Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/151c6c-617c-4643-9f6e-69809d8b9c20/1/lETRbrtL0TlVaWU8p_6rCCtB5AE.roa
File: lETRbrtL0TlVaWU8p_6rCCtB5AE.roa (raw, json)
Hash identifier: jmD1Q4IwmbShlIUzUhp9qUuw79Z8sh58zjA+pNSmAb8=
Subject key identifier: 94:44:D1:6E:BB:4B:D1:39:55:69:65:3C:A7:FE:AB:08:2B:41:E4:01
Certificate issuer: /CN=4ccc60495b2a34d89211cc1c79524eab61ba1656
Certificate serial: 018CC6B8E7A2428C3328E13E1538104A2992
Authority key identifier: 4C:CC:60:49:5B:2A:34:D8:92:11:CC:1C:79:52:4E:AB:61:BA:16:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TMxgSVsqNNiSEcwceVJOq2G6FlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/151c6c-617c-4643-9f6e-69809d8b9c20/1/lETRbrtL0TlVaWU8p_6rCCtB5AE.roa
Signing time: Mon 01 Jan 2024 20:30:55 +0000
ROA not before: Mon 01 Jan 2024 20:30:55 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48921
IP address blocks: 195.20.32.0/24 maxlen: 24
83.223.48.0/22 maxlen: 22
2a04:16c0:201::/48 maxlen: 48
2a04:16c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/151c6c-617c-4643-9f6e-69809d8b9c20/1/TMxgSVsqNNiSEcwceVJOq2G6FlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/151c6c-617c-4643-9f6e-69809d8b9c20/1/TMxgSVsqNNiSEcwceVJOq2G6FlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/TMxgSVsqNNiSEcwceVJOq2G6FlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 07:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:e7:a2:42:8c:33:28:e1:3e:15:38:10:4a:29:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ccc60495b2a34d89211cc1c79524eab61ba1656
Validity
Not Before: Jan 1 20:30:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9444d16ebb4bd1395569653ca7feab082b41e401
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d3:ba:9e:78:63:ff:d4:05:6d:43:9f:7a:50:
9e:2e:57:1a:2e:5c:3b:89:4a:70:22:df:25:8e:42:
ba:04:96:dc:98:d4:05:7b:28:a0:1a:08:9c:68:16:
77:0a:a1:eb:73:80:73:97:b5:99:86:29:7e:dc:32:
4e:0b:07:47:6a:82:0f:b4:89:37:11:2d:c6:16:e2:
2e:3a:a1:95:1d:2b:1b:29:5b:d2:30:2f:d5:40:47:
2c:8d:ed:78:db:d5:e0:b2:2d:2d:42:9e:8b:33:76:
af:2c:b5:a4:e9:fb:45:f9:5e:e2:34:5c:b4:cb:78:
e0:ad:ec:c9:d5:85:e6:79:e5:21:27:4b:9f:ca:28:
17:e0:53:15:f0:e8:90:0d:9f:51:02:34:8b:76:be:
87:42:ca:e7:43:8b:89:51:b8:39:cd:17:0f:bc:93:
72:17:3a:56:13:82:bc:c9:74:b5:36:d9:e3:81:8e:
85:b6:c6:df:e2:ad:78:8a:4d:96:bb:83:24:a1:d2:
fe:93:d1:2b:76:bf:b0:30:06:f3:0d:26:65:ce:4d:
de:42:d5:5b:57:cf:77:38:e7:27:d9:af:10:6a:d2:
07:be:a8:02:e4:0e:b5:30:8c:bf:f9:70:6b:e2:6b:
47:81:8f:d2:df:d2:dc:3b:1a:07:89:fb:c3:f5:31:
10:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:44:D1:6E:BB:4B:D1:39:55:69:65:3C:A7:FE:AB:08:2B:41:E4:01
X509v3 Authority Key Identifier:
keyid:4C:CC:60:49:5B:2A:34:D8:92:11:CC:1C:79:52:4E:AB:61:BA:16:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TMxgSVsqNNiSEcwceVJOq2G6FlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/151c6c-617c-4643-9f6e-69809d8b9c20/1/lETRbrtL0TlVaWU8p_6rCCtB5AE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/151c6c-617c-4643-9f6e-69809d8b9c20/1/TMxgSVsqNNiSEcwceVJOq2G6FlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.223.48.0/22
195.20.32.0/24
IPv6:
2a04:16c0::/29
Signature Algorithm: sha256WithRSAEncryption
50:8a:e9:e7:c9:8c:b4:7c:07:1e:fb:b7:4e:e1:3c:e3:a3:b7:
b6:63:51:cf:87:1c:fa:56:5c:a9:e9:f2:c8:35:6f:a7:06:d5:
76:d7:f1:a6:b8:f6:e3:84:76:62:2d:8e:8e:d5:26:51:24:a6:
f4:90:c2:e3:b0:a1:82:2e:de:0b:d7:c7:68:ee:3f:53:9f:da:
6f:e3:42:bf:b3:f0:4f:af:20:1c:97:d9:d6:ca:3b:f7:7d:97:
84:e7:db:19:cc:c6:24:f0:7c:08:2e:09:07:39:c1:81:df:79:
8a:bc:66:24:b2:f7:11:4b:4b:8c:81:34:28:c2:51:45:b8:90:
27:c7:0b:c5:f6:1d:7b:06:6e:92:9b:be:12:ea:a2:08:74:9a:
35:e4:82:f4:42:ed:6d:a9:66:f9:63:ab:6a:46:89:34:f8:ce:
32:f9:9e:7b:98:c9:59:26:0a:3b:54:9f:2e:6e:a1:a4:e7:bf:
9e:55:76:07:5e:71:11:6b:59:36:2b:22:18:9c:3e:6a:cd:2f:
96:81:ba:b9:79:84:23:86:ff:c2:bd:db:54:2e:f3:3d:4e:de:
b8:0d:f8:f4:cd:dd:3c:fc:78:02:7a:33:e3:e1:b0:52:3e:a9:
35:12:a8:82:5b:20:83:1a:3c:79:66:38:33:bd:05:b8:25:85:
e8:62:f9:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:06:28 2024 by rpki-client on console-ams.rpki-client.org