Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/IyPOp-d_q0dvnw6n-Yi1dekTvJk.roa
File: IyPOp-d_q0dvnw6n-Yi1dekTvJk.roa (raw, json)
Hash identifier: xXojaGZt1OHe0NMQEQeSEbFz1aq/hfLqB54aWiNn//M=
Subject key identifier: 23:23:CE:A7:E7:7F:AB:47:6F:9F:0E:A7:F9:88:B5:75:E9:13:BC:99
Certificate issuer: /CN=3af09ba33b5ae581b0d29323249314f76aa10511
Certificate serial: 018CC3B7273F7CBE60E5990E17785FD3D1D4
Authority key identifier: 3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/IyPOp-d_q0dvnw6n-Yi1dekTvJk.roa
Signing time: Mon 01 Jan 2024 06:30:09 +0000
ROA not before: Mon 01 Jan 2024 06:30:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2278
IP address blocks: 161.105.128.0/17 maxlen: 17
139.100.0.0/16 maxlen: 16
192.144.77.0/24 maxlen: 24
161.106.0.0/16 maxlen: 16
2a01:cf00::/42 maxlen: 48
2a01:cf00:f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:27:3f:7c:be:60:e5:99:0e:17:78:5f:d3:d1:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3af09ba33b5ae581b0d29323249314f76aa10511
Validity
Not Before: Jan 1 06:30:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2323cea7e77fab476f9f0ea7f988b575e913bc99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:7c:a6:6d:18:b8:76:dd:84:83:fa:1b:8b:3b:
09:01:b0:b7:3d:77:44:e9:0f:ce:66:66:02:df:f0:
52:0b:c7:cc:c6:22:fb:68:11:74:69:f3:ba:26:c7:
82:5e:7d:2e:d7:df:ba:2a:3c:50:93:37:94:87:a1:
35:3a:a6:62:fd:13:41:aa:e7:85:4a:6e:12:04:56:
fd:ea:8b:ce:41:66:3b:51:ea:9d:22:91:95:d6:a1:
80:43:f1:c1:52:6f:1f:c1:8f:35:73:35:42:bb:9c:
76:68:99:3f:1a:1b:2e:50:a0:53:c7:cb:cc:d6:7f:
eb:0d:ec:42:78:f8:f4:97:e5:e3:e7:3c:aa:88:63:
ef:66:af:68:91:a3:0a:d6:0e:8c:00:7e:13:cf:d4:
3e:9b:df:cf:83:e1:92:78:11:7d:ee:f4:a5:25:91:
c0:6e:d4:14:53:06:1f:58:3d:a2:7c:2d:1e:ad:cd:
11:db:69:b4:f3:50:b0:d1:b5:dd:75:0a:c7:b4:23:
1a:1d:ab:1f:79:09:c8:35:4b:10:f3:b1:ed:27:af:
0b:79:ea:b8:7b:d0:da:4d:2b:f3:c5:c8:aa:23:9d:
15:31:94:b7:5e:91:e9:fe:5e:f5:21:ae:8a:a2:5b:
c2:e2:a6:d0:30:96:06:70:89:e6:45:9d:76:e7:6d:
2c:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:23:CE:A7:E7:7F:AB:47:6F:9F:0E:A7:F9:88:B5:75:E9:13:BC:99
X509v3 Authority Key Identifier:
keyid:3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/IyPOp-d_q0dvnw6n-Yi1dekTvJk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.100.0.0/16
161.105.128.0-161.106.255.255
192.144.77.0/24
IPv6:
2a01:cf00::/42
Signature Algorithm: sha256WithRSAEncryption
0c:54:16:69:01:f7:05:46:42:50:2a:95:7a:2f:08:23:ab:91:
12:d4:6a:ea:76:e7:5b:72:96:f8:54:70:d0:dc:82:65:ce:fc:
b7:62:15:8f:5d:06:2d:18:2e:cb:40:b4:f7:f2:a4:15:d6:0b:
9d:95:2c:1d:dd:e7:ca:42:e3:5a:40:8f:70:7d:ab:bb:37:b6:
ad:04:05:77:97:43:49:86:ad:50:77:45:c2:a4:5f:00:3c:14:
42:59:37:44:a4:1f:3d:63:46:52:e8:02:d7:28:e0:84:d0:4b:
6e:48:c2:8e:6e:62:dc:69:15:27:83:92:e7:47:e8:e6:7c:55:
8d:ad:a0:3b:f8:c2:2c:18:6a:92:85:db:91:4d:1b:c3:5c:c5:
6e:ec:64:1d:23:91:c8:4c:45:dd:5e:e9:71:55:24:bf:7e:0b:
68:60:4e:d8:12:b0:1f:d2:61:0a:1c:72:1c:a8:73:ad:66:ca:
37:e3:0d:6a:6c:5f:07:6d:13:9d:4d:58:0a:0a:d3:ad:ea:65:
01:9c:4c:37:85:8b:6a:28:de:11:22:e2:d1:3f:8f:21:f3:ac:
2d:c1:ee:a9:7d:78:f8:5e:9c:bd:79:3c:0c:22:b6:2b:e3:18:
4f:cb:ee:6c:7a:dd:7e:86:02:26:fd:87:47:e9:24:9e:4d:f6:
c3:e5:84:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 19:32:58 2024 by rpki-client on console-ams.rpki-client.org