Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/1371a6-f5f3-43bf-aff4-7685c9670017/1/K3IvVnYBIJQraqpCWSxPDff2lJg.roa
File: K3IvVnYBIJQraqpCWSxPDff2lJg.roa (raw, json)
Hash identifier: aHEaPhwJEqmTHbaINwzAuSNL0lw14VPpQhK/yZj8uz0=
Subject key identifier: 2B:72:2F:56:76:01:20:94:2B:6A:AA:42:59:2C:4F:0D:F7:F6:94:98
Certificate issuer: /CN=82fa25b2fcb1468114b738928ab20d8761bf8831
Certificate serial: 018CC4933F59FF38BE76FE29AB89C0C9BED7
Authority key identifier: 82:FA:25:B2:FC:B1:46:81:14:B7:38:92:8A:B2:0D:87:61:BF:88:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gvolsvyxRoEUtziSirINh2G_iDE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/1371a6-f5f3-43bf-aff4-7685c9670017/1/K3IvVnYBIJQraqpCWSxPDff2lJg.roa
Signing time: Mon 01 Jan 2024 10:30:33 +0000
ROA not before: Mon 01 Jan 2024 10:30:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25215
IP address blocks: 155.140.82.0/24 maxlen: 24
155.140.83.0/24 maxlen: 24
155.140.91.0/24 maxlen: 24
155.140.90.0/24 maxlen: 24
159.50.174.0/24 maxlen: 24
155.140.102.0/23 maxlen: 24
155.140.104.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/1371a6-f5f3-43bf-aff4-7685c9670017/1/gvolsvyxRoEUtziSirINh2G_iDE.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/1371a6-f5f3-43bf-aff4-7685c9670017/1/gvolsvyxRoEUtziSirINh2G_iDE.mft
rsync://rpki.ripe.net/repository/DEFAULT/gvolsvyxRoEUtziSirINh2G_iDE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 01:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:3f:59:ff:38:be:76:fe:29:ab:89:c0:c9:be:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82fa25b2fcb1468114b738928ab20d8761bf8831
Validity
Not Before: Jan 1 10:30:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2b722f56760120942b6aaa42592c4f0df7f69498
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:0f:a6:99:7a:57:a9:5f:d1:db:db:1b:e2:87:
8f:29:5c:71:0e:9d:a4:39:5b:29:ee:f4:6f:f6:be:
7a:af:00:cc:0c:80:8a:80:9b:5d:e7:a7:8d:27:2c:
75:12:ee:e3:ba:b4:2e:84:d9:51:06:c8:df:0b:9e:
d3:62:e6:4a:1e:e8:7b:3c:8f:2d:a2:05:2e:1c:c9:
de:9d:1b:5d:2d:f1:67:c8:51:ca:e5:a6:19:29:31:
81:f3:4b:68:92:03:be:ad:29:20:e9:78:ba:91:95:
98:8b:2a:1a:1e:c4:e5:b0:32:45:b3:b4:16:41:ff:
3b:d5:6d:e2:3a:14:84:ed:17:95:14:65:38:95:6b:
be:f6:a0:3a:3b:53:c8:0e:7d:18:ca:ca:3a:f1:e2:
a9:90:35:c6:67:d5:a7:da:ee:48:bc:1a:d2:ab:16:
51:02:9c:9c:57:87:b4:0f:27:08:89:ca:cc:ca:80:
b6:7b:72:2d:83:64:17:f1:8f:50:98:0f:80:e0:53:
a9:37:19:81:b1:52:28:5b:1a:57:37:96:16:e5:0f:
f3:58:16:93:40:df:c4:d2:c5:d1:ab:2f:22:12:07:
cd:04:25:26:6b:1a:e8:1a:e9:91:85:8f:bd:ad:3b:
d4:0b:98:3e:c9:44:70:3d:b9:82:e9:52:30:3b:91:
9b:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:72:2F:56:76:01:20:94:2B:6A:AA:42:59:2C:4F:0D:F7:F6:94:98
X509v3 Authority Key Identifier:
keyid:82:FA:25:B2:FC:B1:46:81:14:B7:38:92:8A:B2:0D:87:61:BF:88:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gvolsvyxRoEUtziSirINh2G_iDE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1371a6-f5f3-43bf-aff4-7685c9670017/1/K3IvVnYBIJQraqpCWSxPDff2lJg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1371a6-f5f3-43bf-aff4-7685c9670017/1/gvolsvyxRoEUtziSirINh2G_iDE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.140.82.0/23
155.140.90.0/23
155.140.102.0-155.140.105.255
159.50.174.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:c4:85:f1:89:11:dd:69:e1:8a:21:9c:4d:90:b2:18:ae:90:
1a:41:19:58:43:7c:5c:65:21:00:cc:c8:f5:26:50:7a:4e:bd:
90:f1:b3:75:a8:80:f1:e3:14:88:eb:bf:5e:73:1d:f3:68:7f:
3a:bd:7d:47:c7:1a:80:51:0e:34:4c:7c:e4:37:37:95:6c:3f:
d4:f9:d5:ec:19:91:33:b8:f5:2d:60:f2:e8:7d:8a:3d:71:8a:
ed:a8:c8:ab:10:54:96:b4:0f:5e:3d:20:e9:88:c5:1c:85:30:
8e:66:05:36:58:06:f7:17:ff:f0:27:45:b2:60:8a:39:32:89:
8c:aa:a0:d0:f9:1f:76:8e:11:34:ee:7a:08:7e:34:89:25:cb:
20:46:c4:2d:9c:e9:7b:bb:b4:21:4b:bf:76:0b:39:5e:5b:5a:
d0:40:f0:cb:a3:ae:b8:3b:2d:ea:d6:20:60:49:19:c8:48:68:
b6:28:c4:4a:26:58:a7:85:3d:d5:41:12:e6:a8:79:f8:40:ac:
2d:c3:30:19:8d:11:cc:39:d0:cf:b4:3e:fc:0b:3c:66:4d:45:
f0:10:54:5a:29:82:3d:38:95:b4:8b:45:39:17:68:32:9a:09:
39:b7:21:b0:b8:c0:29:5b:5f:0e:45:bc:46:db:1a:15:fa:ca:
eb:07:22:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:02:26 2024 by rpki-client on console-fra.rpki-client.org