Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/y-ALfhYbPk2865V1lKU-3ZzbfCc.roa
File: y-ALfhYbPk2865V1lKU-3ZzbfCc.roa (raw, json)
Hash identifier: 0//M/iORbR7OUw45za+o9bTYXu6w7S8s400r3UGac/I=
Subject key identifier: CB:E0:0B:7E:16:1B:3E:4D:BC:EB:95:75:94:A5:3E:DD:9C:DB:7C:27
Certificate issuer: /CN=29a9964e0cd35fb36757e5653ffa7626ac5deee8
Certificate serial: 018E2C7F64F358C486F856C84B20A4F484AD
Authority key identifier: 29:A9:96:4E:0C:D3:5F:B3:67:57:E5:65:3F:FA:76:26:AC:5D:EE:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KamWTgzTX7NnV-VlP_p2Jqxd7ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/y-ALfhYbPk2865V1lKU-3ZzbfCc.roa
Signing time: Mon 11 Mar 2024 07:52:10 +0000
ROA not before: Mon 11 Mar 2024 07:52:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203744
IP address blocks: 45.131.116.0/24 maxlen: 24
45.131.117.0/24 maxlen: 24
45.131.118.0/24 maxlen: 24
45.131.119.0/24 maxlen: 24
89.111.240.0/24 maxlen: 24
185.125.120.0/22 maxlen: 22
185.125.120.0/24 maxlen: 24
185.125.121.0/24 maxlen: 24
185.125.122.0/24 maxlen: 24
185.125.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/KamWTgzTX7NnV-VlP_p2Jqxd7ug.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/KamWTgzTX7NnV-VlP_p2Jqxd7ug.mft
rsync://rpki.ripe.net/repository/DEFAULT/KamWTgzTX7NnV-VlP_p2Jqxd7ug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:2c:7f:64:f3:58:c4:86:f8:56:c8:4b:20:a4:f4:84:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29a9964e0cd35fb36757e5653ffa7626ac5deee8
Validity
Not Before: Mar 11 07:52:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cbe00b7e161b3e4dbceb957594a53edd9cdb7c27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:43:fa:8c:dd:a1:d3:71:b9:5e:a3:39:60:d1:
70:cb:ae:98:c5:9b:ee:27:00:0a:e1:4a:4c:cd:61:
e0:64:41:ed:aa:82:c8:12:61:32:78:ed:8d:80:24:
fa:40:80:fb:82:35:6e:6a:0a:26:a1:ed:85:ea:de:
93:d0:5c:15:30:d9:0f:b9:da:e9:a7:2b:5e:aa:e0:
01:f0:fa:bd:27:ac:8a:71:0f:fb:7d:ac:c8:38:b9:
2e:c3:d4:e5:d4:10:11:24:6b:86:7f:22:53:2f:47:
e4:37:a3:3c:be:16:5f:2d:62:d6:00:58:0b:87:b3:
2a:66:b1:47:18:2a:9f:71:b9:3e:66:ef:6d:d6:78:
2d:c2:08:a5:4d:ac:9a:05:7d:39:da:8a:cb:d1:9a:
58:28:0c:c4:46:0c:e2:b6:c2:01:23:4c:62:f2:8f:
98:8e:12:0f:b3:a3:46:f7:d7:dd:df:6b:30:22:31:
35:92:b9:30:1e:40:ab:c2:83:65:0b:e4:ef:0d:16:
86:f1:8f:b6:52:3a:4a:31:b6:4c:96:ee:cc:e6:67:
26:9e:dd:70:2f:57:94:3a:d8:87:1c:9b:df:61:51:
ad:33:1e:c1:ca:f1:3c:88:9d:08:47:e6:e8:f1:47:
d2:9c:14:36:f4:bb:d4:a2:58:21:2d:c9:2c:8e:5d:
a3:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:E0:0B:7E:16:1B:3E:4D:BC:EB:95:75:94:A5:3E:DD:9C:DB:7C:27
X509v3 Authority Key Identifier:
keyid:29:A9:96:4E:0C:D3:5F:B3:67:57:E5:65:3F:FA:76:26:AC:5D:EE:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KamWTgzTX7NnV-VlP_p2Jqxd7ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/y-ALfhYbPk2865V1lKU-3ZzbfCc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/KamWTgzTX7NnV-VlP_p2Jqxd7ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.131.116.0/22
89.111.240.0/24
185.125.120.0/22
Signature Algorithm: sha256WithRSAEncryption
4b:21:59:63:96:a9:4b:a1:26:91:0e:f6:7d:0b:d9:ef:4e:89:
63:32:0e:ae:d8:af:cd:b3:c3:b3:a9:00:10:2f:a1:8a:b5:6d:
c1:18:bc:ac:97:dd:ac:74:83:af:8c:88:22:c7:81:8e:a2:27:
f6:f7:a7:fd:30:b2:92:f6:8f:bb:cd:27:6b:6e:01:14:a2:4b:
bf:8c:ee:27:6c:b9:7c:33:2c:86:5b:94:87:7a:68:17:3c:89:
32:87:8d:76:56:d7:d3:f3:a8:61:89:0a:bd:99:62:f7:44:3d:
9a:e1:44:9b:34:82:c7:f8:23:81:8e:b2:da:18:4d:54:67:df:
6a:96:76:57:1c:99:ad:7d:c2:37:ee:69:fc:65:91:09:76:13:
53:81:2c:18:f9:16:0c:ef:1f:24:6e:9c:6f:10:13:32:23:a4:
04:15:da:b2:63:a0:68:ee:0a:9d:fe:79:41:e2:59:92:e9:37:
c5:e4:d6:a0:1d:42:a5:0c:9d:18:d1:95:78:7c:b1:ac:9e:01:
77:57:1a:7e:86:55:d2:13:9c:4a:34:47:de:4b:78:00:39:b6:
be:9d:ca:de:ab:e8:25:66:b0:05:d4:35:c3:f8:fe:d2:84:e3:
bf:9a:fc:e0:f2:6b:bd:23:6b:33:aa:4f:f2:6f:40:3f:60:e6:
54:49:52:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 06:33:05 2024 by rpki-client on console-ams.rpki-client.org