Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/88bf1e-d9c5-4d24-94b8-de44ee81470b/1/c3fAAvzWW3rwLSkbKfg8HRPSepQ.roa
File: c3fAAvzWW3rwLSkbKfg8HRPSepQ.roa (raw, json)
Hash identifier: ypGcFLIAjFpd8gVtS9VkTJT2kFIqXb9TxzsAJcU3G1Y=
Subject key identifier: 73:77:C0:02:FC:D6:5B:7A:F0:2D:29:1B:29:F8:3C:1D:13:D2:7A:94
Certificate issuer: /CN=f4abcc79a367d9c012c1684a8422996cdc43de76
Certificate serial: 01906D8B85A9678ACD5235D671E1720E3A34
Authority key identifier: F4:AB:CC:79:A3:67:D9:C0:12:C1:68:4A:84:22:99:6C:DC:43:DE:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9KvMeaNn2cASwWhKhCKZbNxD3nY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/88bf1e-d9c5-4d24-94b8-de44ee81470b/1/c3fAAvzWW3rwLSkbKfg8HRPSepQ.roa
Signing time: Mon 01 Jul 2024 09:06:18 +0000
ROA not before: Mon 01 Jul 2024 09:06:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12581
IP address blocks: 185.27.252.0/22 maxlen: 22
212.79.160.0/19 maxlen: 19
2a00:c940::/32 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/88bf1e-d9c5-4d24-94b8-de44ee81470b/1/9KvMeaNn2cASwWhKhCKZbNxD3nY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/88bf1e-d9c5-4d24-94b8-de44ee81470b/1/9KvMeaNn2cASwWhKhCKZbNxD3nY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9KvMeaNn2cASwWhKhCKZbNxD3nY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Sep 2024 20:19:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:6d:8b:85:a9:67:8a:cd:52:35:d6:71:e1:72:0e:3a:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4abcc79a367d9c012c1684a8422996cdc43de76
Validity
Not Before: Jul 1 09:06:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7377c002fcd65b7af02d291b29f83c1d13d27a94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e2:88:f0:f9:18:2e:ec:dd:ad:86:42:54:b6:
ff:8f:27:ae:f3:45:fe:a5:76:a6:83:99:03:d1:ce:
cb:be:68:78:98:94:76:64:56:60:b1:39:42:c2:4a:
c1:20:91:fb:d1:d8:11:d4:1b:83:82:3c:32:95:34:
d2:02:2d:d5:e9:76:bd:17:7b:e3:11:a3:4e:8b:97:
4a:4b:ce:fd:88:69:72:4e:ad:df:5d:30:f1:e0:6f:
f3:e4:48:09:99:55:2c:fd:b3:1b:d4:2f:82:75:c0:
cb:6a:6b:b0:a9:9b:64:6d:05:f1:b7:f1:b1:8b:af:
82:ee:41:fd:58:67:cf:b9:33:1c:43:79:dd:15:00:
b3:f6:1a:d9:c5:90:64:ae:72:16:60:9b:4d:88:59:
a2:b2:8d:5d:f4:94:5b:df:d8:35:4e:f7:10:47:e4:
ab:f2:d6:ee:ca:99:3f:26:f4:b3:23:9f:17:65:3f:
83:63:9f:78:68:fe:a0:12:d9:7e:02:73:c3:a1:a3:
73:a6:1a:7c:a3:e8:b4:de:e3:4b:67:31:2c:0f:a8:
24:9f:8e:86:80:c0:68:39:fa:13:7c:ad:c2:b1:72:
d6:4d:e3:c6:10:30:89:56:5b:1a:c4:a2:63:3a:5b:
b9:46:1c:72:57:1e:57:86:27:3c:f6:10:00:f9:80:
29:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:77:C0:02:FC:D6:5B:7A:F0:2D:29:1B:29:F8:3C:1D:13:D2:7A:94
X509v3 Authority Key Identifier:
keyid:F4:AB:CC:79:A3:67:D9:C0:12:C1:68:4A:84:22:99:6C:DC:43:DE:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9KvMeaNn2cASwWhKhCKZbNxD3nY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/88bf1e-d9c5-4d24-94b8-de44ee81470b/1/c3fAAvzWW3rwLSkbKfg8HRPSepQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/88bf1e-d9c5-4d24-94b8-de44ee81470b/1/9KvMeaNn2cASwWhKhCKZbNxD3nY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.27.252.0/22
212.79.160.0/19
IPv6:
2a00:c940::/32
Signature Algorithm: sha256WithRSAEncryption
39:da:d0:41:38:c8:4b:97:95:68:0e:1d:48:d7:84:47:76:03:
b2:9e:bd:0f:bd:b7:9f:bc:76:ad:1d:51:56:36:91:2a:ca:2d:
19:e4:29:97:3c:8f:84:f2:95:ec:2a:45:30:f5:b6:b2:1a:a2:
eb:e8:89:c4:56:14:87:cb:ff:af:17:4c:09:0a:7e:26:9b:96:
0a:71:20:70:c4:89:83:bb:63:fb:ae:e3:ce:49:cf:97:44:2e:
5c:6b:11:35:d1:30:18:f5:96:67:91:e8:f0:27:16:4a:41:6e:
b9:48:8d:14:69:4b:49:51:35:a4:c2:93:6b:10:01:25:64:2f:
da:83:8b:a4:cd:15:0d:9b:2a:b8:3f:ad:aa:c9:80:78:16:cd:
21:6f:8f:11:ce:38:8c:99:aa:8e:a6:fe:cc:a6:45:4f:6a:5c:
55:d7:04:8e:69:c5:89:1f:fe:7f:8e:19:0a:5e:06:b8:bb:6f:
67:a1:f4:97:45:7f:39:1e:78:f6:78:6d:2b:1f:74:8e:a7:1a:
23:96:c2:5d:b4:1b:1c:06:14:f2:75:d8:cb:4a:8b:8b:0a:6c:
76:b9:82:c6:c8:51:53:7a:3f:20:60:32:80:37:e7:4d:7e:45:
9e:fd:55:e1:9b:e8:05:fa:6a:99:cf:63:68:cc:04:45:c1:bb:
1e:f7:ce:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 18 23:29:38 2024 by rpki-client on console-ams.rpki-client.org