Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/afd415-0a86-431f-bc3a-d43207d62dfe/1/xDJiIEnpcAwt-jkG8pxUDh3i1HQ.roa
File: xDJiIEnpcAwt-jkG8pxUDh3i1HQ.roa (raw, json)
Hash identifier: 3qb45nmQnCoN/QFzSrj+jKZN6KVW2+CbY6n5mty+zgc=
Subject key identifier: C4:32:62:20:49:E9:70:0C:2D:FA:39:06:F2:9C:54:0E:1D:E2:D4:74
Certificate issuer: /CN=23394a125fa3ace0c47a6fe34f4086b4d3ba5588
Certificate serial: 0192E32D2CD1BF8BC947BC7DEB52ED150026
Authority key identifier: 23:39:4A:12:5F:A3:AC:E0:C4:7A:6F:E3:4F:40:86:B4:D3:BA:55:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IzlKEl-jrODEem_jT0CGtNO6VYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/afd415-0a86-431f-bc3a-d43207d62dfe/1/xDJiIEnpcAwt-jkG8pxUDh3i1HQ.roa
Signing time: Thu 31 Oct 2024 15:24:01 +0000
ROA not before: Thu 31 Oct 2024 15:24:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197248
IP address blocks: 62.112.192.0/21 maxlen: 21
62.112.208.0/21 maxlen: 21
77.111.88.0/21 maxlen: 24
93.88.192.0/21 maxlen: 21
93.88.194.0/24 maxlen: 24
109.61.0.0/22 maxlen: 22
109.61.8.0/21 maxlen: 21
109.61.20.0/22 maxlen: 22
109.61.22.0/24 maxlen: 24
109.61.24.0/21 maxlen: 21
109.61.48.0/20 maxlen: 20
109.61.64.0/20 maxlen: 21
109.61.96.0/21 maxlen: 21
109.61.112.0/21 maxlen: 21
2a01:be00::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/afd415-0a86-431f-bc3a-d43207d62dfe/1/IzlKEl-jrODEem_jT0CGtNO6VYg.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/afd415-0a86-431f-bc3a-d43207d62dfe/1/IzlKEl-jrODEem_jT0CGtNO6VYg.mft
rsync://rpki.ripe.net/repository/DEFAULT/IzlKEl-jrODEem_jT0CGtNO6VYg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 09:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:e3:2d:2c:d1:bf:8b:c9:47:bc:7d:eb:52:ed:15:00:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23394a125fa3ace0c47a6fe34f4086b4d3ba5588
Validity
Not Before: Oct 31 15:24:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c432622049e9700c2dfa3906f29c540e1de2d474
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:02:ff:06:2e:2d:ed:55:3a:cd:8d:e3:17:62:
4a:b1:12:91:8a:29:57:46:b7:01:e6:1c:b5:06:e0:
34:d5:b6:3a:a6:8a:57:ab:3a:62:32:7c:c5:7d:3b:
85:32:a4:a7:e3:d2:72:93:3b:f4:5b:64:29:b3:03:
b4:bb:af:04:c5:c2:44:b9:f4:9e:a4:1e:cb:46:5d:
35:16:4f:fe:53:b2:66:59:4c:0f:14:cc:a5:34:a5:
c5:eb:6c:2a:80:da:e0:df:dd:0f:b8:1c:1f:a3:f5:
db:d4:70:3a:8f:65:f7:14:10:5c:cd:63:5a:b5:2c:
41:9d:55:a0:db:a8:51:a9:e3:d4:69:23:ed:21:7f:
d4:59:75:33:57:62:2a:7f:60:29:e1:e1:2e:71:49:
fc:0d:64:ed:6c:7d:58:36:eb:26:46:b1:bc:12:80:
73:e7:61:05:6a:23:82:3a:91:32:7b:c5:f0:d6:47:
51:36:d8:ef:b2:82:ab:c1:42:87:72:84:d7:f0:f7:
28:31:a2:95:78:a9:20:ce:06:f8:81:be:c0:69:17:
88:bf:5d:1e:2a:5a:b8:4a:67:f3:2e:10:48:69:a8:
03:c5:eb:ba:80:8f:83:ff:75:3d:57:0b:75:5c:0a:
a1:67:79:45:ac:9f:31:b7:40:54:49:7b:fd:7e:5c:
9b:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:32:62:20:49:E9:70:0C:2D:FA:39:06:F2:9C:54:0E:1D:E2:D4:74
X509v3 Authority Key Identifier:
keyid:23:39:4A:12:5F:A3:AC:E0:C4:7A:6F:E3:4F:40:86:B4:D3:BA:55:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IzlKEl-jrODEem_jT0CGtNO6VYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/afd415-0a86-431f-bc3a-d43207d62dfe/1/xDJiIEnpcAwt-jkG8pxUDh3i1HQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/afd415-0a86-431f-bc3a-d43207d62dfe/1/IzlKEl-jrODEem_jT0CGtNO6VYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.112.192.0/21
62.112.208.0/21
77.111.88.0/21
93.88.192.0/21
109.61.0.0/22
109.61.8.0/21
109.61.20.0-109.61.31.255
109.61.48.0-109.61.79.255
109.61.96.0/21
109.61.112.0/21
IPv6:
2a01:be00::/32
Signature Algorithm: sha256WithRSAEncryption
88:8f:1e:1b:f4:e2:fa:d7:31:6b:e3:7b:8d:e1:5c:1d:ba:bb:
f9:c5:3e:a8:c0:40:b3:93:f8:44:33:86:48:ef:e7:97:a0:43:
1e:f9:d2:d7:51:33:fb:07:2b:6c:3f:d0:3b:d5:ba:a5:0f:41:
70:01:3b:c2:24:ef:69:ae:09:9c:9e:96:97:92:dd:15:18:36:
b0:80:6f:aa:79:7d:52:38:2d:ea:b4:a6:ff:5f:6f:32:c6:7e:
86:22:e3:af:97:d2:50:7c:a5:ff:52:59:f8:b2:70:c7:f9:e6:
6d:dc:21:9f:ac:2e:e3:3e:20:45:dc:7b:77:dc:d2:7f:7e:7c:
61:f0:cc:38:7a:7a:2d:4c:6a:17:4d:81:41:10:70:2c:5a:e3:
a3:be:22:06:34:cd:1c:be:05:bd:cb:32:68:7a:d6:01:cf:ce:
c9:63:b1:16:b8:0b:81:af:b8:34:fa:d1:95:97:6f:9e:8d:78:
13:a4:53:e9:03:c5:dc:04:44:78:29:08:1b:5b:82:84:ae:2f:
e4:59:65:cc:0c:e0:08:45:2a:3d:db:db:76:9d:af:91:a6:06:
31:7a:0f:4b:7a:90:b4:da:5c:9a:0d:7c:9a:58:37:38:91:9b:
5c:71:a6:19:82:6e:ab:c2:94:c6:24:ee:27:c0:b4:61:3e:52:
a5:ed:53:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 14:07:12 2024 by rpki-client on console-ams.rpki-client.org