Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/upLc9nvrbE6_nZf1y-YWhvGHXpA.roa
File: upLc9nvrbE6_nZf1y-YWhvGHXpA.roa (raw, json)
Hash identifier: ij11dLP8B4HUJLd0AINC2VE/PBgDjPlTE666mjwPY4c=
Subject key identifier: BA:92:DC:F6:7B:EB:6C:4E:BF:9D:97:F5:CB:E6:16:86:F1:87:5E:90
Certificate issuer: /CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Certificate serial: 0193012376DF1598BBA45FD530D3A42D1773
Authority key identifier: D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/upLc9nvrbE6_nZf1y-YWhvGHXpA.roa
Signing time: Wed 06 Nov 2024 11:02:01 +0000
ROA not before: Wed 06 Nov 2024 11:02:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213138
IP address blocks: 91.215.48.0/22 maxlen: 24
185.19.188.0/23 maxlen: 24
185.19.190.0/24 maxlen: 24
185.240.80.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.mft
rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:01:23:76:df:15:98:bb:a4:5f:d5:30:d3:a4:2d:17:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Validity
Not Before: Nov 6 11:02:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ba92dcf67beb6c4ebf9d97f5cbe61686f1875e90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:24:28:b2:51:eb:79:4d:3a:5e:f2:9e:b2:6c:
1b:0a:91:19:3b:4d:80:8e:17:f7:c1:d9:2e:cf:ea:
21:32:7a:29:bd:4f:e1:67:44:f6:d8:ab:d3:98:b2:
09:d9:f2:8a:19:0c:ce:23:08:d2:87:da:40:59:a9:
41:7f:5c:8a:1d:0d:ed:4f:47:1d:10:e4:e1:09:53:
4b:7c:61:4c:01:93:64:1c:ce:8a:b6:a4:4b:b8:61:
10:0d:ed:f7:4d:d5:a6:73:02:5e:c4:d7:85:b5:e9:
9f:32:8c:13:f9:83:8e:fd:9e:ee:b0:e6:2d:37:8d:
a9:21:49:bd:fc:d8:e5:d0:bd:1a:53:7c:15:db:e5:
78:84:49:63:40:2c:d0:e6:80:e9:88:71:94:d5:e0:
c3:2b:fb:42:0c:4d:cf:dd:73:a4:7a:9f:16:87:22:
c8:39:72:e4:73:c4:64:ad:00:15:fa:8f:2f:fb:0b:
ee:6e:34:09:f0:fa:1d:32:ab:14:6a:56:b0:24:74:
fc:ea:1c:6c:f5:a8:c2:36:bd:03:96:f9:81:7e:e1:
ae:fd:30:2f:94:75:5e:44:00:e2:ed:c7:94:a7:ad:
b9:66:85:9e:61:55:c7:69:2e:3f:6e:06:5b:5e:9e:
3e:4b:03:d8:03:50:a0:d1:77:2b:54:2a:01:18:60:
7e:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:92:DC:F6:7B:EB:6C:4E:BF:9D:97:F5:CB:E6:16:86:F1:87:5E:90
X509v3 Authority Key Identifier:
keyid:D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/upLc9nvrbE6_nZf1y-YWhvGHXpA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.215.48.0/22
185.19.188.0-185.19.190.255
185.240.80.0/22
Signature Algorithm: sha256WithRSAEncryption
11:ea:c5:b9:ed:12:67:8c:81:48:79:29:2d:b7:1f:31:33:d1:
69:39:d4:77:3c:fc:6c:b9:3b:46:33:c3:9c:c2:77:2c:a7:5e:
06:63:f1:f2:81:4e:c1:8c:f1:36:83:1d:11:7a:58:f0:7a:89:
aa:e8:b8:f6:f7:ab:56:01:5e:7a:14:c1:62:78:76:50:48:3a:
ca:2b:bd:56:97:20:63:9d:61:c6:25:03:18:db:8a:90:26:0c:
13:6f:32:a6:90:72:74:9d:39:15:ca:05:66:91:04:39:5f:73:
86:f7:a5:ab:7d:51:a7:99:2c:d3:ae:cd:87:7f:55:25:87:e1:
33:84:47:9f:13:96:43:a0:8d:bb:8e:f7:f4:50:53:51:e3:2b:
6d:97:45:a2:17:e9:62:64:75:12:47:e8:59:e6:6a:45:d4:12:
81:2f:20:55:38:c9:32:aa:0c:00:7c:61:71:19:cb:4a:97:57:
23:22:3d:20:84:4c:11:e2:bf:bf:38:54:e0:9f:cb:e1:be:14:
49:be:9c:9d:7f:76:9b:11:4f:db:f6:ec:c1:80:5d:f2:c5:7e:
ab:95:4f:d1:95:01:2c:4c:6d:db:07:15:24:60:65:f6:cd:a7:
95:c7:d7:f6:61:41:62:01:55:e2:82:ea:01:e5:22:86:27:0d:
79:7b:79:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:24:34 2024 by rpki-client on console-fra.rpki-client.org