Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/64XGMEw1Xf9IhHO70OMP_ul0zlo.roa
File: 64XGMEw1Xf9IhHO70OMP_ul0zlo.roa (raw, json)
Hash identifier: uoV8mMzj02yHDFP4Tmg3RKhrAfwvwq1gWNvlGlGrzkA=
Subject key identifier: EB:85:C6:30:4C:35:5D:FF:48:84:73:BB:D0:E3:0F:FE:E9:74:CE:5A
Certificate issuer: /CN=c592786ced6ce597585468bb4f36b31cf6acec6e
Certificate serial: 018ECA21F562B2E2FF56CDE6813FB1150B87
Authority key identifier: C5:92:78:6C:ED:6C:E5:97:58:54:68:BB:4F:36:B3:1C:F6:AC:EC:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xZJ4bO1s5ZdYVGi7TzazHPas7G4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/64XGMEw1Xf9IhHO70OMP_ul0zlo.roa
Signing time: Wed 10 Apr 2024 22:30:06 +0000
ROA not before: Wed 10 Apr 2024 22:30:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29300
IP address blocks: 81.88.72.0/21 maxlen: 21
82.148.160.0/21 maxlen: 21
93.184.120.0/21 maxlen: 21
109.169.96.0/20 maxlen: 20
2a02:2828::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.mft
rsync://rpki.ripe.net/repository/DEFAULT/xZJ4bO1s5ZdYVGi7TzazHPas7G4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 13:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:ca:21:f5:62:b2:e2:ff:56:cd:e6:81:3f:b1:15:0b:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c592786ced6ce597585468bb4f36b31cf6acec6e
Validity
Not Before: Apr 10 22:30:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=eb85c6304c355dff488473bbd0e30ffee974ce5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:66:ca:03:2c:f6:08:b3:a9:23:7f:84:42:e5:
6f:28:2d:1f:06:44:09:72:f4:5e:f3:33:0d:94:76:
06:18:07:bb:d5:6e:00:ef:b5:fd:59:c0:08:c8:13:
cb:9c:2e:34:c4:6e:29:f1:d8:26:fd:d0:f0:55:56:
85:29:ab:55:fd:bb:2d:b8:a3:9d:fd:20:e8:ba:ad:
c0:bb:3c:3e:f4:e9:a1:4d:5b:ea:1a:a7:91:88:f0:
be:dc:bf:9b:e6:9a:e8:11:10:6c:3a:a1:eb:4b:b4:
a3:38:13:24:0c:03:47:37:d1:48:a2:85:50:49:03:
ec:7c:cc:ea:61:ca:8d:27:35:12:f8:de:ab:f0:8e:
16:0d:8d:d4:0b:9b:97:b1:f2:84:fb:98:23:ff:c6:
0c:66:a7:4e:3c:80:15:e5:9f:85:5d:58:ee:61:d4:
ce:6e:3c:67:00:70:b0:bf:5a:ca:c3:49:81:4c:70:
81:a3:f2:17:ee:65:a3:93:24:a9:38:b1:fc:e6:1a:
67:4a:37:33:98:97:13:3e:0e:30:14:c6:fc:ee:19:
94:f3:f9:71:5b:81:d9:51:fe:19:03:fc:51:28:24:
a2:a0:a6:c5:fe:f9:79:f3:22:9f:0b:1b:6f:43:d2:
28:11:ab:9d:65:9c:f2:fb:06:40:4c:84:34:c3:4a:
c1:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:85:C6:30:4C:35:5D:FF:48:84:73:BB:D0:E3:0F:FE:E9:74:CE:5A
X509v3 Authority Key Identifier:
keyid:C5:92:78:6C:ED:6C:E5:97:58:54:68:BB:4F:36:B3:1C:F6:AC:EC:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xZJ4bO1s5ZdYVGi7TzazHPas7G4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/64XGMEw1Xf9IhHO70OMP_ul0zlo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.88.72.0/21
82.148.160.0/21
93.184.120.0/21
109.169.96.0/20
IPv6:
2a02:2828::/32
Signature Algorithm: sha256WithRSAEncryption
b6:87:75:1d:c7:9f:aa:c1:32:96:72:57:16:2b:cb:e6:d2:0b:
18:a1:a4:9d:54:d6:c4:24:13:a8:93:5c:b2:eb:6d:c7:4d:11:
9c:68:41:71:81:07:42:61:64:0d:79:7c:0a:6f:74:49:75:fa:
e0:2f:7e:54:a6:28:04:e2:41:7f:98:b3:18:d6:fe:f9:ab:2c:
95:2c:30:8d:af:c6:e8:49:82:25:ab:9c:1f:b6:35:e8:22:a8:
02:b4:b8:7f:b0:61:5a:46:bf:85:f9:38:04:6a:2b:20:42:2b:
9f:06:3c:af:d3:21:4b:fd:39:bc:69:e9:bc:47:f0:e6:a2:41:
bc:ab:24:0a:82:2b:b2:97:c2:5b:19:6e:a9:93:57:d3:aa:5a:
2f:b0:54:d6:4e:98:27:4a:5c:38:d2:89:99:5d:6b:c1:02:99:
8d:dd:07:11:b6:64:90:48:70:5b:0a:6c:f8:03:68:ff:f2:97:
ea:74:49:97:9d:65:4d:54:ad:79:5c:2c:36:9f:26:c0:78:27:
67:22:b0:4f:09:8f:64:f8:de:3b:38:3a:be:5b:48:49:a8:16:
9a:46:07:5a:c1:c7:1a:98:7a:bb:7d:61:81:e5:c5:fc:6f:05:
d2:e1:c6:b8:16:a5:50:77:be:71:c1:d5:34:75:3c:91:5f:70:
1d:a0:53:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 23:23:29 2024 by rpki-client on console-ams.rpki-client.org