Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/k59VZ7iUbFOz5crrzSD9pjaQNjY.roa
File: k59VZ7iUbFOz5crrzSD9pjaQNjY.roa (raw, json)
Hash identifier: CxX4wxYKdJFFjlFMN36+j+G057XbRt2fzUZy/DUn6vA=
Subject key identifier: 93:9F:55:67:B8:94:6C:53:B3:E5:CA:EB:CD:20:FD:A6:36:90:36:36
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 01926C222EAFA20067D98D17FFD82728753E
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/k59VZ7iUbFOz5crrzSD9pjaQNjY.roa
Signing time: Tue 08 Oct 2024 12:37:12 +0000
ROA not before: Tue 08 Oct 2024 12:37:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 36530
IP address blocks: 82.152.142.0/24 maxlen: 24
89.213.104.0/24 maxlen: 24
89.213.123.0/24 maxlen: 24
217.145.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 01:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:6c:22:2e:af:a2:00:67:d9:8d:17:ff:d8:27:28:75:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Oct 8 12:37:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=939f5567b8946c53b3e5caebcd20fda636903636
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:2a:12:bc:d7:92:52:d4:7c:ab:64:b5:10:cf:
60:98:18:26:8d:1e:5b:7c:69:8c:02:ee:cc:48:e8:
7a:fa:0d:fa:ff:1c:7c:14:34:52:53:dd:1b:f1:0a:
80:9a:ef:32:5c:09:18:8f:c6:88:64:9e:31:ec:85:
5d:28:a7:12:b6:f8:d4:b1:56:7c:44:d8:85:1b:a6:
81:a7:24:5d:b6:df:7a:99:38:1a:05:6b:cd:e5:b2:
56:2c:a7:4b:90:9b:57:b1:49:4e:51:3b:81:2e:b8:
14:da:9d:98:c6:bd:07:97:54:c9:ff:1c:3c:89:b4:
95:b4:28:53:c6:53:73:48:0e:a9:51:0e:3b:3a:4f:
cd:29:92:bd:93:10:19:4a:b4:28:43:49:23:29:93:
f4:29:4b:f3:b4:d0:ce:5d:2a:7b:fc:f6:de:7c:e2:
1b:61:ec:bb:cf:64:48:a2:ba:ef:76:22:cb:b3:32:
92:b3:5b:18:8f:19:ec:54:19:54:27:fb:dc:56:57:
4b:0d:c4:a8:34:c4:28:76:56:dc:20:7d:84:d2:90:
35:dc:d5:01:67:c5:e9:09:f5:38:85:55:0d:f5:c9:
50:0e:26:1c:5a:f3:84:ed:27:1e:dd:fd:4d:73:14:
60:c1:34:a5:19:07:18:5e:24:8d:09:1d:49:c8:e3:
79:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:9F:55:67:B8:94:6C:53:B3:E5:CA:EB:CD:20:FD:A6:36:90:36:36
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/k59VZ7iUbFOz5crrzSD9pjaQNjY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.142.0/24
89.213.104.0/24
89.213.123.0/24
217.145.75.0/24
Signature Algorithm: sha256WithRSAEncryption
97:9f:7c:09:88:f4:e6:c0:fd:da:93:cc:30:03:c7:e5:13:d1:
72:45:e7:a4:51:c2:e6:e8:70:ab:9a:6e:94:8d:cb:ee:1d:53:
f3:1d:8b:62:8b:4e:b9:37:aa:1c:04:44:e6:8c:dd:cc:f5:78:
6b:be:72:17:16:df:51:c3:a5:29:bb:56:31:32:c8:3f:cd:06:
d3:f1:05:0c:38:aa:38:bf:cd:b4:6d:45:0d:07:91:d5:06:58:
70:73:b1:30:43:be:66:de:12:40:44:01:c3:9b:8b:6f:d1:5e:
f8:82:9d:42:be:14:d2:f2:42:9a:15:57:8c:70:20:25:ea:40:
eb:46:85:ea:7c:1b:6f:35:a2:73:d2:4a:f1:69:ee:2b:00:d0:
41:8d:43:ab:a7:3f:3f:50:78:41:89:dc:77:ba:86:6c:3d:35:
9d:0e:ca:91:ed:65:ef:df:18:5a:c5:9a:27:8c:41:6a:ea:f7:
b7:30:5b:7a:60:17:39:a8:e5:f6:d1:9f:30:5d:06:30:f6:6e:
e6:d3:1e:45:be:ba:fe:5c:00:6a:7f:77:30:d1:26:24:20:8c:
0a:1c:ad:9a:ce:9a:35:51:0c:36:12:c1:b6:60:b5:f9:5e:38:
78:67:90:e9:a6:2a:b3:9a:b4:d4:97:ea:27:9c:92:73:89:fe:
85:a9:ac:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:54:23 2024 by rpki-client on console-ams.rpki-client.org