Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/b1af5b-089e-4cbe-bbe9-425ee968df0b/1/12k5gDGcRdoVeSBX7hVE29WDJq4.roa
File: 12k5gDGcRdoVeSBX7hVE29WDJq4.roa (raw, json)
Hash identifier: St9YGSl/yh4JuBIqSPstvbIC7HflUEG9qt1itliknSo=
Subject key identifier: D7:69:39:80:31:9C:45:DA:15:79:20:57:EE:15:44:DB:D5:83:26:AE
Certificate issuer: /CN=cb2d9ff86e363db34d0556ec16451f2f7f303d24
Certificate serial: 018CC56E10E511E51930007714ECF4F15130
Authority key identifier: CB:2D:9F:F8:6E:36:3D:B3:4D:05:56:EC:16:45:1F:2F:7F:30:3D:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yy2f-G42PbNNBVbsFkUfL38wPSQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/b1af5b-089e-4cbe-bbe9-425ee968df0b/1/12k5gDGcRdoVeSBX7hVE29WDJq4.roa
Signing time: Mon 01 Jan 2024 14:29:33 +0000
ROA not before: Mon 01 Jan 2024 14:29:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15600
IP address blocks: 185.74.120.0/22 maxlen: 22
5.153.112.0/20 maxlen: 20
2a00:d3a0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/b1af5b-089e-4cbe-bbe9-425ee968df0b/1/yy2f-G42PbNNBVbsFkUfL38wPSQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/b1af5b-089e-4cbe-bbe9-425ee968df0b/1/yy2f-G42PbNNBVbsFkUfL38wPSQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/yy2f-G42PbNNBVbsFkUfL38wPSQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:10:e5:11:e5:19:30:00:77:14:ec:f4:f1:51:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb2d9ff86e363db34d0556ec16451f2f7f303d24
Validity
Not Before: Jan 1 14:29:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d7693980319c45da15792057ee1544dbd58326ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:2c:a5:b1:01:40:fc:12:6a:ac:2e:ed:e0:69:
7d:79:7f:c7:42:69:cb:2c:57:82:13:60:e8:11:e5:
0c:1a:65:a3:6e:f2:fd:de:b7:38:0a:63:51:2b:cd:
0c:d1:72:ed:f8:9c:55:1f:ec:58:11:66:05:38:29:
3b:8e:dc:56:76:af:a9:88:18:4d:42:f0:de:e1:da:
86:e6:c6:84:66:4a:69:0d:69:57:50:a2:e8:5f:20:
92:bb:d9:ab:72:04:5e:3d:e1:e0:1b:4f:29:52:68:
fa:3d:92:7e:bb:53:c4:0d:d5:f1:19:4e:da:ef:09:
e3:54:5a:f0:6c:91:99:67:da:4c:ce:c7:29:a2:0b:
44:21:12:0b:05:e0:36:92:48:5a:65:91:e3:01:a6:
2d:a9:85:9c:1a:c0:a1:39:e9:80:06:7a:65:4f:b8:
0c:a2:8d:91:d3:c7:74:2d:94:4a:be:ae:19:44:42:
4b:3b:56:ab:d1:ce:8a:30:15:ac:44:18:32:bf:2b:
55:18:15:09:cc:98:38:e0:6d:cf:e0:10:af:2c:3e:
e3:eb:b6:91:5d:fc:a4:0e:e1:cb:d4:df:98:ac:cb:
1d:db:80:28:55:01:47:d0:f3:2c:44:84:bc:e8:b8:
8d:f7:02:4c:2d:33:26:ba:22:a5:19:bf:ef:14:db:
c7:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:69:39:80:31:9C:45:DA:15:79:20:57:EE:15:44:DB:D5:83:26:AE
X509v3 Authority Key Identifier:
keyid:CB:2D:9F:F8:6E:36:3D:B3:4D:05:56:EC:16:45:1F:2F:7F:30:3D:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yy2f-G42PbNNBVbsFkUfL38wPSQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b1af5b-089e-4cbe-bbe9-425ee968df0b/1/12k5gDGcRdoVeSBX7hVE29WDJq4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b1af5b-089e-4cbe-bbe9-425ee968df0b/1/yy2f-G42PbNNBVbsFkUfL38wPSQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.153.112.0/20
185.74.120.0/22
IPv6:
2a00:d3a0::/29
Signature Algorithm: sha256WithRSAEncryption
1b:67:f6:8b:96:76:18:50:df:35:30:0c:0c:aa:35:bf:c7:9a:
3a:fc:93:c9:43:3c:f3:c1:61:17:68:1f:69:de:45:1f:e2:26:
c6:bf:43:b9:ea:57:28:e5:0d:15:5d:8b:68:01:1e:ad:18:17:
f7:5c:eb:cc:5b:93:8a:d8:fd:a1:fe:f0:4b:18:f1:4d:d2:a1:
c4:87:14:88:e6:77:52:61:fd:e8:7c:af:36:b0:fb:17:7a:49:
8b:1a:2b:37:41:1f:15:3a:6e:f1:36:c2:8f:69:90:f0:cb:d6:
d0:71:79:ac:7c:d5:01:0e:e8:ce:62:2e:f0:1a:48:37:51:4f:
73:0c:29:7e:e5:0e:ab:78:21:fa:d0:c0:b8:63:fc:67:9a:77:
97:3a:95:77:87:4c:84:7d:42:2e:78:06:fa:a0:74:25:37:79:
66:d2:45:c6:30:23:d7:2c:5b:c8:2a:88:c5:44:30:92:8c:39:
e3:13:ab:9d:d5:73:f3:92:16:75:6b:f5:69:bc:7c:cd:e5:ab:
fe:3b:a4:51:7c:e9:f0:6e:ee:d9:dd:e3:f1:2d:c6:f4:b9:38:
27:da:8a:fa:f5:8e:08:43:c8:a3:36:48:74:e9:d3:71:24:11:
2c:72:47:b4:8d:1e:fe:76:ef:78:3e:08:8b:5e:77:01:c6:fe:
4b:ab:52:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:16:24 2024 by rpki-client on console-ams.rpki-client.org