Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/f1af29-7f09-4f9c-acd6-694d78b32d20/1/O-IunptHkXLR3uFBCi8VEilkv2k.roa
File: O-IunptHkXLR3uFBCi8VEilkv2k.roa (raw, json)
Hash identifier: xe/Fp0tyzkLmQdlipfEc7fllv38ipfo1nO7ExlzBAW4=
Subject key identifier: 3B:E2:2E:9E:9B:47:91:72:D1:DE:E1:41:0A:2F:15:12:29:64:BF:69
Certificate issuer: /CN=b1f713cf20552d6c5c23f09e7b37669846f9ca50
Certificate serial: 0192BDF1DB173DEFABBA174E1EF34AFAB1FF
Authority key identifier: B1:F7:13:CF:20:55:2D:6C:5C:23:F0:9E:7B:37:66:98:46:F9:CA:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sfcTzyBVLWxcI_CeezdmmEb5ylA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/f1af29-7f09-4f9c-acd6-694d78b32d20/1/O-IunptHkXLR3uFBCi8VEilkv2k.roa
Signing time: Thu 24 Oct 2024 09:53:16 +0000
ROA not before: Thu 24 Oct 2024 09:53:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199095
IP address blocks: 31.31.128.0/19 maxlen: 24
80.91.144.0/20 maxlen: 24
185.195.28.0/22 maxlen: 24
217.64.240.0/20 maxlen: 24
2a11:bfc0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/f1af29-7f09-4f9c-acd6-694d78b32d20/1/sfcTzyBVLWxcI_CeezdmmEb5ylA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/f1af29-7f09-4f9c-acd6-694d78b32d20/1/sfcTzyBVLWxcI_CeezdmmEb5ylA.mft
rsync://rpki.ripe.net/repository/DEFAULT/sfcTzyBVLWxcI_CeezdmmEb5ylA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:bd:f1:db:17:3d:ef:ab:ba:17:4e:1e:f3:4a:fa:b1:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1f713cf20552d6c5c23f09e7b37669846f9ca50
Validity
Not Before: Oct 24 09:53:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3be22e9e9b479172d1dee1410a2f15122964bf69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:10:07:e2:50:ba:b7:9a:e3:77:84:55:37:e3:
c9:c5:68:b1:ad:3e:10:dd:03:d9:b3:97:30:2f:49:
34:8d:cb:67:75:5b:4e:12:4b:fb:c2:42:b5:0a:86:
67:c7:ab:30:b8:6b:b3:a6:20:8c:51:24:11:a4:b7:
cc:e8:be:50:98:4a:1b:5a:13:ba:36:ac:85:89:ee:
e3:5c:aa:a3:09:74:9a:5c:94:3c:ab:40:5b:c3:02:
1c:64:ec:44:90:cf:7a:ad:e4:6a:17:d1:7b:cb:0d:
62:8c:a6:64:b5:25:dc:1c:59:f0:d6:33:b7:1c:97:
46:7c:95:52:99:a7:6f:fc:04:fa:d1:63:04:c2:4e:
5a:2c:32:7d:57:57:68:20:26:8e:fe:50:9c:db:a3:
0a:b1:86:18:78:8b:50:31:87:92:c9:27:b2:52:47:
0b:1e:81:2a:9c:83:2f:a5:0f:11:1b:11:88:5f:60:
2c:a8:82:f5:a2:7c:60:b3:f6:69:1d:a1:8c:2c:9e:
99:1e:ac:b5:bf:79:08:32:8c:4a:fe:7c:3e:44:1a:
6d:af:88:41:7f:f6:af:31:b1:33:6c:4b:80:44:33:
73:88:d4:ce:15:d1:5d:b7:92:d3:de:c1:3d:20:3b:
f3:c8:b5:8b:31:5b:de:19:d5:61:92:12:b5:37:8c:
91:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:E2:2E:9E:9B:47:91:72:D1:DE:E1:41:0A:2F:15:12:29:64:BF:69
X509v3 Authority Key Identifier:
keyid:B1:F7:13:CF:20:55:2D:6C:5C:23:F0:9E:7B:37:66:98:46:F9:CA:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sfcTzyBVLWxcI_CeezdmmEb5ylA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f1af29-7f09-4f9c-acd6-694d78b32d20/1/O-IunptHkXLR3uFBCi8VEilkv2k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f1af29-7f09-4f9c-acd6-694d78b32d20/1/sfcTzyBVLWxcI_CeezdmmEb5ylA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.31.128.0/19
80.91.144.0/20
185.195.28.0/22
217.64.240.0/20
IPv6:
2a11:bfc0::/29
Signature Algorithm: sha256WithRSAEncryption
5e:7a:bc:28:b9:d0:a0:42:c0:72:db:43:80:83:b9:b7:3d:99:
f4:d3:c8:00:1b:2b:33:f9:7e:e5:03:c4:91:2f:46:81:b7:1b:
c1:6b:1c:7a:96:74:b2:06:b2:52:eb:11:3a:ae:cb:33:0a:42:
e5:d6:f1:6f:8f:4e:0d:b5:ac:b2:ac:50:7c:20:cd:ed:c2:ed:
db:3c:02:41:d1:11:7d:1d:f5:8c:2e:85:23:4f:08:6b:cc:92:
2d:c3:e5:a8:7c:a4:93:c3:61:7a:18:f6:8a:61:4c:b0:d9:44:
81:bc:01:ce:a2:61:dd:59:ed:15:e2:b1:8a:ec:dd:35:4a:01:
6c:df:dc:85:9d:0e:ef:ac:55:48:e3:20:38:2a:1d:ff:bb:bf:
b3:45:82:e5:ce:27:cc:ba:31:30:6d:6c:af:27:03:ad:e2:a3:
5e:5e:27:ed:30:ed:1e:4e:9f:eb:4d:5e:18:8d:9e:4c:9c:92:
3f:fc:e9:1b:62:f0:99:fb:34:5e:e2:2b:c4:14:dc:57:ad:16:
03:1d:75:c1:3e:46:7f:1d:46:7a:a0:28:90:82:05:7f:aa:42:
dd:00:7c:fa:ce:e3:b8:0f:ba:07:ca:3b:cc:cd:21:16:2a:0e:
e8:ea:7c:a9:ce:12:35:71:f0:aa:e4:21:00:10:92:f2:84:e0:
e2:b2:36:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:21:59 2024 by rpki-client on console-ams.rpki-client.org