Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/c547b8-99ab-42f1-a6cc-bc665bb21686/1/Am4Kl969MgW88VOdkK2GanpXjVw.roa
File: Am4Kl969MgW88VOdkK2GanpXjVw.roa (raw, json)
Hash identifier: JtWGiTMwAnN2SCAiGIed1vSRuVheZ1es5xEPj72Z4Kg=
Subject key identifier: 02:6E:0A:97:DE:BD:32:05:BC:F1:53:9D:90:AD:86:6A:7A:57:8D:5C
Certificate issuer: /CN=eb554c44046c36439a919738942f31fa756b6911
Certificate serial: 0192DCA2E9C282138099634878CC75150BCE
Authority key identifier: EB:55:4C:44:04:6C:36:43:9A:91:97:38:94:2F:31:FA:75:6B:69:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/61VMRARsNkOakZc4lC8x-nVraRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/c547b8-99ab-42f1-a6cc-bc665bb21686/1/Am4Kl969MgW88VOdkK2GanpXjVw.roa
Signing time: Wed 30 Oct 2024 08:55:17 +0000
ROA not before: Wed 30 Oct 2024 08:55:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15682
IP address blocks: 212.74.231.0/24 maxlen: 24
212.74.233.0/24 maxlen: 24
212.74.237.0/24 maxlen: 24
212.74.240.0/21 maxlen: 21
2a01:5f40::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/c547b8-99ab-42f1-a6cc-bc665bb21686/1/61VMRARsNkOakZc4lC8x-nVraRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/c547b8-99ab-42f1-a6cc-bc665bb21686/1/61VMRARsNkOakZc4lC8x-nVraRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/61VMRARsNkOakZc4lC8x-nVraRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Dec 2024 18:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:dc:a2:e9:c2:82:13:80:99:63:48:78:cc:75:15:0b:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb554c44046c36439a919738942f31fa756b6911
Validity
Not Before: Oct 30 08:55:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=026e0a97debd3205bcf1539d90ad866a7a578d5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:79:67:f1:df:6d:a5:7c:de:00:8e:e3:fe:85:
45:90:b9:5b:b6:0f:4a:6c:42:5c:27:b8:c2:82:23:
11:5b:10:2a:aa:d4:e6:1c:11:4b:5d:de:1e:e7:36:
23:5c:19:d4:41:94:02:10:4c:2c:4c:09:12:99:34:
04:ef:20:9f:11:65:18:51:1c:e2:59:ed:3a:01:39:
2b:68:83:08:e3:f3:c8:83:1a:a4:05:e0:cd:62:52:
56:13:84:e2:1a:fb:7a:7a:69:68:f4:76:8c:b4:ba:
df:b5:20:3f:65:fe:8f:f7:07:59:c7:4d:3c:63:89:
f2:f8:c6:13:b2:cb:10:3c:21:b9:ec:f0:8e:e9:a6:
c7:c4:05:61:c8:15:83:bf:57:7e:63:a8:ae:a4:2f:
f4:40:ad:d3:93:be:5e:d4:9c:e6:b2:e5:e2:e6:18:
1b:39:db:96:ba:1c:fa:c2:a5:20:e2:e8:80:9a:be:
2b:35:76:8a:7c:c1:00:82:0e:81:33:45:4f:1c:49:
29:2f:d5:82:d7:98:09:31:ce:e6:a6:eb:26:73:37:
72:01:3d:ba:6d:9e:3c:a0:c1:9a:32:8a:14:ab:80:
c7:fd:6b:29:c0:9a:de:f0:39:c1:94:ed:6c:1b:f1:
d6:e9:76:49:33:49:d8:a1:29:89:40:8d:d5:63:85:
e8:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:6E:0A:97:DE:BD:32:05:BC:F1:53:9D:90:AD:86:6A:7A:57:8D:5C
X509v3 Authority Key Identifier:
keyid:EB:55:4C:44:04:6C:36:43:9A:91:97:38:94:2F:31:FA:75:6B:69:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/61VMRARsNkOakZc4lC8x-nVraRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c547b8-99ab-42f1-a6cc-bc665bb21686/1/Am4Kl969MgW88VOdkK2GanpXjVw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c547b8-99ab-42f1-a6cc-bc665bb21686/1/61VMRARsNkOakZc4lC8x-nVraRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.74.231.0/24
212.74.233.0/24
212.74.237.0/24
212.74.240.0/21
IPv6:
2a01:5f40::/32
Signature Algorithm: sha256WithRSAEncryption
33:93:9e:dd:e4:fc:2d:f0:72:65:12:d1:76:eb:63:6a:8d:d2:
b5:23:65:25:a0:e8:d7:0a:31:58:02:f4:21:c6:97:4e:2b:ea:
6a:79:17:f2:84:39:06:14:b8:f2:29:29:65:c3:a3:3c:ff:cb:
f0:3f:c7:8d:ef:d3:f1:89:d7:41:3d:41:21:88:b3:15:70:8b:
df:ee:17:6c:fe:42:0b:23:e3:87:e9:69:19:c8:6b:75:c6:a1:
35:b7:e1:f1:4e:a5:50:a2:65:89:5b:a4:bf:3a:a9:35:9c:3c:
d9:9a:d3:a8:41:d1:f0:67:e1:b2:33:c3:55:57:26:77:dc:f5:
14:58:31:48:f9:cd:99:25:7b:8a:92:4f:04:d4:11:19:71:ed:
6a:52:bf:78:df:1f:b7:d7:2e:4d:8a:a0:5f:ae:12:ef:a5:70:
fe:55:de:fb:0e:d0:8f:2b:c1:76:a7:30:1b:41:ad:c9:a5:0f:
d0:63:19:e5:b9:37:c6:a5:8a:5b:38:cd:9c:47:be:4b:0d:0e:
3d:c7:49:82:e6:4c:d0:7a:bf:de:ed:bd:c6:6e:fa:01:89:39:
6b:5c:1a:d5:cc:10:f2:73:a5:35:c1:9f:de:76:7a:5d:36:d7:
5b:40:59:e6:03:6c:35:3a:c6:c8:f7:2f:cb:e4:18:90:8e:64:
e7:3e:da:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 22:30:17 2024 by rpki-client on console-fra.rpki-client.org