Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/ecd1bb-fbda-4dd9-9ef9-3ac7d9623291/1/aL3vHiwV0cQT5Lih5o_6gkjkJRs.roa
File: aL3vHiwV0cQT5Lih5o_6gkjkJRs.roa (raw, json)
Hash identifier: ExqQEk0XKFgHfJmFWzJuUFKJ3n8GAKE3pmXPsFqCyzM=
Subject key identifier: 68:BD:EF:1E:2C:15:D1:C4:13:E4:B8:A1:E6:8F:FA:82:48:E4:25:1B
Certificate issuer: /CN=ee4c3fc0122d831fbea8abb20a4e9b65c54039b2
Certificate serial: 018CC50081DD0228F0363EFDEF1B9AD90EDB
Authority key identifier: EE:4C:3F:C0:12:2D:83:1F:BE:A8:AB:B2:0A:4E:9B:65:C5:40:39:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7kw_wBItgx--qKuyCk6bZcVAObI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/ecd1bb-fbda-4dd9-9ef9-3ac7d9623291/1/aL3vHiwV0cQT5Lih5o_6gkjkJRs.roa
Signing time: Mon 01 Jan 2024 12:29:53 +0000
ROA not before: Mon 01 Jan 2024 12:29:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3301
IP address blocks: 139.58.0.0/16 maxlen: 24
148.2.0.0/16 maxlen: 24
147.13.0.0/16 maxlen: 24
136.163.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/ecd1bb-fbda-4dd9-9ef9-3ac7d9623291/1/7kw_wBItgx--qKuyCk6bZcVAObI.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/ecd1bb-fbda-4dd9-9ef9-3ac7d9623291/1/7kw_wBItgx--qKuyCk6bZcVAObI.mft
rsync://rpki.ripe.net/repository/DEFAULT/7kw_wBItgx--qKuyCk6bZcVAObI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 16:03:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:81:dd:02:28:f0:36:3e:fd:ef:1b:9a:d9:0e:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee4c3fc0122d831fbea8abb20a4e9b65c54039b2
Validity
Not Before: Jan 1 12:29:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=68bdef1e2c15d1c413e4b8a1e68ffa8248e4251b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:fc:b9:bb:34:96:30:33:9a:39:d0:f0:84:86:
ce:45:f6:42:49:52:c4:f8:3d:3e:92:06:f4:84:9a:
81:fa:4f:30:a7:bb:f6:47:10:5f:39:ca:29:ad:fa:
16:b7:0b:dc:6a:28:34:4c:15:9d:44:a3:aa:90:1f:
bc:fc:7a:18:e1:67:4f:03:f1:00:f4:0f:96:6c:b8:
81:2a:85:1c:2f:57:0f:a9:61:f8:a9:9c:64:65:eb:
20:43:54:c8:c3:01:86:94:df:12:ce:b5:17:c1:a1:
07:6d:93:3c:7b:f1:55:2f:b2:0d:15:9c:95:e6:dd:
49:56:4a:23:a0:b9:03:43:b7:ae:ab:95:51:07:7f:
32:ae:0a:61:8f:9e:7a:a3:7a:d0:f5:7b:2e:4f:c4:
16:ea:19:5c:41:ba:75:e0:20:30:bf:9b:20:4a:cb:
c5:df:b6:4e:15:43:6b:16:b2:6c:6b:03:d2:46:b1:
31:39:36:dc:a4:28:4f:4d:31:17:8a:a3:50:dd:8b:
f4:04:85:d8:8e:e6:86:08:79:71:8c:69:1a:d2:15:
9d:21:00:75:5d:32:27:26:d7:61:92:da:37:2c:46:
99:91:43:4c:6e:87:8f:47:c1:59:8d:d7:92:ba:32:
98:43:0f:1e:22:d2:9e:8c:e6:b4:c8:87:3f:fc:01:
33:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:BD:EF:1E:2C:15:D1:C4:13:E4:B8:A1:E6:8F:FA:82:48:E4:25:1B
X509v3 Authority Key Identifier:
keyid:EE:4C:3F:C0:12:2D:83:1F:BE:A8:AB:B2:0A:4E:9B:65:C5:40:39:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7kw_wBItgx--qKuyCk6bZcVAObI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/ecd1bb-fbda-4dd9-9ef9-3ac7d9623291/1/aL3vHiwV0cQT5Lih5o_6gkjkJRs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/ecd1bb-fbda-4dd9-9ef9-3ac7d9623291/1/7kw_wBItgx--qKuyCk6bZcVAObI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
136.163.0.0/16
139.58.0.0/16
147.13.0.0/16
148.2.0.0/16
Signature Algorithm: sha256WithRSAEncryption
3e:20:b4:3d:aa:97:b4:66:38:29:71:9c:f7:25:93:bd:5e:12:
72:52:90:94:f7:c1:f9:d8:95:12:16:8d:24:fd:98:5f:52:1b:
68:ed:3b:cc:e6:a1:4b:87:d6:65:71:88:d3:5b:9c:9b:6f:bd:
a5:40:39:8b:29:ed:52:87:bc:fb:3a:34:82:7a:52:a5:0d:67:
c8:9f:7e:54:8d:df:96:e1:e9:3c:c6:16:fd:7b:dd:dd:e5:0b:
61:f0:ba:ad:5f:cd:5d:43:4a:f0:b5:f8:11:13:06:4f:79:4b:
4f:b5:fe:04:0f:62:69:d1:74:1c:58:f0:98:47:1a:a6:24:5f:
c4:44:cb:0f:ff:12:c5:40:71:33:a5:02:14:8e:91:f2:2f:e9:
d7:71:4c:1e:70:b8:6a:d8:63:46:84:d3:fc:62:a3:e8:6f:97:
2e:97:b7:7b:76:66:80:61:72:97:17:78:cf:ec:f8:40:9a:d5:
6b:68:e2:78:6d:95:0f:60:f2:3e:3a:9c:bd:6b:43:2b:0e:39:
19:e6:20:f7:13:c9:40:f2:62:43:e4:25:4a:ec:dc:bf:9f:76:
fd:67:db:b2:a0:98:d7:b3:0a:cd:9f:37:d8:e5:47:55:40:20:
e5:a3:9c:a0:25:8d:87:c6:94:b5:1e:4f:6b:e3:54:91:2a:56:
5d:01:12:8a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jun 1 20:48:09 2024 by rpki-client on console-ams.rpki-client.org