Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/41l1kiBJ4uQhoInGZmh7tQhxPWM.roa
File: 41l1kiBJ4uQhoInGZmh7tQhxPWM.roa (raw, json)
Hash identifier: AzkiaLSDeiF0ObL6P0dm+ULjnzgTP+kCrgE5qwIxX+A=
Subject key identifier: E3:59:75:92:20:49:E2:E4:21:A0:89:C6:66:68:7B:B5:08:71:3D:63
Certificate issuer: /CN=adac830ccaa74783dd961fab241a228d7cc6f808
Certificate serial: 018CC3B74618BA7F881D4353A62249AA315D
Authority key identifier: AD:AC:83:0C:CA:A7:47:83:DD:96:1F:AB:24:1A:22:8D:7C:C6:F8:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rayDDMqnR4Pdlh-rJBoijXzG-Ag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/41l1kiBJ4uQhoInGZmh7tQhxPWM.roa
Signing time: Mon 01 Jan 2024 06:30:17 +0000
ROA not before: Mon 01 Jan 2024 06:30:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47241
IP address blocks: 109.60.128.0/17 maxlen: 24
46.160.0.0/18 maxlen: 24
37.98.160.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/rayDDMqnR4Pdlh-rJBoijXzG-Ag.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/rayDDMqnR4Pdlh-rJBoijXzG-Ag.mft
rsync://rpki.ripe.net/repository/DEFAULT/rayDDMqnR4Pdlh-rJBoijXzG-Ag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:46:18:ba:7f:88:1d:43:53:a6:22:49:aa:31:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adac830ccaa74783dd961fab241a228d7cc6f808
Validity
Not Before: Jan 1 06:30:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e35975922049e2e421a089c666687bb508713d63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:7a:65:c6:a8:9e:58:af:4a:d2:2a:18:a3:a1:
88:6e:2e:fc:46:30:d9:da:ec:b7:b0:b8:0f:82:6d:
bc:48:86:c1:a0:5b:9c:51:1c:01:7a:e4:df:56:cf:
be:c0:c5:60:42:28:b4:b7:42:58:ff:bf:15:f9:87:
64:45:1d:ad:4d:67:77:ef:1e:09:35:fa:04:8c:ba:
02:64:a7:c5:c0:71:35:d6:eb:b8:02:ab:1f:d4:a1:
89:ed:f2:86:8c:fc:56:73:f0:ea:7a:1e:9b:3e:8c:
52:5b:42:f8:f7:33:e1:67:e4:aa:57:c1:3a:43:e3:
2a:b6:26:2e:1f:95:7a:e5:af:ff:2b:14:91:06:9e:
7d:a5:eb:be:a1:10:a2:6e:d9:de:96:02:3a:60:e1:
08:37:40:db:a7:9e:9a:12:7e:1a:8b:88:9e:97:64:
d0:ff:62:93:b0:d3:c4:39:2f:56:65:e3:20:c9:7f:
4a:b2:13:66:11:8b:b4:4a:49:40:44:0d:85:84:68:
28:2c:f4:2d:16:ce:e9:a2:3e:ef:74:0a:40:50:74:
a1:fa:8b:d5:80:69:be:8e:d2:16:b0:2e:74:ae:31:
0a:86:80:bb:12:bf:29:fd:63:fa:ee:75:8b:72:6d:
d9:7a:46:91:d2:7f:6d:f3:93:9d:7e:6e:f1:67:92:
12:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:59:75:92:20:49:E2:E4:21:A0:89:C6:66:68:7B:B5:08:71:3D:63
X509v3 Authority Key Identifier:
keyid:AD:AC:83:0C:CA:A7:47:83:DD:96:1F:AB:24:1A:22:8D:7C:C6:F8:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rayDDMqnR4Pdlh-rJBoijXzG-Ag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/41l1kiBJ4uQhoInGZmh7tQhxPWM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/rayDDMqnR4Pdlh-rJBoijXzG-Ag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.98.160.0/19
46.160.0.0/18
109.60.128.0/17
Signature Algorithm: sha256WithRSAEncryption
43:6f:65:97:c9:d3:f2:35:cc:7a:cc:34:50:05:22:98:1f:46:
69:c7:94:14:33:50:82:12:0f:e4:15:55:7f:73:97:90:30:8f:
96:70:da:a5:b7:c4:94:b8:5b:b7:69:50:c9:ef:78:47:55:d9:
ea:bc:a2:2d:50:b0:d7:f3:d8:05:4b:65:e2:0c:70:4a:f7:4c:
da:f7:2b:bb:c2:07:35:62:3b:07:78:35:46:16:dc:b9:9b:12:
34:86:44:4a:6b:c9:c5:a6:c8:55:c8:87:ee:e7:0f:5a:23:77:
ba:4d:1f:e2:a8:bb:c1:1c:8e:ab:fb:06:60:8f:b6:16:76:56:
f3:5b:e2:24:15:10:e5:e8:fa:b7:59:b1:4b:6d:b3:e1:d8:03:
6f:a7:79:7f:54:4e:a5:bb:cf:2b:ff:fb:2f:ef:7c:42:ec:82:
c0:f0:ef:e5:71:6e:20:3a:b6:aa:c6:68:a2:cb:c2:7d:73:38:
98:a4:e6:8a:aa:39:05:12:42:eb:fa:25:87:86:b8:17:b1:5d:
9c:c0:2d:84:bc:76:c6:f9:05:0c:e2:3c:59:6d:83:bf:b0:b5:
10:b1:54:a9:32:1b:b4:f9:19:47:9a:1e:3a:b0:ff:45:96:c5:
44:45:f3:bf:34:ea:f2:46:28:01:d0:db:ec:a2:57:0c:f8:4d:
78:37:d0:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:49:51 2024 by rpki-client on console-fra.rpki-client.org