Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/aV0tCnC7CF48Lx9w0zGHUA7v81I.roa
File: aV0tCnC7CF48Lx9w0zGHUA7v81I.roa (raw, json)
Hash identifier: NJGKHcyDAo58ay+/ebMBUXOfxYw2f98uud4IRub30rg=
Subject key identifier: 69:5D:2D:0A:70:BB:08:5E:3C:2F:1F:70:D3:31:87:50:0E:EF:F3:52
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019349C420790A28B7379989BEC167B6290D
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/aV0tCnC7CF48Lx9w0zGHUA7v81I.roa
Signing time: Wed 20 Nov 2024 13:30:10 +0000
ROA not before: Wed 20 Nov 2024 13:30:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20473
IP address blocks: 81.5.189.0/24 maxlen: 24
81.168.122.0/24 maxlen: 24
82.152.131.0/24 maxlen: 24
82.152.176.0/24 maxlen: 24
89.213.143.0/24 maxlen: 24
89.213.152.0/24 maxlen: 24
89.213.176.0/24 maxlen: 24
89.213.183.0/24 maxlen: 24
89.213.212.0/24 maxlen: 24
109.176.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 16:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:49:c4:20:79:0a:28:b7:37:99:89:be:c1:67:b6:29:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Nov 20 13:30:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=695d2d0a70bb085e3c2f1f70d33187500eeff352
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e2:63:93:75:9a:44:08:25:80:d8:36:6f:96:
0f:3b:73:25:60:88:95:9f:4c:2c:7d:20:d3:1c:7d:
dd:f7:45:88:12:c9:03:e8:28:5a:ca:a7:f0:06:a3:
dd:4b:da:75:4a:7c:cc:31:09:bf:38:cd:65:2b:6e:
0b:de:9b:50:ae:20:11:47:4c:58:6b:0b:84:c4:ad:
14:ba:03:17:68:ee:f3:51:5f:7a:23:5f:d7:9e:ea:
15:d0:8c:cf:44:c2:2e:67:35:7c:f5:f3:1a:1e:45:
10:37:51:c7:f1:4c:81:26:63:a6:5e:f4:2f:cb:55:
c0:c4:aa:be:70:8c:e0:01:71:32:88:a2:d4:18:2b:
64:84:db:38:e6:b5:ee:3d:7d:e6:50:66:46:9e:fc:
d8:e3:19:0a:1f:f1:08:db:a7:bf:90:99:2c:8a:8a:
7f:b5:e3:9d:e0:0a:d1:92:3e:63:89:80:6b:09:3e:
fd:60:6d:95:5a:9e:2e:22:23:ad:01:28:22:af:16:
5f:db:54:5a:ae:64:98:d8:87:58:a5:23:77:75:a7:
e5:49:0d:43:b8:12:b5:8a:34:97:9f:a7:e1:36:30:
1c:cb:5f:b9:41:88:07:a8:29:3d:92:20:a8:fb:68:
8f:48:0e:4f:db:e5:32:74:4e:c5:0e:0e:e4:9f:e1:
98:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:5D:2D:0A:70:BB:08:5E:3C:2F:1F:70:D3:31:87:50:0E:EF:F3:52
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/aV0tCnC7CF48Lx9w0zGHUA7v81I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.5.189.0/24
81.168.122.0/24
82.152.131.0/24
82.152.176.0/24
89.213.143.0/24
89.213.152.0/24
89.213.176.0/24
89.213.183.0/24
89.213.212.0/24
109.176.230.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:13:e8:7a:0f:5d:fe:6e:42:25:f8:fb:a4:58:83:9a:d8:81:
7e:7a:53:20:36:be:a6:a4:6e:6c:7a:5a:79:ef:70:ec:41:ae:
b7:10:44:7f:8e:7a:89:b7:90:ec:da:ca:65:91:d9:1f:a7:84:
e5:82:2b:0b:e7:4a:ec:8b:c8:bc:5d:67:d1:4b:e6:a1:30:9e:
66:06:14:45:7d:a6:d5:c9:f6:8d:cf:db:eb:bf:3d:24:44:ea:
30:e2:a4:c2:01:13:1b:22:bd:fe:be:2a:ee:47:db:5c:00:64:
bc:fe:1b:de:df:ef:69:d2:38:dd:42:b8:cf:fc:c4:29:98:be:
48:f2:53:dc:49:f8:52:29:5b:04:7c:76:97:6d:d6:5e:06:d5:
dd:ed:b5:b8:d7:64:01:73:76:92:19:9d:5b:db:4c:93:93:44:
94:57:28:f6:33:76:b4:08:34:22:ea:dc:38:68:3a:f7:43:87:
5a:40:00:d1:1f:bc:d2:67:8e:ff:7f:fb:71:f1:48:48:1f:76:
8a:60:5f:53:f4:cf:d6:95:13:db:2a:7d:c0:9d:62:a0:67:59:
43:1b:33:35:4f:84:e0:92:67:63:0e:10:62:13:b6:0d:14:a0:
ca:3f:e1:80:43:d2:60:78:06:71:2f:42:4f:82:95:43:58:48:
d8:90:e2:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:17:29 2024 by rpki-client on console-ams.rpki-client.org