Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/d07c07-b962-4f4b-a3a0-b51b35def6de/1/9bhI8g2M1shvKcy_IOoHpaYqQ_c.roa
File: 9bhI8g2M1shvKcy_IOoHpaYqQ_c.roa (raw, json)
Hash identifier: ZaQi+C49hS3IE5yFsoTFOwg42wrEIOALwh1YHtOtY+8=
Subject key identifier: F5:B8:48:F2:0D:8C:D6:C8:6F:29:CC:BF:20:EA:07:A5:A6:2A:43:F7
Certificate issuer: /CN=fbed9439a4e4b2d32e4bee647f3b61055b169e3d
Certificate serial: 018CC4937AAB88F8E53C609325B0357627D9
Authority key identifier: FB:ED:94:39:A4:E4:B2:D3:2E:4B:EE:64:7F:3B:61:05:5B:16:9E:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1--2UOaTkstMuS-5kfzthBVsWnj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/d07c07-b962-4f4b-a3a0-b51b35def6de/1/9bhI8g2M1shvKcy_IOoHpaYqQ_c.roa
Signing time: Mon 01 Jan 2024 10:30:48 +0000
ROA not before: Mon 01 Jan 2024 10:30:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39832
IP address blocks: 91.203.96.0/22 maxlen: 24
141.0.8.0/21 maxlen: 24
195.189.142.0/23 maxlen: 24
82.145.208.0/20 maxlen: 24
185.26.180.0/22 maxlen: 24
37.228.104.0/21 maxlen: 24
2001:4c28::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/d07c07-b962-4f4b-a3a0-b51b35def6de/1/1--2UOaTkstMuS-5kfzthBVsWnj0.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/d07c07-b962-4f4b-a3a0-b51b35def6de/1/1--2UOaTkstMuS-5kfzthBVsWnj0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1--2UOaTkstMuS-5kfzthBVsWnj0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 May 2024 18:17:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:7a:ab:88:f8:e5:3c:60:93:25:b0:35:76:27:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbed9439a4e4b2d32e4bee647f3b61055b169e3d
Validity
Not Before: Jan 1 10:30:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f5b848f20d8cd6c86f29ccbf20ea07a5a62a43f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:59:f9:48:a3:7d:21:a6:9c:6a:12:60:3b:8c:
51:f8:40:40:24:f9:76:25:a7:24:aa:03:19:4b:b6:
e2:3b:66:9a:83:19:80:67:db:56:2c:f4:7c:f8:58:
b6:22:b2:87:c2:70:6e:0a:f2:82:64:da:72:e7:1f:
8c:16:76:bf:da:69:9f:f9:17:6f:95:65:6e:09:3c:
2f:fb:ef:57:6b:76:2f:ef:f5:53:5a:5a:3d:c7:8e:
a7:ff:3f:fa:10:b6:f6:1d:8d:53:a9:c6:6a:58:90:
68:1f:8d:7b:5f:36:5a:f8:36:dd:81:eb:7b:bb:cb:
5c:d2:12:6d:16:2e:1b:82:04:5b:90:9b:a7:f8:69:
50:99:1e:9f:85:5d:b5:72:cd:10:8e:67:0f:18:14:
0f:6e:30:34:9c:df:bb:c3:a9:82:4d:17:f9:7b:23:
94:61:aa:f1:06:57:83:98:49:25:7f:27:99:1e:6c:
0c:8c:87:18:95:05:af:5f:34:e8:ab:0b:3f:97:11:
ff:0d:74:6f:4d:77:2d:c5:b8:4c:fe:e1:6d:21:e2:
f4:2e:b3:59:10:bb:15:68:13:f8:be:41:88:23:16:
1c:89:ee:a7:a9:bb:0e:21:6f:7b:22:a2:11:9e:40:
20:e9:8b:6e:63:b7:1d:48:70:8d:da:6b:2c:05:0c:
dd:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:B8:48:F2:0D:8C:D6:C8:6F:29:CC:BF:20:EA:07:A5:A6:2A:43:F7
X509v3 Authority Key Identifier:
keyid:FB:ED:94:39:A4:E4:B2:D3:2E:4B:EE:64:7F:3B:61:05:5B:16:9E:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1--2UOaTkstMuS-5kfzthBVsWnj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/d07c07-b962-4f4b-a3a0-b51b35def6de/1/9bhI8g2M1shvKcy_IOoHpaYqQ_c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/d07c07-b962-4f4b-a3a0-b51b35def6de/1/1--2UOaTkstMuS-5kfzthBVsWnj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.228.104.0/21
82.145.208.0/20
91.203.96.0/22
141.0.8.0/21
185.26.180.0/22
195.189.142.0/23
IPv6:
2001:4c28::/32
Signature Algorithm: sha256WithRSAEncryption
0c:e6:15:6b:58:75:f8:69:4e:fb:46:98:7f:23:e4:23:a2:95:
51:1e:9e:c2:c5:7d:d8:8b:42:2c:2f:8e:cd:f2:19:d4:ac:9a:
f0:36:df:d8:4c:38:e8:02:e4:f3:71:a7:f7:8b:8d:ff:3f:3c:
16:2f:19:fa:e0:75:b9:02:93:52:19:84:c1:12:87:53:75:8d:
d8:12:0d:e1:fc:06:2b:e8:c1:52:82:4c:b4:c2:97:73:dc:d0:
08:10:c8:e1:91:33:96:01:78:33:6e:43:7d:64:09:86:98:f2:
ec:a4:99:b9:2c:95:a5:59:de:69:d8:d0:25:2f:34:54:d6:dc:
77:e0:43:d7:80:96:09:26:61:35:0e:de:db:74:b6:e7:74:8b:
7e:12:7b:38:09:c5:b2:a3:61:fb:d2:61:23:ce:dc:5e:11:a2:
6b:73:22:b1:9d:ef:a4:89:99:b6:fa:15:27:15:b1:45:c3:ae:
7f:1c:c6:a1:96:96:4d:8c:14:04:f5:24:5c:32:1e:18:89:d4:
84:0e:7f:02:05:13:be:d5:49:5f:78:28:14:9f:e1:2e:fd:5e:
5a:2b:51:c7:ba:8d:48:e2:32:be:fb:34:41:60:d9:ee:29:ae:
9d:aa:4f:9f:13:08:3a:df:db:37:a2:a3:cb:5e:d7:cf:65:0e:
3b:ad:f0:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 26 00:20:02 2024 by rpki-client on console-ams.rpki-client.org