Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/01c3aa-a2a7-42e7-8046-2243e36983e3/1/r_kWYfvQeovStTU0l3lWPtsHw6o.roa
File: r_kWYfvQeovStTU0l3lWPtsHw6o.roa (raw, json)
Hash identifier: AompfW0ydqgajZ/pwwP78IWr9/umHYi2bLRAKo183YU=
Subject key identifier: AF:F9:16:61:FB:D0:7A:8B:D2:B5:35:34:97:79:56:3E:DB:07:C3:AA
Certificate issuer: /CN=c71ef0ad43c7b8e26c175fdc1f1696d0081dc4da
Certificate serial: 018CC56E47B27EB2C5B5DB251D921643EC51
Authority key identifier: C7:1E:F0:AD:43:C7:B8:E2:6C:17:5F:DC:1F:16:96:D0:08:1D:C4:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xx7wrUPHuOJsF1_cHxaW0AgdxNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/01c3aa-a2a7-42e7-8046-2243e36983e3/1/r_kWYfvQeovStTU0l3lWPtsHw6o.roa
Signing time: Mon 01 Jan 2024 14:29:47 +0000
ROA not before: Mon 01 Jan 2024 14:29:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35518
IP address blocks: 87.245.64.0/18 maxlen: 18
46.245.184.0/21 maxlen: 21
88.151.144.0/21 maxlen: 21
185.43.200.0/22 maxlen: 22
91.102.192.0/21 maxlen: 21
88.213.128.0/18 maxlen: 18
193.134.4.0/22 maxlen: 22
2a00:d80::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/01c3aa-a2a7-42e7-8046-2243e36983e3/1/xx7wrUPHuOJsF1_cHxaW0AgdxNo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/01c3aa-a2a7-42e7-8046-2243e36983e3/1/xx7wrUPHuOJsF1_cHxaW0AgdxNo.mft
rsync://rpki.ripe.net/repository/DEFAULT/xx7wrUPHuOJsF1_cHxaW0AgdxNo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 05:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:47:b2:7e:b2:c5:b5:db:25:1d:92:16:43:ec:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c71ef0ad43c7b8e26c175fdc1f1696d0081dc4da
Validity
Not Before: Jan 1 14:29:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=aff91661fbd07a8bd2b535349779563edb07c3aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:c6:70:19:50:27:bb:ac:d1:91:32:70:fd:7a:
1f:cc:f6:79:35:63:00:7b:db:2d:c3:05:67:a6:1f:
81:39:25:4e:e8:24:4e:6a:83:55:76:b6:b2:60:29:
6b:5c:6b:b1:04:5a:31:a0:79:85:b3:2b:6e:b8:0c:
e5:b9:e4:11:8a:e3:ab:7b:12:52:76:07:c2:58:26:
72:d3:ec:10:19:45:58:b2:a5:f3:f7:cd:19:17:11:
1d:7d:5a:78:11:f6:46:1e:8d:2a:a6:9e:49:ee:70:
6a:df:a5:b4:de:3d:d3:d6:4a:4c:2d:f3:44:91:43:
ca:9f:35:01:b4:1a:85:40:58:9c:0d:62:87:62:91:
42:be:74:9a:50:15:d6:20:7b:d3:b8:07:1b:07:87:
e6:32:19:88:26:53:34:36:a6:80:dd:35:c6:db:56:
9f:67:15:8e:18:52:a1:aa:f9:c1:c8:d8:85:ed:12:
72:8e:b1:aa:06:27:5d:0d:52:b7:33:da:ba:79:46:
b4:4f:e4:8c:11:68:48:9b:0c:7d:e2:90:10:81:07:
a2:c4:4e:f9:82:f0:3f:3a:c7:57:71:41:f9:d2:16:
8f:41:ba:fe:15:06:c8:e3:f0:da:25:ce:24:4e:a3:
57:3d:19:9a:a5:70:6a:cc:a4:7c:e5:04:a3:80:86:
76:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:F9:16:61:FB:D0:7A:8B:D2:B5:35:34:97:79:56:3E:DB:07:C3:AA
X509v3 Authority Key Identifier:
keyid:C7:1E:F0:AD:43:C7:B8:E2:6C:17:5F:DC:1F:16:96:D0:08:1D:C4:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xx7wrUPHuOJsF1_cHxaW0AgdxNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/01c3aa-a2a7-42e7-8046-2243e36983e3/1/r_kWYfvQeovStTU0l3lWPtsHw6o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/01c3aa-a2a7-42e7-8046-2243e36983e3/1/xx7wrUPHuOJsF1_cHxaW0AgdxNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.245.184.0/21
87.245.64.0/18
88.151.144.0/21
88.213.128.0/18
91.102.192.0/21
185.43.200.0/22
193.134.4.0/22
IPv6:
2a00:d80::/29
Signature Algorithm: sha256WithRSAEncryption
03:50:c6:d4:2b:ab:6a:99:20:f2:0c:7a:cc:0a:a9:0d:61:e1:
d0:3a:ce:be:0b:43:fc:62:de:41:6c:60:fc:ff:3e:f6:0d:d8:
18:8b:e4:e8:27:ad:61:e3:6b:86:a8:9a:05:a5:f5:9c:30:54:
7c:3a:e5:70:2d:81:4d:ec:b5:50:ff:0c:80:80:1c:9c:f6:94:
8a:bf:09:dc:c8:5d:5e:7c:c7:2b:94:27:36:82:e7:b5:5c:eb:
40:76:10:2b:b1:7a:ff:8b:a7:7f:bc:55:89:cc:c5:c5:6d:17:
88:19:19:20:63:d1:ed:00:56:00:40:b0:5a:0b:fd:1c:1a:10:
02:03:3f:ca:e7:85:da:3a:d8:58:08:32:93:68:9b:97:ab:fd:
3e:d6:69:c9:95:8a:5d:fa:e2:9f:6a:40:15:57:8c:1b:8f:05:
a6:58:95:ee:a6:74:08:00:86:32:72:11:8a:89:ec:6f:17:1c:
cb:82:bc:ea:d4:b3:e6:80:c1:90:e2:e8:4e:54:b9:19:cf:1f:
7a:69:21:cd:35:b6:49:4e:26:0a:76:7b:fe:de:c2:56:55:49:
e4:22:bc:c5:85:63:a6:76:8a:e7:b0:76:4b:14:46:da:e0:2a:
f4:dc:3c:04:94:df:dc:9c:7c:60:d7:4c:87:62:e1:7b:fc:cf:
6d:61:c7:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:54:42 2024 by rpki-client on console-ams.rpki-client.org