9g7Il3TOGDFHcRKqI218D3BWnQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 May 2024 01:04:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:90:bb:97:99:33:b9:87:40:4d:6e:d4:98:8a:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13d83b225dd33860c51dc44aa88db5f03dc15a74
Validity
Not Before: Jan 2 02:29:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d2510323e5e87012308c22aa08c34040d9d07bf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:69:d4:c3:f4:a0:3e:99:90:e7:bd:dc:3f:91:
f0:3f:17:54:79:88:9b:fb:f2:2f:8b:63:25:77:54:
1e:5e:8c:de:0a:b7:03:79:80:5a:ec:dc:1d:85:38:
60:b4:c1:65:d0:a1:71:18:6b:d8:1c:0e:05:b4:68:
7f:33:3c:95:b5:62:0c:93:39:81:7e:5f:9c:b9:9a:
c9:a6:05:23:f1:33:f6:a5:ab:99:53:f9:36:00:47:
bf:17:ba:ba:be:8f:b6:c4:0a:72:9a:48:e4:d3:59:
17:41:07:c7:ff:b3:0f:77:7b:9a:aa:61:4e:7d:0d:
9a:66:48:b0:12:18:43:59:8c:e2:d7:37:22:e5:64:
ef:ea:fc:4a:67:7b:7b:e5:a7:21:22:86:8d:3a:d5:
2b:8f:e3:6a:01:c2:ff:63:02:1a:37:72:09:03:66:
ca:ac:17:68:a8:d6:77:7a:0e:6e:12:08:ee:6a:3d:
2e:de:e2:9c:51:35:82:a2:e6:ec:ce:ca:d8:c3:a8:
02:72:9a:4e:75:1c:cd:43:67:b3:69:a1:83:2e:d5:
06:b3:7d:e8:c0:13:97:b2:73:c8:ea:e1:be:64:02:
e4:c3:63:de:a9:81:4d:45:70:7a:40:78:12:a5:51:
e3:d0:0d:e8:0e:f7:3d:39:33:7f:7e:6d:6b:02:3d:
e1:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:51:03:23:E5:E8:70:12:30:8C:22:AA:08:C3:40:40:D9:D0:7B:F9
X509v3 Authority Key Identifier:
keyid:13:D8:3B:22:5D:D3:38:60:C5:1D:C4:4A:A8:8D:B5:F0:3D:C1:5A:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E9g7Il3TOGDFHcRKqI218D3BWnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/f2111a-3f47-4ff0-a51d-b251377add86/1/0lEDI-XocBIwjCKqCMNAQNnQe_k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/f2111a-3f47-4ff0-a51d-b251377add86/1/E9g7Il3TOGDFHcRKqI218D3BWnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.199.0/24
146.255.168.0/21
185.11.160.0/22
185.80.176.0/22
IPv6:
2a03:39c0::/29
Signature Algorithm: sha256WithRSAEncryption
28:ac:cc:85:ec:34:af:3a:51:fb:c4:33:87:92:f7:13:07:5b:
70:05:38:a3:c8:4b:dd:f0:7d:6d:9e:13:08:e2:67:92:f5:2a:
18:1d:10:8e:90:d9:05:08:8e:5d:48:34:67:12:36:e6:e9:dc:
b6:94:6c:9b:14:95:5e:c8:e8:f3:ce:72:51:4d:9b:82:4c:ff:
2f:02:f1:5f:24:76:e7:d7:4d:f2:5e:52:eb:9e:4f:ac:c6:a2:
c5:89:ba:82:a0:31:da:d0:11:a5:99:aa:2c:6c:0e:cc:f5:c3:
c0:ab:aa:f7:ea:f7:43:b2:45:4d:3a:75:5a:7e:1c:6b:c0:fb:
69:aa:52:74:10:17:e8:bb:25:34:1c:dd:a2:ae:a8:c7:1c:a2:
f3:01:c4:23:1c:5d:8c:4b:7d:0e:68:06:2a:15:9a:ed:b4:31:
cf:e1:01:9d:e2:c3:88:8c:0c:07:bc:fc:08:0e:4d:61:8f:8a:
5b:1f:d3:c5:ce:6d:0e:ec:6a:f2:a3:08:ec:58:34:05:f4:2b:
15:6f:c9:8d:9b:b7:7c:11:09:0d:0c:b3:d8:ec:34:12:21:98:
8c:f0:c1:8c:3e:70:ec:1e:c8:38:87:c3:ff:7f:e1:49:d4:e5:
da:9b:27:3e:45:de:64:44:e0:db:21:ef:03:a4:55:fe:c6:19:
83:be:ba:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 27 10:46:57 2024 by rpki-client on console-fra.rpki-client.org