Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/a763ed-beb0-43cb-baa3-95ab81b77691/1/3hXUeytvIahEtQdfexfghv-Wl1Q.roa
File: 3hXUeytvIahEtQdfexfghv-Wl1Q.roa (raw, json)
Hash identifier: zW7VA5I747pahWPM8QlOx6sCqAVvfGv6kc2C+bCKgWk=
Subject key identifier: DE:15:D4:7B:2B:6F:21:A8:44:B5:07:5F:7B:17:E0:86:FF:96:97:54
Certificate issuer: /CN=18e0e9a3d20cfac6cbe3ccf74ab5784a77682933
Certificate serial: 018CC500ACC5F6A49A08B46BC37C8CC781B5
Authority key identifier: 18:E0:E9:A3:D2:0C:FA:C6:CB:E3:CC:F7:4A:B5:78:4A:77:68:29:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GODpo9IM-sbL48z3SrV4SndoKTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/a763ed-beb0-43cb-baa3-95ab81b77691/1/3hXUeytvIahEtQdfexfghv-Wl1Q.roa
Signing time: Mon 01 Jan 2024 12:30:04 +0000
ROA not before: Mon 01 Jan 2024 12:30:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12826
IP address blocks: 185.55.164.0/22 maxlen: 22
91.151.64.0/20 maxlen: 20
91.151.64.0/24 maxlen: 24
91.151.65.0/24 maxlen: 24
91.151.66.0/24 maxlen: 24
91.151.69.0/24 maxlen: 24
91.151.70.0/23 maxlen: 23
91.151.67.0/24 maxlen: 24
91.151.68.0/24 maxlen: 24
91.151.72.0/23 maxlen: 23
91.151.76.0/24 maxlen: 24
91.151.77.0/24 maxlen: 24
91.151.74.0/24 maxlen: 24
2a00:ef60::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/a763ed-beb0-43cb-baa3-95ab81b77691/1/GODpo9IM-sbL48z3SrV4SndoKTM.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/a763ed-beb0-43cb-baa3-95ab81b77691/1/GODpo9IM-sbL48z3SrV4SndoKTM.mft
rsync://rpki.ripe.net/repository/DEFAULT/GODpo9IM-sbL48z3SrV4SndoKTM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 20:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:ac:c5:f6:a4:9a:08:b4:6b:c3:7c:8c:c7:81:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18e0e9a3d20cfac6cbe3ccf74ab5784a77682933
Validity
Not Before: Jan 1 12:30:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=de15d47b2b6f21a844b5075f7b17e086ff969754
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:bc:ca:a2:1f:62:8f:d7:d8:53:16:ee:2b:3e:
a0:a7:36:b9:0a:01:b1:90:09:bb:dd:0f:9e:42:9a:
64:aa:aa:62:19:e2:27:7f:1f:23:f2:0b:2c:55:b2:
e2:94:c4:69:0d:80:2d:e7:c0:7c:09:11:a1:4c:22:
17:a9:b3:63:22:ee:77:4d:47:db:ae:23:65:4d:f3:
6b:28:43:15:84:d1:ff:0c:9a:7e:7f:17:a5:c1:d8:
a4:87:cd:a1:34:fc:cb:ce:d1:75:ea:05:40:e7:06:
11:f4:d3:34:45:ea:d6:1c:ef:23:84:a8:c9:6b:95:
15:5f:c6:a9:4c:ab:7f:f9:e0:88:77:a5:8f:1f:18:
04:19:bc:d0:76:ca:c2:66:ad:d3:b0:33:9b:b6:b2:
38:08:02:f4:36:e1:c9:85:43:24:71:a6:61:2e:15:
73:e1:44:06:94:08:28:c5:3d:d4:15:11:68:be:24:
18:e1:ca:0a:c0:d9:a2:2e:a6:51:72:10:6b:3f:75:
41:3c:2e:dd:5c:99:a9:2e:48:38:8e:c0:f5:09:ba:
1f:42:26:8a:97:27:85:4a:3b:98:a6:6a:ba:8b:5a:
04:0c:45:95:78:29:22:70:b9:57:fa:f8:6a:d5:9c:
60:85:6b:41:d3:77:b8:f3:48:ca:fa:9f:49:54:c7:
a7:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:15:D4:7B:2B:6F:21:A8:44:B5:07:5F:7B:17:E0:86:FF:96:97:54
X509v3 Authority Key Identifier:
keyid:18:E0:E9:A3:D2:0C:FA:C6:CB:E3:CC:F7:4A:B5:78:4A:77:68:29:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GODpo9IM-sbL48z3SrV4SndoKTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/a763ed-beb0-43cb-baa3-95ab81b77691/1/3hXUeytvIahEtQdfexfghv-Wl1Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/a763ed-beb0-43cb-baa3-95ab81b77691/1/GODpo9IM-sbL48z3SrV4SndoKTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.151.64.0/20
185.55.164.0/22
IPv6:
2a00:ef60::/32
Signature Algorithm: sha256WithRSAEncryption
a0:b1:1e:6b:c7:b1:2a:1f:ef:c5:1e:c7:de:60:13:e5:75:47:
d8:76:48:e0:b0:8b:ae:aa:69:56:14:77:11:2b:e6:62:5e:bc:
43:12:ee:24:05:3f:73:df:17:c2:f6:fe:d8:bb:a5:10:ee:29:
84:bf:9e:41:a8:fd:30:60:71:5c:37:d6:69:b0:27:75:93:d3:
be:48:be:78:ef:a9:9e:57:e7:b1:a9:24:84:06:f7:61:9b:b2:
82:a5:7c:28:10:31:cc:28:95:ee:67:41:91:25:85:7a:7a:8d:
45:60:8f:50:43:34:7d:bd:b5:9a:3c:19:c7:96:c9:8c:f5:2d:
74:18:18:4b:b6:dd:f3:54:28:07:dc:1b:74:e6:71:63:a9:a9:
03:6b:77:21:cc:97:30:49:b5:2a:64:08:57:e1:26:5b:f4:25:
48:69:47:55:af:37:98:91:11:c7:6c:6d:9b:de:84:e4:39:e9:
b7:e6:4a:3f:b3:fb:b1:4f:82:a6:c4:8f:36:1d:13:2c:66:3c:
8e:34:86:c7:e4:70:1c:ea:92:3c:6b:15:1e:5b:6d:5f:df:ff:
73:fa:43:77:49:8c:dd:f1:e0:55:5d:d8:a1:f2:12:22:0c:d4:
4f:88:f5:57:0d:74:0e:a1:cd:27:4d:b1:61:4f:46:3e:a8:ee:
19:11:23:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 22:41:17 2024 by rpki-client on console-fra.rpki-client.org