Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/07eac7-4d52-46d9-ba44-8945860d5238/1/to-kUhGJS4ZKhLM2KRrxBKdXYlA.roa
File: to-kUhGJS4ZKhLM2KRrxBKdXYlA.roa (raw, json)
Hash identifier: AP+RVUjg0NFBsAZlo/PVPh4TKvotFA7umBU4gDXncwI=
Subject key identifier: B6:8F:A4:52:11:89:4B:86:4A:84:B3:36:29:1A:F1:04:A7:57:62:50
Certificate issuer: /CN=44ceb61e71a619f2314e9d9846ec67bc88a1244c
Certificate serial: 01928EBD6D5E7755E09948CB0D3F451C540D
Authority key identifier: 44:CE:B6:1E:71:A6:19:F2:31:4E:9D:98:46:EC:67:BC:88:A1:24:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RM62HnGmGfIxTp2YRuxnvIihJEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/07eac7-4d52-46d9-ba44-8945860d5238/1/to-kUhGJS4ZKhLM2KRrxBKdXYlA.roa
Signing time: Tue 15 Oct 2024 05:53:51 +0000
ROA not before: Tue 15 Oct 2024 05:53:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 28889
IP address blocks: 80.66.32.0/19 maxlen: 19
85.193.128.0/20 maxlen: 20
85.193.176.0/20 maxlen: 24
185.54.208.0/24 maxlen: 24
185.54.209.0/24 maxlen: 24
2a00:eb40::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/07eac7-4d52-46d9-ba44-8945860d5238/1/RM62HnGmGfIxTp2YRuxnvIihJEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/07eac7-4d52-46d9-ba44-8945860d5238/1/RM62HnGmGfIxTp2YRuxnvIihJEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/RM62HnGmGfIxTp2YRuxnvIihJEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:8e:bd:6d:5e:77:55:e0:99:48:cb:0d:3f:45:1c:54:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44ceb61e71a619f2314e9d9846ec67bc88a1244c
Validity
Not Before: Oct 15 05:53:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b68fa45211894b864a84b336291af104a7576250
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:6d:d6:6a:ba:4a:b4:45:80:73:4e:bf:26:01:
3c:5d:1e:db:c3:1d:c5:33:80:92:3f:3c:3d:a3:c0:
4f:3d:31:27:ab:ea:9f:11:06:c2:2e:60:ea:1a:83:
8e:fc:09:12:4e:3a:a1:c6:3f:54:87:7a:f1:26:01:
14:8e:7f:30:16:43:4d:24:cc:3f:81:a5:c7:94:62:
24:30:0f:e9:42:ae:3c:5d:b2:75:70:f0:63:a1:48:
0f:94:64:bf:fe:f1:56:be:6d:9b:27:26:89:20:21:
ac:12:df:71:07:30:9c:33:52:a6:69:ec:49:1c:53:
24:29:76:a1:a5:9e:29:f6:84:e0:32:57:2f:ec:41:
7b:43:fd:08:af:f4:6a:f4:fa:7d:d8:98:93:53:60:
01:a7:c8:1c:cd:52:ef:64:b5:01:02:e9:df:ae:09:
ed:39:93:6a:fc:6e:df:d1:bf:2c:ff:4a:24:30:d4:
6a:39:89:74:ea:30:52:20:ea:71:c4:2d:8e:7d:d4:
2d:0c:8d:db:ff:bf:ee:f2:ac:f8:37:d6:43:d3:ca:
5e:06:e3:61:bc:16:c2:54:36:a3:7e:55:69:1d:31:
51:fe:5a:1b:f9:43:dd:c5:e8:67:57:b0:c4:ea:4b:
66:1e:96:8a:21:3c:81:ea:32:42:86:c5:b2:b7:1f:
20:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:8F:A4:52:11:89:4B:86:4A:84:B3:36:29:1A:F1:04:A7:57:62:50
X509v3 Authority Key Identifier:
keyid:44:CE:B6:1E:71:A6:19:F2:31:4E:9D:98:46:EC:67:BC:88:A1:24:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RM62HnGmGfIxTp2YRuxnvIihJEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/07eac7-4d52-46d9-ba44-8945860d5238/1/to-kUhGJS4ZKhLM2KRrxBKdXYlA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/07eac7-4d52-46d9-ba44-8945860d5238/1/RM62HnGmGfIxTp2YRuxnvIihJEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.66.32.0/19
85.193.128.0/20
85.193.176.0/20
185.54.208.0/23
IPv6:
2a00:eb40::/32
Signature Algorithm: sha256WithRSAEncryption
7b:c0:cb:5b:22:e2:2c:f8:76:0d:ff:96:79:f1:6f:27:41:17:
4f:1c:03:54:0a:12:12:57:d5:65:36:0a:0d:98:e0:a6:51:07:
fb:96:af:cb:4a:7b:db:ec:e7:99:54:c7:34:1f:74:de:a6:36:
51:a3:ee:32:98:d6:c7:6f:1e:75:98:07:62:62:87:4d:1d:3b:
8d:21:08:03:f4:30:79:f5:37:c8:be:85:54:8d:f1:c6:ed:e5:
41:7b:b4:76:0a:34:63:82:ff:fd:ac:5a:00:4c:1b:f5:99:2f:
e8:d9:6c:ce:0b:de:a3:d1:7f:aa:f9:e5:9f:4a:16:14:a2:97:
7a:d9:21:5e:6d:f1:40:26:07:06:e9:6e:46:a5:f4:d0:2e:a8:
2d:66:b2:e2:c2:87:23:d4:eb:01:9e:b4:a1:01:cc:da:c8:0d:
f2:41:8f:a9:88:48:57:f6:55:61:23:e4:94:0d:06:22:25:e4:
d2:d7:17:d4:e9:3a:f8:90:c4:3a:a2:6d:ba:ad:c3:5a:dd:67:
41:0d:a8:66:39:30:f2:f1:c1:b5:0d:22:f7:be:eb:96:ce:db:
32:5e:14:4b:fe:42:c5:49:fb:12:27:b0:ee:fb:0a:ea:1d:83:
51:e5:57:0d:a8:f0:ad:c0:bd:fc:c2:e5:03:d4:68:0d:84:0d:
ff:ef:43:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 17:12:00 2024 by rpki-client on console-ams.rpki-client.org