Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/366746-c306-408a-ba7e-2b3c64f9f9ab/1/3omxtXuqBBNfkzCqqhCd6qxKdaE.roa
File: 3omxtXuqBBNfkzCqqhCd6qxKdaE.roa (raw, json)
Hash identifier: XdBytuPwXM0RXxb07yaC5IQAF+sdhZZ4lRtDC2c9eXE=
Subject key identifier: DE:89:B1:B5:7B:AA:04:13:5F:93:30:AA:AA:10:9D:EA:AC:4A:75:A1
Certificate issuer: /CN=c2838d1f3b231bf72e453dd78c4b50ac009ff7f1
Certificate serial: 01922B3296CD07940C6A0CD993061A7C30C8
Authority key identifier: C2:83:8D:1F:3B:23:1B:F7:2E:45:3D:D7:8C:4B:50:AC:00:9F:F7:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/woONHzsjG_cuRT3XjEtQrACf9_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/366746-c306-408a-ba7e-2b3c64f9f9ab/1/3omxtXuqBBNfkzCqqhCd6qxKdaE.roa
Signing time: Wed 25 Sep 2024 21:59:48 +0000
ROA not before: Wed 25 Sep 2024 21:59:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203649
IP address blocks: 185.128.56.0/24 maxlen: 24
185.128.57.0/24 maxlen: 24
185.128.58.0/24 maxlen: 24
185.128.59.0/24 maxlen: 24
2a06:f480::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/366746-c306-408a-ba7e-2b3c64f9f9ab/1/woONHzsjG_cuRT3XjEtQrACf9_E.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/366746-c306-408a-ba7e-2b3c64f9f9ab/1/woONHzsjG_cuRT3XjEtQrACf9_E.mft
rsync://rpki.ripe.net/repository/DEFAULT/woONHzsjG_cuRT3XjEtQrACf9_E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:2b:32:96:cd:07:94:0c:6a:0c:d9:93:06:1a:7c:30:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2838d1f3b231bf72e453dd78c4b50ac009ff7f1
Validity
Not Before: Sep 25 21:59:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=de89b1b57baa04135f9330aaaa109deaac4a75a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:72:00:39:e4:22:24:34:87:97:42:ab:ee:2e:
57:8c:e7:6b:fd:2f:e0:da:03:52:54:28:e6:d5:c1:
fa:69:00:48:dc:a1:90:a6:43:95:88:80:72:dd:06:
c9:80:10:a4:a2:8f:6c:81:5f:7e:11:1e:42:13:28:
19:8c:cf:26:b9:b9:94:b4:e3:a7:75:b6:06:72:95:
1f:9d:7a:76:9d:00:e5:43:65:46:9a:a6:36:85:8e:
1b:94:f1:cf:23:d5:ad:a8:70:97:b7:13:1b:e3:77:
1a:ee:4b:d6:ad:de:93:a3:67:c3:15:87:ca:50:ab:
af:07:3b:c4:c7:b2:59:fe:72:11:be:6d:88:7f:76:
15:4f:15:37:9a:5e:75:e4:2e:9e:3c:9a:55:c2:46:
5b:b2:ba:bc:ad:89:af:d5:b5:51:b7:c3:ec:c7:23:
d6:6f:ef:cf:96:af:bd:9c:ef:c8:33:56:c9:06:26:
3d:32:03:6b:01:22:b5:35:c8:1b:3c:7c:fc:a1:0d:
d6:ae:88:b7:77:3e:b1:79:81:4d:c0:1e:f8:db:f7:
e6:87:4d:53:d6:ca:b7:d5:1f:d0:17:ce:81:60:a1:
3b:f7:01:3e:c5:98:98:8c:6b:59:d9:d7:3e:3f:32:
14:e3:f4:b0:fe:a7:2e:a1:84:dc:8f:61:4a:d9:24:
16:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:89:B1:B5:7B:AA:04:13:5F:93:30:AA:AA:10:9D:EA:AC:4A:75:A1
X509v3 Authority Key Identifier:
keyid:C2:83:8D:1F:3B:23:1B:F7:2E:45:3D:D7:8C:4B:50:AC:00:9F:F7:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/woONHzsjG_cuRT3XjEtQrACf9_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/366746-c306-408a-ba7e-2b3c64f9f9ab/1/3omxtXuqBBNfkzCqqhCd6qxKdaE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/366746-c306-408a-ba7e-2b3c64f9f9ab/1/woONHzsjG_cuRT3XjEtQrACf9_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.128.56.0/22
IPv6:
2a06:f480::/29
Signature Algorithm: sha256WithRSAEncryption
97:ee:39:02:b5:e7:b1:52:0c:d4:0e:b2:11:17:24:c1:d3:68:
6d:92:b8:10:44:e1:89:17:4d:7f:65:4a:e1:3b:1d:86:45:35:
7c:a1:b7:e1:dc:1e:03:2b:58:00:35:53:85:68:17:c3:46:9d:
12:58:c3:a4:11:33:7c:fd:95:6b:e5:4e:17:a1:4a:ea:e3:a7:
b7:34:80:2d:0d:23:68:94:ab:b7:80:90:b3:2d:bc:ef:02:3a:
c3:0d:c8:92:2e:35:e4:e4:63:23:62:02:3d:d2:d5:fd:76:59:
0e:c5:3d:62:e6:3d:25:d2:14:a2:8c:54:2f:d5:77:75:5c:59:
be:6b:24:4a:9e:29:10:33:f3:4b:12:a6:99:92:b7:11:73:c5:
8d:8b:ba:d3:58:4b:f6:57:23:c8:bd:a0:a1:2d:50:7c:d0:9c:
fd:b6:49:a8:c3:bb:1c:3e:be:bd:ce:66:e6:c2:07:0e:c7:33:
0a:c7:7f:a1:d3:f7:ce:1d:5f:01:46:8b:58:0c:dc:7b:92:6f:
2f:f5:f2:79:d8:e4:0f:59:e7:21:75:58:e0:8e:ab:e4:d9:c0:
25:75:62:d4:91:1d:1c:3d:33:b1:9e:2d:ee:eb:30:0f:76:eb:
e9:aa:05:fd:bf:5a:b9:f3:85:e8:62:75:11:1d:c7:e8:e6:95:
aa:e8:f2:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:19:43 2024 by rpki-client on console-ams.rpki-client.org