Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/e45577-65b1-4d43-853a-02abf8572fcb/1/oObQbtTWDBabq4k0Mc60q4GNVEg.roa
File: oObQbtTWDBabq4k0Mc60q4GNVEg.roa (raw, json)
Hash identifier: Opn4W3ECaww/dqkjYHF9jYUmvDb2ZpSsEydEoiQwYFU=
Subject key identifier: A0:E6:D0:6E:D4:D6:0C:16:9B:AB:89:34:31:CE:B4:AB:81:8D:54:48
Certificate issuer: /CN=d48555f9a52727f6bcf715cb4750a2a4a6c35161
Certificate serial: 0190728D42DAFC02F2408EF67C69CFB048D3
Authority key identifier: D4:85:55:F9:A5:27:27:F6:BC:F7:15:CB:47:50:A2:A4:A6:C3:51:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1IVV-aUnJ_a89xXLR1CipKbDUWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/e45577-65b1-4d43-853a-02abf8572fcb/1/oObQbtTWDBabq4k0Mc60q4GNVEg.roa
Signing time: Tue 02 Jul 2024 08:26:18 +0000
ROA not before: Tue 02 Jul 2024 08:26:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 33835
IP address blocks: 92.42.216.0/21 maxlen: 21
217.169.240.0/20 maxlen: 20
217.169.246.0/23 maxlen: 23
2a02:2440::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/e45577-65b1-4d43-853a-02abf8572fcb/1/1IVV-aUnJ_a89xXLR1CipKbDUWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/e45577-65b1-4d43-853a-02abf8572fcb/1/1IVV-aUnJ_a89xXLR1CipKbDUWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1IVV-aUnJ_a89xXLR1CipKbDUWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 17:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:72:8d:42:da:fc:02:f2:40:8e:f6:7c:69:cf:b0:48:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d48555f9a52727f6bcf715cb4750a2a4a6c35161
Validity
Not Before: Jul 2 08:26:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a0e6d06ed4d60c169bab893431ceb4ab818d5448
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:9c:e0:e9:55:41:66:a5:50:a2:7a:c4:c7:f1:
63:83:d3:08:b0:84:49:25:b8:b0:f0:70:81:83:f2:
ff:ff:59:83:5b:a0:2e:26:75:78:c8:da:58:47:31:
1c:b9:f6:34:79:91:71:22:0e:55:d6:0e:ad:22:1b:
14:7e:23:84:ff:88:81:a8:cd:e6:18:50:bd:b3:96:
cf:a7:65:e0:db:3a:f4:48:ea:b7:d0:e1:22:bb:ff:
8c:2f:bf:b1:64:13:51:d1:2c:02:ff:eb:53:06:ca:
29:21:1a:84:29:c5:11:84:40:70:b5:92:78:10:f8:
6a:5f:5d:23:40:c5:68:72:c3:ad:a0:c0:e9:0a:c2:
dc:fa:76:99:67:c9:d0:7f:25:aa:e9:b7:97:1d:14:
70:88:43:fa:1c:65:fb:2d:c9:a2:2b:ea:02:5a:bb:
ce:46:60:6b:e7:1b:da:58:9e:16:c7:d9:b0:56:61:
0c:3f:36:cd:c0:be:f1:c6:9d:06:ce:b9:cc:be:e4:
54:e1:2f:47:68:bd:9f:76:9f:1e:05:91:4f:15:94:
3d:f1:43:c7:64:61:85:1f:95:53:89:6a:5f:8c:f3:
2b:13:6e:0b:b0:dc:89:17:3a:7b:f4:1e:38:fc:89:
1f:31:d9:97:96:eb:cd:32:8d:2f:43:f6:bf:52:7a:
30:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:E6:D0:6E:D4:D6:0C:16:9B:AB:89:34:31:CE:B4:AB:81:8D:54:48
X509v3 Authority Key Identifier:
keyid:D4:85:55:F9:A5:27:27:F6:BC:F7:15:CB:47:50:A2:A4:A6:C3:51:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1IVV-aUnJ_a89xXLR1CipKbDUWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/e45577-65b1-4d43-853a-02abf8572fcb/1/oObQbtTWDBabq4k0Mc60q4GNVEg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/e45577-65b1-4d43-853a-02abf8572fcb/1/1IVV-aUnJ_a89xXLR1CipKbDUWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.42.216.0/21
217.169.240.0/20
IPv6:
2a02:2440::/32
Signature Algorithm: sha256WithRSAEncryption
5b:6d:f4:18:ae:02:4d:3c:81:fc:2c:48:07:f6:48:60:44:12:
6c:4a:22:8e:ab:8e:04:3e:3f:d9:c8:68:65:71:c0:93:95:89:
7e:ff:02:99:7b:b4:e3:67:6c:06:a9:b2:76:a0:8c:2d:51:28:
fa:8c:83:d3:7d:ad:16:ae:65:70:cb:96:63:93:44:9b:d9:ad:
6b:99:f4:ac:e3:e8:16:ad:9f:36:1b:0d:a4:5a:cb:4c:01:ba:
c2:af:4d:80:b6:25:f4:4a:1f:ed:45:1d:c0:27:6b:ea:b8:e7:
89:df:4f:76:9f:9d:72:38:cd:40:42:cd:f6:30:f7:47:33:a2:
39:30:3e:a2:f7:87:66:e6:00:6a:f3:3b:4d:ab:82:7f:2a:19:
17:60:86:51:cc:7c:14:0a:fe:b7:8b:40:24:29:51:49:a0:c2:
4d:18:92:ab:9e:67:e2:f9:f5:48:76:fc:e3:45:1b:a8:6f:0b:
2e:b4:67:4d:77:ed:a8:38:c9:34:52:00:6c:54:d5:0e:22:f8:
9e:f2:07:9a:18:24:06:ff:4a:17:cc:e5:ee:39:05:09:87:2d:
d9:22:7e:7e:0e:f6:6f:d9:4e:2e:38:de:ca:0b:83:cc:9f:f3:
b1:bf:62:83:0a:98:b6:9f:57:a1:83:3d:9c:55:ea:ac:7d:a6:
40:9d:e2:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:12:02 2024 by rpki-client on console-ams.rpki-client.org