Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/3e72ed-1d65-4982-ad9a-9c37478a593f/1/OfvB4ee17sKpCCe1yumqdMFS5kw.roa
File: OfvB4ee17sKpCCe1yumqdMFS5kw.roa (raw, json)
Hash identifier: F89+ZJMqjzhlOuDccejBpmbO0rjbt0D9cT4qFCSaOZ0=
Subject key identifier: 39:FB:C1:E1:E7:B5:EE:C2:A9:08:27:B5:CA:E9:AA:74:C1:52:E6:4C
Certificate issuer: /CN=5ceb0ebd878b77d42f2ca9dd08f70c323c5d03db
Certificate serial: 018CC801159C2908A8A950E442712C4D3BE2
Authority key identifier: 5C:EB:0E:BD:87:8B:77:D4:2F:2C:A9:DD:08:F7:0C:32:3C:5D:03:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XOsOvYeLd9QvLKndCPcMMjxdA9s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/3e72ed-1d65-4982-ad9a-9c37478a593f/1/OfvB4ee17sKpCCe1yumqdMFS5kw.roa
Signing time: Tue 02 Jan 2024 02:29:23 +0000
ROA not before: Tue 02 Jan 2024 02:29:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44700
IP address blocks: 185.6.68.0/22 maxlen: 24
88.151.64.0/21 maxlen: 24
81.27.224.0/22 maxlen: 24
185.59.12.0/22 maxlen: 24
95.129.208.0/21 maxlen: 24
93.89.0.0/22 maxlen: 24
2a02:21e0::/32 maxlen: 48
2a02:17f8::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/3e72ed-1d65-4982-ad9a-9c37478a593f/1/XOsOvYeLd9QvLKndCPcMMjxdA9s.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/3e72ed-1d65-4982-ad9a-9c37478a593f/1/XOsOvYeLd9QvLKndCPcMMjxdA9s.mft
rsync://rpki.ripe.net/repository/DEFAULT/XOsOvYeLd9QvLKndCPcMMjxdA9s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 07:02:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:15:9c:29:08:a8:a9:50:e4:42:71:2c:4d:3b:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ceb0ebd878b77d42f2ca9dd08f70c323c5d03db
Validity
Not Before: Jan 2 02:29:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=39fbc1e1e7b5eec2a90827b5cae9aa74c152e64c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:39:38:8b:82:e7:ce:a8:e2:79:e7:ee:4a:05:
ad:65:7d:52:24:c9:ed:c4:85:67:e4:b8:5d:d4:c6:
8c:a2:bc:f5:90:06:f5:a6:65:3d:99:27:43:59:3d:
d3:3e:d7:63:67:9d:a4:e1:ef:42:54:08:3a:03:8c:
8f:8d:8b:16:68:3e:0b:5a:02:68:a9:d5:f9:a0:1b:
4a:bb:b8:1a:4e:70:1b:f6:0a:5d:ba:76:d4:48:16:
19:0c:e5:ac:af:88:b0:36:69:3c:56:80:a2:09:f0:
9e:04:e2:15:a3:dc:0e:20:5e:8c:56:3e:3a:81:08:
54:98:59:fa:1c:2b:b5:c9:b4:19:cb:14:53:9e:2c:
a0:f9:ee:7d:8c:7f:06:17:51:2d:df:2d:04:fe:18:
70:16:7e:b3:46:0c:d1:43:3e:ca:f0:b4:cb:2b:ef:
7f:11:af:0e:e7:1d:e7:ee:e9:65:2a:ff:6d:1e:0b:
d8:73:cd:93:0e:fe:6b:6f:c5:44:ce:6c:2c:5a:0e:
81:85:78:2b:fa:7d:21:50:c5:1b:e4:8a:12:36:7a:
f2:2e:98:e1:b3:ad:47:6b:1b:c2:29:07:df:96:e8:
00:14:be:ff:cd:50:97:a7:b3:91:83:dc:7f:17:73:
28:6e:18:13:6b:c1:f5:56:08:a8:41:30:37:45:e0:
1d:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:FB:C1:E1:E7:B5:EE:C2:A9:08:27:B5:CA:E9:AA:74:C1:52:E6:4C
X509v3 Authority Key Identifier:
keyid:5C:EB:0E:BD:87:8B:77:D4:2F:2C:A9:DD:08:F7:0C:32:3C:5D:03:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XOsOvYeLd9QvLKndCPcMMjxdA9s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/3e72ed-1d65-4982-ad9a-9c37478a593f/1/OfvB4ee17sKpCCe1yumqdMFS5kw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/3e72ed-1d65-4982-ad9a-9c37478a593f/1/XOsOvYeLd9QvLKndCPcMMjxdA9s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.27.224.0/22
88.151.64.0/21
93.89.0.0/22
95.129.208.0/21
185.6.68.0/22
185.59.12.0/22
IPv6:
2a02:17f8::/32
2a02:21e0::/32
Signature Algorithm: sha256WithRSAEncryption
33:e3:b7:b5:9e:24:bd:d4:68:3d:9e:8d:ed:54:1e:ab:d2:44:
23:40:55:7f:0e:d9:d3:da:fa:0d:74:79:aa:bf:9e:0e:44:d2:
37:8f:57:93:bf:2b:81:be:b5:85:8b:46:67:80:13:a4:1f:fb:
31:e7:f4:e8:33:73:2e:14:9b:18:98:8e:49:6a:60:8a:51:cb:
0b:e1:22:1d:5d:69:b7:05:17:ae:c3:93:a3:77:bf:a8:ca:19:
41:2c:4e:b5:14:d2:db:68:ed:70:c3:d8:b5:2b:4f:ce:15:a2:
bf:bd:5d:3e:24:9f:11:07:4e:9d:ef:ea:1a:65:be:11:37:35:
57:a7:16:27:53:1c:a6:fc:5a:16:58:0b:a0:c1:2d:73:0d:64:
7a:2b:cc:9c:bb:9c:3d:6f:9f:1a:e7:2c:23:31:03:3b:51:bd:
f4:25:5a:32:10:c8:46:db:10:69:b8:ca:c2:d2:81:92:ae:98:
e4:24:0f:94:b7:fd:e2:69:02:b7:0c:ef:1c:d9:8c:7c:0d:45:
ab:76:21:19:b8:a2:79:d2:76:21:cd:d7:80:3d:54:be:c4:6a:
a6:7e:15:cc:99:3f:b8:e5:5c:68:1f:98:c5:f9:ec:ae:3e:3c:
c2:90:48:ef:9c:a9:0a:30:0a:96:af:f9:6e:33:5e:bc:2f:81:
ca:f7:fc:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:57:58 2024 by rpki-client on console-ams.rpki-client.org