Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/ab0b97-4307-4ecf-a987-368712776f4c/1/ID0SFLbTJzKhniUo-DP-Z8Tb_rY.roa
File: ID0SFLbTJzKhniUo-DP-Z8Tb_rY.roa (raw, json)
Hash identifier: bMHZDNEKZBMBfzcWan7fgdw0ypb7FpxuGk5AwZgcGBY=
Subject key identifier: 20:3D:12:14:B6:D3:27:32:A1:9E:25:28:F8:33:FE:67:C4:DB:FE:B6
Certificate issuer: /CN=0eb03f60c2c487b56b3eef3d3ed679101e487db7
Certificate serial: 018CCA9A10BD586D8C79A79336DBA31E7851
Authority key identifier: 0E:B0:3F:60:C2:C4:87:B5:6B:3E:EF:3D:3E:D6:79:10:1E:48:7D:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DrA_YMLEh7VrPu89PtZ5EB5Ifbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/ab0b97-4307-4ecf-a987-368712776f4c/1/ID0SFLbTJzKhniUo-DP-Z8Tb_rY.roa
Signing time: Tue 02 Jan 2024 14:35:43 +0000
ROA not before: Tue 02 Jan 2024 14:35:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49435
IP address blocks: 31.47.224.0/21 maxlen: 24
151.237.248.0/21 maxlen: 24
185.108.184.0/22 maxlen: 24
188.94.112.0/21 maxlen: 24
2a02:2260::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/ab0b97-4307-4ecf-a987-368712776f4c/1/DrA_YMLEh7VrPu89PtZ5EB5Ifbc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/ab0b97-4307-4ecf-a987-368712776f4c/1/DrA_YMLEh7VrPu89PtZ5EB5Ifbc.mft
rsync://rpki.ripe.net/repository/DEFAULT/DrA_YMLEh7VrPu89PtZ5EB5Ifbc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 May 2024 14:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:9a:10:bd:58:6d:8c:79:a7:93:36:db:a3:1e:78:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0eb03f60c2c487b56b3eef3d3ed679101e487db7
Validity
Not Before: Jan 2 14:35:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=203d1214b6d32732a19e2528f833fe67c4dbfeb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:67:dc:a8:80:ad:c4:f7:be:51:da:84:05:14:
0e:68:7b:33:20:f8:a7:ed:b9:b1:c2:b9:e7:74:26:
b7:e5:f5:5f:c2:18:eb:cd:c9:8a:1a:ff:9b:16:3f:
ff:a0:5a:17:5a:b8:b0:10:b7:42:1d:eb:07:60:34:
40:04:db:1a:a6:69:7a:66:05:44:84:c8:05:d3:32:
aa:11:50:78:ea:91:31:97:f9:e4:8b:d7:41:ea:5e:
9e:ec:50:43:2d:40:d2:fc:3a:6f:da:4c:02:21:72:
da:dd:c3:f4:ce:30:26:62:4c:5a:33:db:ef:d2:6b:
8c:01:78:1c:d2:9c:75:26:25:3f:39:2c:29:3e:5b:
24:9e:a0:5e:8e:f2:c1:4a:f8:47:c2:a4:af:91:08:
b2:b1:77:6a:e1:a2:3a:43:38:e1:44:8c:81:50:ef:
70:95:04:a0:08:cc:7d:9e:db:f0:82:1a:bc:3f:2a:
0a:43:50:ed:0c:22:15:03:48:89:4d:8e:a2:e9:46:
6b:2d:b4:48:d5:fb:95:d6:2e:88:0d:0b:b0:60:64:
f7:2f:59:8c:02:68:0a:24:87:f4:b6:a8:4f:5b:2a:
28:5d:95:0a:4c:dc:d0:b1:d0:f1:69:ee:c9:6d:d4:
dc:e7:df:14:19:c9:b4:57:fa:ef:53:96:74:08:8e:
47:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:3D:12:14:B6:D3:27:32:A1:9E:25:28:F8:33:FE:67:C4:DB:FE:B6
X509v3 Authority Key Identifier:
keyid:0E:B0:3F:60:C2:C4:87:B5:6B:3E:EF:3D:3E:D6:79:10:1E:48:7D:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DrA_YMLEh7VrPu89PtZ5EB5Ifbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ab0b97-4307-4ecf-a987-368712776f4c/1/ID0SFLbTJzKhniUo-DP-Z8Tb_rY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ab0b97-4307-4ecf-a987-368712776f4c/1/DrA_YMLEh7VrPu89PtZ5EB5Ifbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.47.224.0/21
151.237.248.0/21
185.108.184.0/22
188.94.112.0/21
IPv6:
2a02:2260::/32
Signature Algorithm: sha256WithRSAEncryption
b3:a2:5d:08:fc:1a:dd:89:0d:49:7b:ee:da:a2:a4:94:86:07:
df:7a:c5:aa:eb:5b:84:eb:a4:d3:e4:08:7b:07:21:ca:2c:c6:
17:02:f2:7d:a1:36:7c:ae:48:a2:70:5d:70:6a:4d:65:0f:ed:
de:f2:79:9b:24:e6:5c:ec:77:d1:28:ac:61:e9:e1:87:0b:45:
4a:16:fd:8d:47:30:50:85:19:7c:18:4d:8b:0e:c7:d4:f6:12:
5e:dc:ce:ab:91:c2:73:cd:96:26:e4:5e:6f:d2:32:fc:b5:8d:
31:00:36:0f:a4:e4:7b:fe:88:0d:d3:59:cf:02:37:c4:a2:40:
08:6e:39:54:2b:b0:df:a0:4c:1d:be:d5:f3:1d:b5:ce:64:db:
a4:b6:a8:01:d4:b5:48:ed:67:71:65:4f:59:d1:7e:6b:56:1e:
fb:e4:6d:3a:7d:39:00:9c:34:30:9c:ef:75:16:76:f3:da:68:
1d:68:24:8a:44:8d:dc:c6:5f:dd:8a:bc:53:08:e2:24:27:de:
11:d2:72:7e:a9:5c:23:29:ee:f8:18:e7:52:75:fe:4d:b1:40:
07:58:ea:ef:90:9a:da:4b:05:03:78:ad:7b:3e:99:11:9c:d0:
99:a6:39:35:2d:b9:27:d4:28:4f:a4:d9:1b:01:4f:c3:89:50:
70:9c:33:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 28 23:40:24 2024 by rpki-client on console-ams.rpki-client.org