Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/19f229-a90f-42c4-980b-1550f2ac87b3/1/T7AFiULZY1v4ocogHV4_WcRhzWs.roa
File: T7AFiULZY1v4ocogHV4_WcRhzWs.roa (raw, json)
Hash identifier: mHCeVdKJSBeM0aZhbicQr5voYAXOTOWlAx6vEReYFTQ=
Subject key identifier: 4F:B0:05:89:42:D9:63:5B:F8:A1:CA:20:1D:5E:3F:59:C4:61:CD:6B
Certificate issuer: /CN=a11f205979d2fbde95756a46a0f2739d7816d459
Certificate serial: 018CC2DB4E196220079A1B35344EFB5B6A9B
Authority key identifier: A1:1F:20:59:79:D2:FB:DE:95:75:6A:46:A0:F2:73:9D:78:16:D4:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oR8gWXnS-96VdWpGoPJznXgW1Fk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/19f229-a90f-42c4-980b-1550f2ac87b3/1/T7AFiULZY1v4ocogHV4_WcRhzWs.roa
Signing time: Mon 01 Jan 2024 02:30:01 +0000
ROA not before: Mon 01 Jan 2024 02:30:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60414
IP address blocks: 185.31.136.0/22 maxlen: 22
85.194.238.0/23 maxlen: 23
89.44.211.0/24 maxlen: 24
2a00:bbe0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/19f229-a90f-42c4-980b-1550f2ac87b3/1/oR8gWXnS-96VdWpGoPJznXgW1Fk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/19f229-a90f-42c4-980b-1550f2ac87b3/1/oR8gWXnS-96VdWpGoPJznXgW1Fk.mft
rsync://rpki.ripe.net/repository/DEFAULT/oR8gWXnS-96VdWpGoPJznXgW1Fk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 05:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:4e:19:62:20:07:9a:1b:35:34:4e:fb:5b:6a:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a11f205979d2fbde95756a46a0f2739d7816d459
Validity
Not Before: Jan 1 02:30:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4fb0058942d9635bf8a1ca201d5e3f59c461cd6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:a6:6d:dc:5d:5b:4d:6e:7a:a2:81:8f:5a:29:
f0:aa:f5:3e:2a:3b:9b:c3:3a:44:e9:1c:5a:5a:21:
c5:52:13:c2:f4:a8:37:ab:ee:ff:6a:b7:db:c5:e4:
f0:e9:01:64:86:d0:85:6b:4e:bf:82:8d:f9:a6:82:
2f:04:a4:09:ff:21:2a:1d:a9:a9:38:6c:ab:91:f1:
6a:77:a8:44:22:7c:ad:e9:36:59:2b:9a:e7:57:74:
d0:5b:23:fc:8b:20:99:e7:54:f0:8c:0d:48:d9:03:
35:b3:a8:96:2e:27:a0:d2:f6:5b:42:1a:88:14:b9:
52:3f:c4:24:6e:61:06:6f:aa:2d:4d:a9:5f:82:88:
92:58:43:62:36:81:d9:e1:35:51:74:8f:74:96:b7:
31:9d:f4:65:7a:49:55:3e:d9:72:4d:55:a8:a7:a8:
ca:bf:81:59:50:6d:63:90:11:d5:e1:d0:fd:cf:aa:
c7:5b:ca:4d:d0:7d:f3:27:0a:f7:bd:e2:45:57:c6:
19:b8:a7:9c:04:8f:cc:92:bf:92:d1:42:e5:85:5b:
d6:ce:16:d9:19:2e:f4:46:5f:6b:d7:b6:c6:46:04:
81:86:05:b7:4c:3d:c9:c0:8b:14:c8:f6:ed:fc:1d:
b4:21:9c:ab:8f:f1:32:91:fc:e5:e0:11:e0:b2:f7:
fc:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:B0:05:89:42:D9:63:5B:F8:A1:CA:20:1D:5E:3F:59:C4:61:CD:6B
X509v3 Authority Key Identifier:
keyid:A1:1F:20:59:79:D2:FB:DE:95:75:6A:46:A0:F2:73:9D:78:16:D4:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oR8gWXnS-96VdWpGoPJznXgW1Fk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/19f229-a90f-42c4-980b-1550f2ac87b3/1/T7AFiULZY1v4ocogHV4_WcRhzWs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/19f229-a90f-42c4-980b-1550f2ac87b3/1/oR8gWXnS-96VdWpGoPJznXgW1Fk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.194.238.0/23
89.44.211.0/24
185.31.136.0/22
IPv6:
2a00:bbe0::/29
Signature Algorithm: sha256WithRSAEncryption
6b:06:29:0c:49:cf:c6:b2:dd:e1:46:3f:63:41:b3:c1:85:fd:
df:d1:5c:bc:ef:60:61:91:49:cc:f4:b6:bb:80:67:b9:42:24:
e6:b3:9d:02:2b:19:10:19:aa:d3:a7:ae:4c:64:0b:2a:94:8c:
e9:d5:14:df:35:c4:c9:a9:eb:4c:9e:f0:b1:d7:e7:c7:44:64:
8b:0d:6f:5e:b0:59:b1:0c:cf:be:86:aa:db:67:84:eb:57:81:
a3:49:f9:69:8e:dc:78:21:22:a7:ee:3c:a8:fd:1d:14:6e:89:
66:c7:5d:f5:f6:e1:5a:21:34:7b:94:59:2e:ae:1f:fc:56:c0:
de:00:c0:44:fb:07:85:4e:ff:9b:81:46:ea:68:c8:ac:17:fd:
a9:14:08:48:5a:b8:fc:7f:1f:64:cb:4d:7b:e1:6c:7f:39:0a:
f5:aa:af:9c:29:48:a3:ba:50:29:eb:80:bb:0d:e8:18:25:5d:
7f:ee:b0:98:15:00:01:18:d3:b6:20:c2:16:51:a0:49:3e:15:
10:42:9f:36:50:67:ba:89:9c:3c:73:6b:cf:f3:36:03:8a:51:
ba:27:4b:77:1f:94:e2:b6:9c:12:d5:68:ae:dd:05:0a:1e:6b:
91:00:ff:97:24:a6:ed:a3:15:5e:c7:a7:0d:e3:ee:e5:73:27:
25:81:84:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 14:17:05 2024 by rpki-client on console-ams.rpki-client.org