Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/IbhiVQVBlN7qbNcQHVNxqRaWsLo.roa
File: IbhiVQVBlN7qbNcQHVNxqRaWsLo.roa (raw, json)
Hash identifier: 4pMrJXngBQm15IBpeYt22Vvj4d163rxvNHpM6/gMdHU=
Subject key identifier: 21:B8:62:55:05:41:94:DE:EA:6C:D7:10:1D:53:71:A9:16:96:B0:BA
Certificate issuer: /CN=391a0ecc2b9beaba9eb76d5519fe787b4033fc12
Certificate serial: 018CC3B71693567017ED1A2E6661313D3513
Authority key identifier: 39:1A:0E:CC:2B:9B:EA:BA:9E:B7:6D:55:19:FE:78:7B:40:33:FC:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ORoOzCub6rqet21VGf54e0Az_BI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/IbhiVQVBlN7qbNcQHVNxqRaWsLo.roa
Signing time: Mon 01 Jan 2024 06:30:05 +0000
ROA not before: Mon 01 Jan 2024 06:30:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212221
IP address blocks: 91.132.4.0/23 maxlen: 23
89.45.206.0/23 maxlen: 23
89.45.200.0/23 maxlen: 23
89.45.200.0/21 maxlen: 21
89.45.203.0/24 maxlen: 24
89.45.204.0/23 maxlen: 23
89.45.202.0/23 maxlen: 23
212.102.106.0/24 maxlen: 24
2a09:b780::/48 maxlen: 48
2a09:b780:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/ORoOzCub6rqet21VGf54e0Az_BI.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/ORoOzCub6rqet21VGf54e0Az_BI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ORoOzCub6rqet21VGf54e0Az_BI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 17:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:16:93:56:70:17:ed:1a:2e:66:61:31:3d:35:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=391a0ecc2b9beaba9eb76d5519fe787b4033fc12
Validity
Not Before: Jan 1 06:30:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=21b86255054194deea6cd7101d5371a91696b0ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:84:6c:06:14:1c:a4:51:99:cb:f4:e7:d5:be:
0e:a2:9f:64:a7:90:dd:6f:dc:b1:7f:26:e5:c3:40:
f2:6a:82:c7:c6:2d:9f:d7:18:36:2c:e9:2f:f2:66:
15:bc:78:22:c0:9b:3e:1c:1d:30:9c:be:4d:14:e7:
48:ad:dd:91:38:a0:ab:d8:f5:71:16:97:20:c2:c1:
b2:84:9c:fa:01:05:aa:fc:25:6e:74:18:81:69:1b:
e1:5b:c4:a0:40:d3:e7:12:57:9e:09:a7:3a:80:f7:
31:0a:39:f9:e6:4f:00:c5:21:02:30:c3:9f:3c:81:
d5:a0:09:5c:f3:9b:1e:74:32:92:95:15:ad:7a:e7:
ff:e8:a5:a4:84:84:dc:9d:95:86:9b:05:fb:9c:02:
b9:55:9b:d0:fb:70:c6:68:a6:23:5f:e8:56:de:d1:
85:33:3d:2b:ba:80:c6:87:6a:ae:7b:0a:e2:ee:4e:
d0:df:c4:3c:2b:d5:15:d3:5c:d8:d1:62:e0:f0:85:
12:9f:1b:88:e0:07:87:c4:e1:ba:97:f9:59:50:b9:
6a:bb:1b:f1:e4:c9:4c:cf:4e:c8:61:45:92:af:fe:
14:8e:af:ff:f3:52:e8:3e:8a:e0:ff:2d:97:f4:89:
ab:c6:68:1c:84:05:be:cb:ff:86:14:69:1c:62:f8:
0e:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:B8:62:55:05:41:94:DE:EA:6C:D7:10:1D:53:71:A9:16:96:B0:BA
X509v3 Authority Key Identifier:
keyid:39:1A:0E:CC:2B:9B:EA:BA:9E:B7:6D:55:19:FE:78:7B:40:33:FC:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORoOzCub6rqet21VGf54e0Az_BI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/IbhiVQVBlN7qbNcQHVNxqRaWsLo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/ORoOzCub6rqet21VGf54e0Az_BI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.45.200.0/21
91.132.4.0/23
212.102.106.0/24
IPv6:
2a09:b780::/47
Signature Algorithm: sha256WithRSAEncryption
8d:1c:7c:c0:95:5b:a7:40:56:86:52:72:9f:82:ec:96:5c:d7:
6b:f8:1c:37:04:19:d4:c5:31:2a:6c:86:bd:43:5c:21:ec:aa:
81:d2:a4:35:ef:94:c6:b7:81:9c:fd:cc:6e:c3:25:99:cf:ab:
f5:be:75:84:e0:73:db:8b:a3:f4:f7:04:52:5d:74:98:d7:88:
18:cc:70:04:b7:2b:df:89:d5:e0:4f:13:c5:a0:73:67:5d:5a:
ea:7e:ad:f3:17:ac:75:28:05:fe:db:8a:f0:5b:09:9d:81:d7:
36:b9:91:de:3d:fc:17:b0:9c:a3:01:de:b1:4d:f4:0d:65:8c:
74:47:eb:8e:99:27:f6:23:0e:ff:ee:40:a0:8b:39:eb:db:fd:
f6:04:6e:8d:eb:ce:e0:6a:16:f3:a5:73:a6:bd:4b:4f:82:d5:
94:9c:6e:72:d1:d6:4a:68:69:10:6d:d2:df:7c:ec:49:82:25:
94:3e:7b:41:bb:56:05:1a:8b:f2:bc:6b:37:25:62:21:a5:96:
fd:e8:df:bf:27:24:90:e3:95:0a:63:fe:0e:42:f4:2f:10:ac:
e4:0d:40:09:10:79:24:49:d3:38:5e:eb:1e:ad:95:97:1a:83:
65:61:3f:00:f5:43:33:74:48:77:81:47:40:70:a8:d1:0e:86:
f1:5d:61:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:34:50 2024 by rpki-client on console-ams.rpki-client.org