Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/243b53-4b94-4244-a8ec-7c549f1ed16c/1/4-125kC2uzYSfwwO8Urc7JMuMlc.roa
File: 4-125kC2uzYSfwwO8Urc7JMuMlc.roa (raw, json)
Hash identifier: +gVzcY1AAwZyywrrhqorL91UFb/kqt0qVUexZAZQlB8=
Subject key identifier: E3:ED:76:E6:40:B6:BB:36:12:7F:0C:0E:F1:4A:DC:EC:93:2E:32:57
Certificate issuer: /CN=bca0ec59564324237420d506b9b498d752ee2168
Certificate serial: 018CC94CC2E5C0A2E19437CDBE274816C4F3
Authority key identifier: BC:A0:EC:59:56:43:24:23:74:20:D5:06:B9:B4:98:D7:52:EE:21:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vKDsWVZDJCN0INUGubSY11LuIWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/243b53-4b94-4244-a8ec-7c549f1ed16c/1/4-125kC2uzYSfwwO8Urc7JMuMlc.roa
Signing time: Tue 02 Jan 2024 08:31:40 +0000
ROA not before: Tue 02 Jan 2024 08:31:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29169
IP address blocks: 46.226.104.0/21 maxlen: 32
213.167.228.0/22 maxlen: 24
217.70.176.0/20 maxlen: 32
185.26.124.0/22 maxlen: 32
213.167.240.0/20 maxlen: 24
2001:4b98::/31 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/243b53-4b94-4244-a8ec-7c549f1ed16c/1/vKDsWVZDJCN0INUGubSY11LuIWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/243b53-4b94-4244-a8ec-7c549f1ed16c/1/vKDsWVZDJCN0INUGubSY11LuIWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/vKDsWVZDJCN0INUGubSY11LuIWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4c:c2:e5:c0:a2:e1:94:37:cd:be:27:48:16:c4:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bca0ec59564324237420d506b9b498d752ee2168
Validity
Not Before: Jan 2 08:31:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e3ed76e640b6bb36127f0c0ef14adcec932e3257
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:b0:d4:a6:96:c6:1f:f2:cd:82:3d:67:1e:e1:
9c:af:61:3f:84:38:69:91:d6:06:63:11:14:9a:4d:
6a:c3:f5:24:32:a9:74:71:e5:d8:7f:bf:d0:7c:f4:
78:15:aa:ad:e0:d8:9e:9a:d5:63:0f:ba:7b:8f:7f:
9e:2d:9c:a5:aa:34:9e:6c:34:89:78:b4:59:77:91:
2c:b3:8c:e4:fb:3d:2f:f4:ef:5b:84:20:5f:80:a6:
78:65:9f:ec:8a:f1:e8:bf:72:a7:b3:49:8b:29:0f:
c7:df:d1:38:fb:c8:fb:9f:db:3f:74:e0:47:0f:49:
fc:cb:46:77:50:57:de:ce:0c:ba:c6:44:75:8c:93:
14:25:74:3e:ed:26:bc:dc:76:23:5d:12:8f:b9:35:
c9:bc:40:34:b7:c2:06:cb:42:f3:25:b1:c3:75:17:
3a:e4:42:aa:78:2b:eb:9c:8e:d7:0c:0e:5f:b0:85:
c2:d0:f5:85:d5:97:e4:9f:0b:da:37:f1:66:8f:21:
db:67:22:2e:22:27:8c:4d:86:e7:0e:2b:3a:4b:ca:
ed:67:33:e0:4f:58:67:6d:95:3c:9a:54:7e:93:c7:
45:b5:1a:58:3f:4b:2d:f5:4d:62:2d:b4:7f:d4:08:
1a:56:e2:e1:f2:73:a6:d4:d4:2c:0c:b3:83:ca:cc:
ae:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:ED:76:E6:40:B6:BB:36:12:7F:0C:0E:F1:4A:DC:EC:93:2E:32:57
X509v3 Authority Key Identifier:
keyid:BC:A0:EC:59:56:43:24:23:74:20:D5:06:B9:B4:98:D7:52:EE:21:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vKDsWVZDJCN0INUGubSY11LuIWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/243b53-4b94-4244-a8ec-7c549f1ed16c/1/4-125kC2uzYSfwwO8Urc7JMuMlc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/243b53-4b94-4244-a8ec-7c549f1ed16c/1/vKDsWVZDJCN0INUGubSY11LuIWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.226.104.0/21
185.26.124.0/22
213.167.228.0/22
213.167.240.0/20
217.70.176.0/20
IPv6:
2001:4b98::/31
Signature Algorithm: sha256WithRSAEncryption
53:41:d9:27:32:ba:9f:ce:67:11:83:3d:24:b5:a4:55:43:a6:
92:cd:dd:f4:c4:ff:f7:fe:ff:32:9d:de:4e:40:8a:44:bf:20:
c3:09:94:67:b9:97:08:fe:7b:ac:8d:a2:bb:27:ee:13:9c:38:
97:e0:b8:99:44:1b:ab:af:b2:46:79:37:a0:af:42:d9:f4:4b:
b9:5f:62:87:bc:1e:5c:dc:80:78:b5:1b:91:d4:25:50:26:72:
67:e5:c9:bb:5d:93:c6:07:9d:c3:d6:f4:c2:68:cf:5b:a3:7e:
e5:9a:e9:38:0d:3a:d5:5f:f3:1a:e2:77:d4:fe:3b:64:c0:df:
6c:a0:90:fd:df:c7:21:8f:23:27:ba:f6:01:50:7f:7c:22:74:
e1:a8:d8:e2:3d:91:f6:1f:12:d9:79:e2:b4:75:e7:01:52:f2:
d7:aa:24:2b:37:23:45:75:71:a0:21:fb:79:9d:3c:bc:9d:f1:
d7:35:d2:ae:5a:15:d2:40:f2:f2:ae:da:65:9a:63:1f:6b:61:
17:a1:0d:97:ec:11:d7:3f:9e:39:f8:52:8d:b3:14:0c:f1:f4:
21:a8:46:0b:18:7f:ae:a0:3b:79:bc:30:a3:2a:8e:92:ca:5f:
28:48:54:4d:0d:2d:58:56:d5:ff:ea:e0:09:62:7e:84:53:0b:
6d:97:03:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:18:49 2024 by rpki-client on console-fra.rpki-client.org