Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/751958-abeb-459e-8141-b95520c872c5/1/9C3ttLb80AdC60c5ihyJY9pw98M.roa
File: 9C3ttLb80AdC60c5ihyJY9pw98M.roa (raw, json)
Hash identifier: Y7k1CVw2EwXHJp7xtpbcardaI6KJ/pfUW2fC2o5c4tI=
Subject key identifier: F4:2D:ED:B4:B6:FC:D0:07:42:EB:47:39:8A:1C:89:63:DA:70:F7:C3
Certificate issuer: /CN=0274d086796d4d779ad164c24c223f26b3284ed4
Certificate serial: 018CC3B69081BCE6F9135FF61B4366FB09A6
Authority key identifier: 02:74:D0:86:79:6D:4D:77:9A:D1:64:C2:4C:22:3F:26:B3:28:4E:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AnTQhnltTXea0WTCTCI_JrMoTtQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/751958-abeb-459e-8141-b95520c872c5/1/9C3ttLb80AdC60c5ihyJY9pw98M.roa
Signing time: Mon 01 Jan 2024 06:29:30 +0000
ROA not before: Mon 01 Jan 2024 06:29:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204209
IP address blocks: 185.249.89.0/24 maxlen: 24
185.249.90.0/24 maxlen: 24
185.249.91.0/24 maxlen: 24
185.249.88.0/24 maxlen: 24
2a07:fb00::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/751958-abeb-459e-8141-b95520c872c5/1/AnTQhnltTXea0WTCTCI_JrMoTtQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/751958-abeb-459e-8141-b95520c872c5/1/AnTQhnltTXea0WTCTCI_JrMoTtQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/AnTQhnltTXea0WTCTCI_JrMoTtQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:90:81:bc:e6:f9:13:5f:f6:1b:43:66:fb:09:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0274d086796d4d779ad164c24c223f26b3284ed4
Validity
Not Before: Jan 1 06:29:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f42dedb4b6fcd00742eb47398a1c8963da70f7c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:9c:e5:1b:8b:e0:23:f3:39:72:bc:45:e1:53:
47:06:cb:83:43:02:ae:99:3d:47:ce:d0:3a:a3:74:
49:0c:5e:02:bc:72:4f:53:e1:26:6e:aa:4f:2a:26:
2e:57:f1:7e:ab:2f:2a:e8:4e:c2:61:93:56:99:0c:
6b:d2:52:e7:62:51:39:79:a6:4d:ec:a5:d9:c8:e8:
7d:49:5c:c6:fc:c6:0e:ed:78:2b:fc:e0:18:f0:50:
b2:83:89:de:27:f8:ea:f7:d2:67:ef:72:b8:cd:f3:
54:35:bd:97:78:29:32:d9:b9:5c:1a:c0:7f:21:25:
c3:8e:12:80:ac:75:65:37:ba:68:6d:eb:c9:6d:d8:
fa:44:97:38:3b:68:24:7d:19:32:2b:fd:c7:85:de:
20:3f:a7:e1:cd:37:b1:3d:e8:cf:b1:36:77:7e:68:
bb:2b:82:ea:9f:46:18:bf:0f:24:5f:0c:83:58:f5:
6e:e7:5c:c4:9a:d6:ee:81:84:9c:fe:6f:86:f5:50:
db:28:08:c1:15:bd:3a:2f:52:e4:29:66:e5:a9:40:
d1:72:c0:d5:e4:e9:31:42:44:33:ee:97:46:1c:e8:
1b:38:fb:ea:7f:67:68:0b:e0:1f:a3:8d:41:64:86:
52:a8:36:20:5d:c0:ae:5c:bb:23:e3:99:97:0f:7e:
ef:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:2D:ED:B4:B6:FC:D0:07:42:EB:47:39:8A:1C:89:63:DA:70:F7:C3
X509v3 Authority Key Identifier:
keyid:02:74:D0:86:79:6D:4D:77:9A:D1:64:C2:4C:22:3F:26:B3:28:4E:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AnTQhnltTXea0WTCTCI_JrMoTtQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/751958-abeb-459e-8141-b95520c872c5/1/9C3ttLb80AdC60c5ihyJY9pw98M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/751958-abeb-459e-8141-b95520c872c5/1/AnTQhnltTXea0WTCTCI_JrMoTtQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.249.88.0/22
IPv6:
2a07:fb00::/32
Signature Algorithm: sha256WithRSAEncryption
5f:7a:9f:62:c7:06:b9:0b:8e:9e:7b:28:f4:68:e7:f1:2b:8a:
2e:52:6a:9c:a7:71:0e:8d:40:0e:11:79:a8:da:c6:69:18:5b:
e1:b9:31:80:1b:24:a4:b7:8d:12:bb:56:0e:05:61:e4:a3:e7:
27:54:6c:99:77:78:a3:d3:e8:99:bc:77:7c:62:01:57:00:69:
25:37:6c:3e:f5:5d:90:fa:66:76:a2:fb:7d:a9:f2:a8:f0:e4:
ea:95:43:9c:b4:d2:6f:f8:ee:bb:97:9d:d7:4c:54:26:df:10:
2c:84:93:73:ed:e6:9a:8e:e1:c0:7b:d5:df:d9:67:75:a1:22:
99:86:98:3c:7a:50:15:cd:1a:bc:89:95:75:db:c4:13:0f:ed:
f0:20:fa:57:5f:2a:0a:61:74:26:e3:0b:35:42:81:df:15:3a:
6b:64:b8:86:12:79:d5:d7:17:d6:7b:d3:85:b7:db:79:9d:53:
9d:dd:5a:2e:65:32:a0:b8:2e:58:b5:ed:dd:f7:16:b1:1b:f5:
4d:7d:69:cc:9e:6f:bc:71:31:7e:24:6f:5a:2d:e5:e9:36:7b:
1b:cb:53:64:53:2f:82:82:5d:c5:e5:df:8f:9a:b1:7f:42:35:
40:cd:32:33:d7:ab:60:07:0c:17:af:a6:46:43:d8:3a:a8:bc:
2d:a5:84:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:42:54 2024 by rpki-client on console-ams.rpki-client.org