Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/1af4a5-0d6c-4776-be5c-be852f644201/1/w7PkxituLOXmJ0tF-MgmiWyuBnQ.roa
File: w7PkxituLOXmJ0tF-MgmiWyuBnQ.roa (raw, json)
Hash identifier: 62nFyXMdJn0gEllz1QAnnOjHJ+gk9trxnFwDJ72qBqQ=
Subject key identifier: C3:B3:E4:C6:2B:6E:2C:E5:E6:27:4B:45:F8:C8:26:89:6C:AE:06:74
Certificate issuer: /CN=e916dc9db4e49de71b2fd0819dae853aeb053b06
Certificate serial: 0191B81C859FB7F8B6F3512F1C2816B4BB57
Authority key identifier: E9:16:DC:9D:B4:E4:9D:E7:1B:2F:D0:81:9D:AE:85:3A:EB:05:3B:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6RbcnbTknecbL9CBna6FOusFOwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/1af4a5-0d6c-4776-be5c-be852f644201/1/w7PkxituLOXmJ0tF-MgmiWyuBnQ.roa
Signing time: Tue 03 Sep 2024 13:39:22 +0000
ROA not before: Tue 03 Sep 2024 13:39:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50340
IP address blocks: 81.30.105.0/24 maxlen: 24
121.127.37.0/24 maxlen: 24
194.164.245.0/24 maxlen: 24
202.49.176.0/24 maxlen: 24
202.181.148.0/24 maxlen: 24
203.31.40.0/24 maxlen: 24
2a13:d207::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/1af4a5-0d6c-4776-be5c-be852f644201/1/6RbcnbTknecbL9CBna6FOusFOwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/1af4a5-0d6c-4776-be5c-be852f644201/1/6RbcnbTknecbL9CBna6FOusFOwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6RbcnbTknecbL9CBna6FOusFOwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 17:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:b8:1c:85:9f:b7:f8:b6:f3:51:2f:1c:28:16:b4:bb:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e916dc9db4e49de71b2fd0819dae853aeb053b06
Validity
Not Before: Sep 3 13:39:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c3b3e4c62b6e2ce5e6274b45f8c826896cae0674
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:6d:c6:c4:e5:50:10:ae:4c:86:91:c9:f3:fc:
aa:c3:7e:cb:23:25:ef:78:17:38:03:d6:1d:40:7f:
f6:ba:51:0b:bf:92:52:d0:b8:62:7d:3d:bf:b5:bb:
d5:78:ce:b8:e8:a8:63:34:ea:4c:46:83:05:94:89:
15:7e:d4:a3:ab:f4:ba:20:80:fb:05:5c:84:d3:2b:
bb:2b:28:9b:20:71:35:97:00:f7:47:11:6f:19:14:
ac:a0:52:6f:3b:59:4b:6c:0c:5e:d5:2a:c5:31:ef:
fa:12:eb:78:86:8c:53:df:59:3c:fe:6b:de:87:37:
52:6a:b8:1c:cd:85:63:d4:3b:36:20:27:1b:8c:46:
ce:35:e3:fc:8d:e6:1c:83:ec:4a:5e:62:4d:1b:c6:
be:b8:29:0a:dd:da:55:52:76:d5:44:aa:cc:7a:33:
c6:ee:dd:66:d0:f7:f8:c7:fb:20:72:7d:59:5a:87:
52:31:ed:4f:34:11:fe:2b:61:52:78:bb:93:e0:3d:
f3:ac:c7:81:1e:fa:c9:d7:84:d8:c2:c8:eb:2a:53:
aa:2e:89:b6:95:bf:00:26:e7:5b:a0:72:e5:44:18:
af:25:ed:73:99:a8:76:75:21:ba:0d:3f:b1:3a:80:
b0:7c:a0:cd:c7:b5:2a:9d:0c:b5:79:c3:72:be:da:
f9:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:B3:E4:C6:2B:6E:2C:E5:E6:27:4B:45:F8:C8:26:89:6C:AE:06:74
X509v3 Authority Key Identifier:
keyid:E9:16:DC:9D:B4:E4:9D:E7:1B:2F:D0:81:9D:AE:85:3A:EB:05:3B:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6RbcnbTknecbL9CBna6FOusFOwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/1af4a5-0d6c-4776-be5c-be852f644201/1/w7PkxituLOXmJ0tF-MgmiWyuBnQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/1af4a5-0d6c-4776-be5c-be852f644201/1/6RbcnbTknecbL9CBna6FOusFOwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.30.105.0/24
121.127.37.0/24
194.164.245.0/24
202.49.176.0/24
202.181.148.0/24
203.31.40.0/24
IPv6:
2a13:d207::/32
Signature Algorithm: sha256WithRSAEncryption
77:8f:17:70:79:94:e1:82:b7:07:85:57:bd:1f:91:a8:2a:47:
32:76:6f:ff:e2:70:f7:fc:95:56:5a:87:6f:3d:47:2d:38:99:
49:0d:7f:dc:c8:c3:0f:63:15:4a:90:98:87:b8:36:3b:0f:37:
b6:50:1c:b7:45:45:53:4f:8e:e9:b7:d9:28:a1:42:3a:21:ff:
63:36:65:40:8b:d3:92:bf:dc:a4:b7:0b:28:38:48:3e:9b:d6:
04:18:f3:ea:e0:3b:20:c3:ae:0e:37:db:19:25:24:4b:fb:d1:
4c:20:a5:11:ac:cc:d8:bb:5d:d7:4b:00:7c:b3:37:3b:3d:a2:
3d:e5:1a:28:34:24:9e:7d:14:95:2c:ec:f7:22:64:ff:2d:15:
c4:15:38:bf:71:a2:ce:6f:76:04:35:c0:3d:22:21:4e:15:2c:
f2:12:10:94:93:38:c9:77:28:e4:28:50:13:4d:c1:67:79:26:
5c:70:95:23:3a:6c:63:af:19:70:85:df:4f:f1:4d:0b:bb:e6:
dc:ca:6c:24:ff:a7:9b:a5:cf:cb:e1:03:78:9f:09:0d:46:24:
f7:57:8d:13:21:12:f5:59:11:47:f5:31:5f:48:d3:96:c1:96:
6a:b3:aa:09:ae:06:c8:32:0d:6e:02:2f:85:ee:b1:6e:59:0c:
a9:85:73:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:33:43 2024 by rpki-client on console-ams.rpki-client.org