Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/761b17-6cb5-47fd-8c4f-efa6789fd972/1/11pTaKQuECQPd9ZWJX6lAcBuLQQ.roa
File: 11pTaKQuECQPd9ZWJX6lAcBuLQQ.roa (raw, json)
Hash identifier: F6bHSLG0rAHnSAQ2a355m4PDwHvSnvbxRkbXbPp35hA=
Subject key identifier: D7:5A:53:68:A4:2E:10:24:0F:77:D6:56:25:7E:A5:01:C0:6E:2D:04
Certificate issuer: /CN=447c52d81edc1249644ad794be028af90e024a16
Certificate serial: 018CC94D9539F082B9F4FFE78D44FC66E306
Authority key identifier: 44:7C:52:D8:1E:DC:12:49:64:4A:D7:94:BE:02:8A:F9:0E:02:4A:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RHxS2B7cEklkSteUvgKK-Q4CShY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/761b17-6cb5-47fd-8c4f-efa6789fd972/1/11pTaKQuECQPd9ZWJX6lAcBuLQQ.roa
Signing time: Tue 02 Jan 2024 08:32:33 +0000
ROA not before: Tue 02 Jan 2024 08:32:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57684
IP address blocks: 194.110.156.0/22 maxlen: 24
185.205.212.0/22 maxlen: 24
2a0b:a40::/29 maxlen: 48
2001:67c:2674::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/761b17-6cb5-47fd-8c4f-efa6789fd972/1/RHxS2B7cEklkSteUvgKK-Q4CShY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/761b17-6cb5-47fd-8c4f-efa6789fd972/1/RHxS2B7cEklkSteUvgKK-Q4CShY.mft
rsync://rpki.ripe.net/repository/DEFAULT/RHxS2B7cEklkSteUvgKK-Q4CShY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 05:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:95:39:f0:82:b9:f4:ff:e7:8d:44:fc:66:e3:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=447c52d81edc1249644ad794be028af90e024a16
Validity
Not Before: Jan 2 08:32:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d75a5368a42e10240f77d656257ea501c06e2d04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:30:a4:d4:8f:87:42:70:18:54:54:ec:ee:21:
80:cd:1c:f4:5d:a1:98:59:64:6b:da:ad:69:7e:3b:
62:5a:91:bc:a4:90:44:31:76:3d:a6:03:11:1d:a6:
5b:56:df:6d:96:36:90:6f:37:71:f8:24:52:33:44:
06:c5:78:ea:68:02:96:e7:41:9a:5e:84:58:cb:33:
16:35:d0:47:97:1b:31:ff:fc:42:8c:d8:48:ad:ac:
4c:e6:60:1e:7b:d9:83:a8:42:b8:cc:2f:fd:80:42:
ed:3c:4f:99:61:fd:a9:0d:95:0e:6e:65:9c:32:4a:
0d:94:21:50:e9:40:4c:80:c4:28:23:0f:a3:d8:c8:
2a:8c:64:bf:13:53:55:b0:b5:6a:9a:4d:5e:b5:55:
76:f1:67:3c:7d:9f:dc:79:a2:60:3a:16:34:d6:95:
a7:36:08:c1:34:3a:ec:f7:26:bd:23:24:a8:38:7a:
e7:b3:b3:e0:05:d4:06:3d:3d:14:b2:92:1a:c3:3a:
36:a3:85:2c:c2:bc:5b:ad:56:94:eb:1e:a8:af:01:
fb:fb:6a:b6:2b:b2:54:93:ae:4a:8c:2f:23:0d:2d:
a2:9b:53:bb:86:8d:22:e5:55:0a:c2:6e:f6:99:08:
ec:0b:6a:48:96:a1:d3:2b:5f:99:ca:bb:24:64:d6:
5d:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:5A:53:68:A4:2E:10:24:0F:77:D6:56:25:7E:A5:01:C0:6E:2D:04
X509v3 Authority Key Identifier:
keyid:44:7C:52:D8:1E:DC:12:49:64:4A:D7:94:BE:02:8A:F9:0E:02:4A:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RHxS2B7cEklkSteUvgKK-Q4CShY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/761b17-6cb5-47fd-8c4f-efa6789fd972/1/11pTaKQuECQPd9ZWJX6lAcBuLQQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/761b17-6cb5-47fd-8c4f-efa6789fd972/1/RHxS2B7cEklkSteUvgKK-Q4CShY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.205.212.0/22
194.110.156.0/22
IPv6:
2001:67c:2674::/48
2a0b:a40::/29
Signature Algorithm: sha256WithRSAEncryption
17:3a:f5:44:08:0c:07:ab:ec:20:d3:ac:1e:17:72:fe:f9:fc:
b9:12:d7:aa:c5:1e:53:bb:73:e8:ba:ae:d1:54:4d:99:53:ab:
40:23:73:7a:a6:b3:75:0b:8f:0d:d3:a6:cf:70:3d:72:a4:c7:
fd:59:85:1e:56:97:be:a0:d8:e9:6d:dc:0d:d2:cf:89:d9:c5:
38:e9:00:09:74:88:08:70:bd:95:29:3e:a7:38:95:84:cd:5b:
a5:72:cd:8c:2d:2d:43:54:da:14:2c:5b:56:e7:49:de:d2:2c:
02:c9:52:f4:e9:70:07:2e:89:c0:7c:72:d0:69:e7:be:ca:fd:
fa:1c:58:2a:f2:64:70:a3:31:04:fb:71:bb:fc:ec:a7:56:07:
e1:34:d4:dc:60:74:02:16:b4:73:70:60:25:f3:9e:bf:f4:82:
93:f6:14:a3:23:7b:80:1b:e0:8f:5c:25:2f:76:9c:51:f2:91:
5c:93:0d:d1:a2:dd:f6:ae:95:f0:4b:48:41:b1:86:75:60:d8:
61:b2:17:eb:de:a6:ac:a3:82:dc:69:61:cd:6a:e0:75:9a:5d:
e7:80:f6:4a:4f:8a:63:a6:85:4e:43:6e:4c:97:26:33:35:5c:
b9:01:c2:14:45:43:98:7b:24:f1:13:7f:0c:10:6f:7c:47:bf:
59:7a:55:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:54:57 2024 by rpki-client on console-ams.rpki-client.org