Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/c37c16-0603-4845-b4d4-95ddb0974e4b/1/RPm0NONgd8VqUTk5UfKgaJxjz9s.roa
File: RPm0NONgd8VqUTk5UfKgaJxjz9s.roa (raw, json)
Hash identifier: KHAeG0lg/rP1k5auSyBX2vz1EIX3wQlG0VET6jY+RcM=
Subject key identifier: 44:F9:B4:34:E3:60:77:C5:6A:51:39:39:51:F2:A0:68:9C:63:CF:DB
Certificate issuer: /CN=841f36fcbf7334eff6b91e80297ea5b25c4ecfd2
Certificate serial: 01932EC6A3337C0C5879A3E397B4FF4B01AA
Authority key identifier: 84:1F:36:FC:BF:73:34:EF:F6:B9:1E:80:29:7E:A5:B2:5C:4E:CF:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hB82_L9zNO_2uR6AKX6lslxOz9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/c37c16-0603-4845-b4d4-95ddb0974e4b/1/RPm0NONgd8VqUTk5UfKgaJxjz9s.roa
Signing time: Fri 15 Nov 2024 07:43:09 +0000
ROA not before: Fri 15 Nov 2024 07:43:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 52013
IP address blocks: 46.183.224.0/21 maxlen: 24
185.106.135.0/24 maxlen: 24
188.94.4.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/c37c16-0603-4845-b4d4-95ddb0974e4b/1/hB82_L9zNO_2uR6AKX6lslxOz9I.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/c37c16-0603-4845-b4d4-95ddb0974e4b/1/hB82_L9zNO_2uR6AKX6lslxOz9I.mft
rsync://rpki.ripe.net/repository/DEFAULT/hB82_L9zNO_2uR6AKX6lslxOz9I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 23:23:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:2e:c6:a3:33:7c:0c:58:79:a3:e3:97:b4:ff:4b:01:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=841f36fcbf7334eff6b91e80297ea5b25c4ecfd2
Validity
Not Before: Nov 15 07:43:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=44f9b434e36077c56a51393951f2a0689c63cfdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:20:53:8e:cf:ee:32:01:75:7f:ca:58:44:a2:
ce:2e:99:6c:d0:9e:59:fb:dd:b8:82:1f:70:7b:3d:
13:45:f0:c5:1b:51:a0:15:76:c2:4f:f8:80:3c:6b:
51:22:ec:9c:23:c8:42:b5:cc:18:01:be:c6:98:0e:
53:9c:a0:d2:e1:c1:3f:65:f2:90:96:af:bd:cc:4d:
9f:f6:27:e5:0b:9b:50:dc:2e:2d:8d:e3:1b:45:34:
cf:2a:a5:3b:ca:8b:2f:f2:d4:83:b3:b6:7a:75:78:
03:24:d5:40:35:0f:ca:e2:72:09:95:02:86:65:f0:
16:f2:d5:0b:ea:69:0c:20:15:64:a1:ae:b1:0e:57:
04:2a:d2:6b:53:a7:16:9a:0d:ba:e7:dc:86:94:f7:
e1:bc:82:b8:f7:8e:46:a5:b1:a0:c0:d3:29:94:02:
b8:aa:f4:ea:1a:15:1c:72:fa:3e:26:ee:7a:8d:88:
b7:d4:9b:ee:7b:11:fd:e0:b4:d1:aa:10:03:e3:83:
ce:2b:75:fe:b3:2c:dc:b2:45:3d:10:d5:a8:56:08:
eb:ac:87:4c:66:3e:33:fc:ca:ea:97:ec:26:fc:0f:
c9:37:5c:56:e3:02:a3:d9:36:c7:ec:01:64:c2:c9:
aa:92:8a:cb:14:5b:67:ac:42:16:65:98:ce:67:35:
31:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:F9:B4:34:E3:60:77:C5:6A:51:39:39:51:F2:A0:68:9C:63:CF:DB
X509v3 Authority Key Identifier:
keyid:84:1F:36:FC:BF:73:34:EF:F6:B9:1E:80:29:7E:A5:B2:5C:4E:CF:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hB82_L9zNO_2uR6AKX6lslxOz9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/c37c16-0603-4845-b4d4-95ddb0974e4b/1/RPm0NONgd8VqUTk5UfKgaJxjz9s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/c37c16-0603-4845-b4d4-95ddb0974e4b/1/hB82_L9zNO_2uR6AKX6lslxOz9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.183.224.0/21
185.106.135.0/24
188.94.4.0/22
Signature Algorithm: sha256WithRSAEncryption
61:17:97:4a:4b:e2:cc:a1:f4:37:82:e6:62:7c:2e:3c:64:73:
6a:6f:08:81:3e:8d:4d:0f:b1:4b:96:da:b4:53:87:f8:58:2b:
fe:4c:c9:28:ec:c3:cc:e2:31:f1:17:b6:b3:b6:b4:52:50:ab:
34:a8:34:45:30:4c:8c:3b:2f:cc:5b:6e:59:ae:01:2b:19:6d:
21:9a:d9:8d:2a:f7:3c:d4:14:24:50:4c:c2:d1:61:2d:41:ec:
84:88:6d:75:28:fa:e2:eb:6d:f9:bc:6d:f5:3a:3d:4c:11:77:
41:6f:16:c4:c1:46:70:27:7a:9f:2a:fe:c9:ce:c9:15:7f:15:
a9:da:e7:90:49:f0:d0:b1:c4:14:80:22:0d:9f:47:b7:a0:ef:
23:df:5d:51:3b:f8:6b:b8:5d:61:74:f7:d9:8d:b1:0c:2b:84:
63:a2:b8:d3:e8:e6:5d:44:c2:98:61:36:c1:dc:bb:e1:14:ac:
b7:2e:52:74:49:ea:64:76:10:6b:be:38:95:5b:5e:e0:a8:91:
e9:11:96:44:fc:b0:52:6c:c6:00:bc:0a:d1:2b:47:5d:dd:1a:
d9:ae:43:41:b9:6c:35:9b:eb:17:28:9b:be:54:3d:1d:5a:e1:
6d:63:95:06:59:18:00:f6:aa:38:18:0e:75:31:d4:14:9a:c5:
e6:6f:d0:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 05:35:57 2024 by rpki-client on console-ams.rpki-client.org