Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/da7658-fe5d-4f5a-862c-b56ab282b1c7/1/CmmqPCZxggP6dOwojAkHpa9tDAw.roa
File: CmmqPCZxggP6dOwojAkHpa9tDAw.roa (raw, json)
Hash identifier: HGjZvY2/Nu4IEB4wb5CCCN1MtX2Az1cVjJx3jBB91tU=
Subject key identifier: 0A:69:AA:3C:26:71:82:03:FA:74:EC:28:8C:09:07:A5:AF:6D:0C:0C
Certificate issuer: /CN=fbcb947651260d9d8b02f31d5bc7f1d5d0b01780
Certificate serial: 018CC7262053148B825586728B45E8977D1B
Authority key identifier: FB:CB:94:76:51:26:0D:9D:8B:02:F3:1D:5B:C7:F1:D5:D0:B0:17:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-8uUdlEmDZ2LAvMdW8fx1dCwF4A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/da7658-fe5d-4f5a-862c-b56ab282b1c7/1/CmmqPCZxggP6dOwojAkHpa9tDAw.roa
Signing time: Mon 01 Jan 2024 22:30:13 +0000
ROA not before: Mon 01 Jan 2024 22:30:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49784
IP address blocks: 185.28.224.0/22 maxlen: 24
157.97.48.0/20 maxlen: 24
46.244.48.0/20 maxlen: 24
213.109.112.0/20 maxlen: 24
91.239.174.0/23 maxlen: 24
91.236.202.0/23 maxlen: 24
2a04:3640::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/da7658-fe5d-4f5a-862c-b56ab282b1c7/1/1-8uUdlEmDZ2LAvMdW8fx1dCwF4A.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/da7658-fe5d-4f5a-862c-b56ab282b1c7/1/1-8uUdlEmDZ2LAvMdW8fx1dCwF4A.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-8uUdlEmDZ2LAvMdW8fx1dCwF4A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:26:20:53:14:8b:82:55:86:72:8b:45:e8:97:7d:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbcb947651260d9d8b02f31d5bc7f1d5d0b01780
Validity
Not Before: Jan 1 22:30:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0a69aa3c26718203fa74ec288c0907a5af6d0c0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:00:9b:8d:59:a5:af:0f:dc:34:53:4f:84:ba:
9a:e4:2b:1c:b9:dd:60:4c:85:9d:07:2e:78:98:ad:
dc:92:f2:b7:68:e6:f1:a6:84:91:a2:dc:e2:48:8c:
af:ea:ce:0f:2f:20:66:9b:f8:78:00:33:23:d6:7b:
00:85:6d:df:ce:26:84:f5:f5:7b:7c:c9:4e:cc:44:
d9:e4:75:39:de:10:7c:bc:d0:2b:dd:d9:96:61:20:
a0:ef:e6:d9:cb:d1:27:0d:ca:2f:27:ec:33:43:76:
7f:5d:8d:10:a3:d4:89:f7:2f:0a:59:1f:e0:ef:c9:
c4:9d:3e:94:19:da:12:53:98:64:4d:1e:b8:90:73:
7e:a1:59:a1:36:a4:58:a1:7e:89:f3:5b:53:ea:42:
24:d4:37:47:8d:8d:00:98:8d:ec:26:a1:2b:df:5f:
e5:ea:c6:44:b2:4f:e1:fb:85:94:b3:ca:b0:99:ed:
f2:c8:69:82:31:84:ab:85:01:d3:d4:66:87:7e:85:
e5:c1:fc:49:89:55:8f:bc:15:5a:70:68:06:1e:6f:
a9:9b:9b:cd:51:94:65:c5:29:32:94:fb:65:fe:ed:
03:23:49:79:5e:08:87:71:00:4a:72:ab:9c:15:78:
7c:74:5c:89:4c:31:82:da:2b:71:95:d2:fd:96:09:
be:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:69:AA:3C:26:71:82:03:FA:74:EC:28:8C:09:07:A5:AF:6D:0C:0C
X509v3 Authority Key Identifier:
keyid:FB:CB:94:76:51:26:0D:9D:8B:02:F3:1D:5B:C7:F1:D5:D0:B0:17:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-8uUdlEmDZ2LAvMdW8fx1dCwF4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/da7658-fe5d-4f5a-862c-b56ab282b1c7/1/CmmqPCZxggP6dOwojAkHpa9tDAw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/da7658-fe5d-4f5a-862c-b56ab282b1c7/1/1-8uUdlEmDZ2LAvMdW8fx1dCwF4A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.244.48.0/20
91.236.202.0/23
91.239.174.0/23
157.97.48.0/20
185.28.224.0/22
213.109.112.0/20
IPv6:
2a04:3640::/29
Signature Algorithm: sha256WithRSAEncryption
77:93:68:f0:51:90:10:4d:a0:25:86:49:47:10:7b:aa:cc:04:
e6:8a:e8:0a:40:dd:63:25:93:cc:13:b5:05:d1:aa:2d:d2:34:
80:d6:48:70:11:88:e6:8b:b8:91:36:9d:ad:94:07:05:4b:85:
4b:62:e1:13:9d:52:4f:44:7f:5c:50:0c:00:7d:cc:f6:41:12:
d9:3c:c0:94:d9:b3:32:cf:d7:d5:ff:dd:66:10:77:46:38:79:
fd:88:aa:b2:39:b8:70:4d:c1:5b:06:84:d8:69:07:03:ae:71:
26:86:36:8a:a5:58:2c:da:13:59:2d:0d:40:ed:ab:10:41:d2:
d1:37:1b:5a:64:22:00:3f:b9:0c:cc:58:53:db:2a:27:0d:12:
c0:fa:44:d7:fb:c4:bc:8b:91:f4:3d:0d:82:55:34:ae:59:51:
05:77:0c:90:30:9b:ad:a3:3f:ef:ff:a6:ea:3a:77:51:1e:9c:
33:77:04:bb:cc:6d:49:ab:ae:64:21:7e:e5:87:71:91:f9:71:
38:5d:92:9c:14:1a:a9:7d:35:98:e3:6e:ae:8f:63:5b:37:39:
d6:d9:c6:bc:ac:35:8f:c6:51:c5:1e:3d:da:1d:36:4a:a1:dc:
19:35:57:f2:4c:e9:85:ac:4c:66:93:00:61:50:b3:fd:70:48:
73:26:2f:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 14:53:12 2024 by rpki-client on console-ams.rpki-client.org