Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/szm6l9JGqE-llppKd0R-qzrbslk.roa
File: szm6l9JGqE-llppKd0R-qzrbslk.roa (raw, json)
Hash identifier: M19C8G3o3ZNfSCLgVvLPddal1ABTSHXzqqLvfOIoAc0=
Subject key identifier: B3:39:BA:97:D2:46:A8:4F:A5:96:9A:4A:77:44:7E:AB:3A:DB:B2:59
Certificate issuer: /CN=6bc5de7d7255b7d58260c65a120b164ef10ef903
Certificate serial: 018CC64AAD5E4AB02786F750A9107F230997
Authority key identifier: 6B:C5:DE:7D:72:55:B7:D5:82:60:C6:5A:12:0B:16:4E:F1:0E:F9:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/szm6l9JGqE-llppKd0R-qzrbslk.roa
Signing time: Mon 01 Jan 2024 18:30:31 +0000
ROA not before: Mon 01 Jan 2024 18:30:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34471
IP address blocks: 217.119.141.0/24 maxlen: 24
194.104.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.mft
rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 09:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:ad:5e:4a:b0:27:86:f7:50:a9:10:7f:23:09:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bc5de7d7255b7d58260c65a120b164ef10ef903
Validity
Not Before: Jan 1 18:30:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b339ba97d246a84fa5969a4a77447eab3adbb259
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:6e:c5:f8:a4:0c:21:a2:c0:90:56:af:77:27:
02:ad:29:42:f4:2b:bf:94:f7:e1:44:45:8b:15:8b:
2a:28:be:92:2b:58:90:bd:40:ec:6c:0c:08:4c:70:
56:e2:61:b4:a2:1c:46:2f:28:37:c0:58:76:5b:d4:
47:6d:10:2e:64:d7:da:c3:60:98:fb:69:1e:65:a0:
96:d0:21:7f:da:e6:f2:74:0a:e4:98:88:8e:3c:80:
4b:f3:a9:2c:34:2f:2d:ec:58:3d:74:94:4c:10:bf:
4b:99:77:b5:32:7a:9f:d6:cd:c1:86:5e:8b:cf:c1:
71:13:ba:bf:e4:0a:65:57:2a:9b:a1:89:08:50:4e:
1f:c6:c4:a5:91:8b:68:99:8a:46:f6:13:e5:f0:82:
ac:a7:bd:08:28:3e:7b:ce:22:ec:d7:0f:c8:e5:f6:
cd:25:8d:a7:aa:be:92:5e:63:47:15:f4:ae:37:79:
4f:93:d8:67:cb:83:e4:3b:93:d4:1e:0b:c0:5b:67:
a5:d8:c8:74:3c:63:79:fe:02:61:c4:46:5b:96:3e:
46:5c:a8:a1:93:20:d8:b7:61:f0:06:47:85:9d:9f:
6d:6f:18:79:34:e7:79:94:34:6c:87:58:b7:ec:d7:
9e:12:e5:79:31:f7:8f:b4:01:fb:59:b3:39:14:21:
e5:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:39:BA:97:D2:46:A8:4F:A5:96:9A:4A:77:44:7E:AB:3A:DB:B2:59
X509v3 Authority Key Identifier:
keyid:6B:C5:DE:7D:72:55:B7:D5:82:60:C6:5A:12:0B:16:4E:F1:0E:F9:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/szm6l9JGqE-llppKd0R-qzrbslk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.104.231.0/24
217.119.141.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:26:32:01:6b:6e:c9:f7:6c:18:d5:ab:8f:11:a7:a5:f6:29:
88:f9:4b:b6:47:4d:d2:11:d1:25:38:95:2f:2c:19:fa:16:53:
93:fa:3d:3b:3c:ae:dd:d5:55:e5:9d:98:eb:dd:02:9b:4c:82:
e7:78:9f:5c:90:32:c9:4a:6c:60:0e:76:58:79:64:e8:49:4e:
b2:8c:02:c0:6b:2a:00:d4:0c:d6:f8:05:ab:b9:a3:ee:33:f8:
0f:c3:07:5e:aa:ff:a1:76:9e:38:22:4d:da:0c:f9:02:c7:d6:
eb:82:9a:de:cd:46:25:5a:fc:17:1b:4b:e3:e8:41:84:0c:c7:
26:1f:c2:fc:bf:02:52:bc:58:9f:67:58:71:12:38:6c:0c:0f:
4a:92:c8:30:b6:86:80:28:77:4b:a4:8c:c4:db:29:4a:b2:93:
ec:14:2c:66:f4:42:40:1b:3f:15:e5:1a:84:54:71:de:bb:43:
77:5b:fe:2f:00:55:a0:64:f4:4d:06:db:c3:6c:af:b9:49:c4:
8b:f4:f3:5a:5a:d0:1d:ba:a5:36:8d:8c:d2:57:7f:62:ee:ca:
3d:18:b5:ec:80:f1:de:d1:b2:b9:98:c7:8b:d4:a6:cd:d1:7f:
1a:b2:29:1f:86:78:27:63:57:e2:17:a6:b2:4c:e5:c4:a5:cc:
2a:2d:fd:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 12:31:25 2024 by rpki-client on console-fra.rpki-client.org