Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/bBX9W9vffFA1CKzckOpDnbV22Ts.roa
File: bBX9W9vffFA1CKzckOpDnbV22Ts.roa (raw, json)
Hash identifier: QOnOfko0+25LERw4Rnf/RxE+1IxCn+Oh6NKjSejTDAs=
Subject key identifier: 6C:15:FD:5B:DB:DF:7C:50:35:08:AC:DC:90:EA:43:9D:B5:76:D9:3B
Certificate issuer: /CN=adac830ccaa74783dd961fab241a228d7cc6f808
Certificate serial: 018CC3B74823FB328B9B064516D6B6019A2F
Authority key identifier: AD:AC:83:0C:CA:A7:47:83:DD:96:1F:AB:24:1A:22:8D:7C:C6:F8:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rayDDMqnR4Pdlh-rJBoijXzG-Ag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/bBX9W9vffFA1CKzckOpDnbV22Ts.roa
Signing time: Mon 01 Jan 2024 06:30:17 +0000
ROA not before: Mon 01 Jan 2024 06:30:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 196797
IP address blocks: 91.222.28.0/22 maxlen: 32
94.125.88.0/21 maxlen: 32
81.30.48.0/20 maxlen: 32
193.151.24.0/22 maxlen: 32
176.115.88.0/21 maxlen: 32
109.233.168.0/22 maxlen: 32
164.138.32.0/21 maxlen: 32
195.69.236.0/22 maxlen: 32
195.69.168.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/rayDDMqnR4Pdlh-rJBoijXzG-Ag.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/rayDDMqnR4Pdlh-rJBoijXzG-Ag.mft
rsync://rpki.ripe.net/repository/DEFAULT/rayDDMqnR4Pdlh-rJBoijXzG-Ag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:48:23:fb:32:8b:9b:06:45:16:d6:b6:01:9a:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adac830ccaa74783dd961fab241a228d7cc6f808
Validity
Not Before: Jan 1 06:30:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6c15fd5bdbdf7c503508acdc90ea439db576d93b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:8c:8b:c7:fc:8d:ef:d3:a8:fe:de:a3:93:c9:
cc:b1:42:ac:1a:dd:77:82:c6:82:1c:3a:1b:42:9b:
ff:36:09:9a:c1:be:f5:e2:bc:b3:4e:41:01:8b:83:
f3:3e:38:05:6c:62:24:32:28:5a:16:ee:c5:bc:f7:
cb:74:e2:8c:ee:a6:5b:b0:b6:3c:49:d2:da:d2:ca:
4d:7b:e6:7b:6e:22:e2:11:4e:a8:46:86:92:49:37:
96:20:35:97:bd:57:7d:a2:1d:80:e6:96:54:9d:c1:
9c:b6:a2:5a:99:6b:a2:56:f2:09:ad:09:bc:db:c4:
c6:d1:93:29:d7:68:07:8e:84:62:25:c2:5a:e8:f7:
05:f7:4e:b4:df:f4:8b:57:2e:ae:23:25:1b:aa:59:
51:f5:bf:a8:c2:e4:32:31:c2:1f:01:4e:08:c2:83:
7a:95:2b:5b:ec:c6:7e:d2:c8:6f:ee:01:50:3b:76:
61:91:82:30:5a:2f:54:7b:f9:de:96:ee:e3:74:b7:
f6:c8:0b:2e:89:51:8d:6d:93:91:60:d3:46:5e:47:
64:27:5d:d8:67:20:86:5e:98:ac:29:ea:50:8b:ef:
ce:cf:2a:50:e9:f6:33:02:2d:7c:4a:40:a1:95:1f:
34:ee:6e:f5:64:7c:25:54:39:33:64:a3:2a:c9:3e:
64:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:15:FD:5B:DB:DF:7C:50:35:08:AC:DC:90:EA:43:9D:B5:76:D9:3B
X509v3 Authority Key Identifier:
keyid:AD:AC:83:0C:CA:A7:47:83:DD:96:1F:AB:24:1A:22:8D:7C:C6:F8:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rayDDMqnR4Pdlh-rJBoijXzG-Ag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/bBX9W9vffFA1CKzckOpDnbV22Ts.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/rayDDMqnR4Pdlh-rJBoijXzG-Ag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.30.48.0/20
91.222.28.0/22
94.125.88.0/21
109.233.168.0/22
164.138.32.0/21
176.115.88.0/21
193.151.24.0/22
195.69.168.0/22
195.69.236.0/22
Signature Algorithm: sha256WithRSAEncryption
b0:22:41:66:4a:55:f6:55:f7:31:77:09:6f:ed:b1:cc:3d:90:
4e:4b:0a:7b:58:4b:eb:8b:ab:7e:4f:c2:c3:4a:41:08:1e:55:
88:c8:7a:3b:34:5d:ff:cf:30:bb:ca:1f:82:4d:c5:cd:0b:7a:
1e:3e:9f:2e:d8:b1:89:b4:cf:fc:ed:21:98:3b:73:4a:aa:2b:
de:1f:fb:7c:45:6e:67:dd:b8:98:73:96:1b:20:2f:0e:36:48:
84:96:02:99:47:50:b8:30:8e:88:1e:4a:b3:f5:eb:3a:71:10:
c5:ba:f1:35:5c:30:c7:11:5a:a0:0b:77:23:05:14:77:f4:96:
af:b6:4b:e8:6e:fa:56:42:18:88:8e:e0:f4:f1:bb:eb:bc:22:
21:51:d9:5b:f0:32:f7:32:00:5e:16:fa:49:c3:82:01:1d:25:
98:d2:4e:ae:ab:b5:ad:8c:01:3b:ea:15:40:b2:56:68:99:83:
d1:60:fc:dd:dc:11:16:e6:9c:7a:4b:88:90:21:fb:16:01:06:
55:61:5c:80:82:ae:9d:7b:ff:57:eb:23:a7:61:99:cc:0e:2b:
e0:f5:8d:56:5c:f2:7f:62:03:0d:a7:1f:bf:14:da:30:bc:42:
1b:22:46:a6:2d:bb:e0:6f:07:8f:72:66:19:3d:e5:3a:1f:70:
49:c0:ce:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:02:09 2024 by rpki-client on console-fra.rpki-client.org