Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/tT6G1kmy4wELrX55VsxjdI0Dpfs.roa
File: tT6G1kmy4wELrX55VsxjdI0Dpfs.roa (raw, json)
Hash identifier: ydTwcLlkud8mr4rvJlY8/u612SABzbr+CHyOrZrq0jE=
Subject key identifier: B5:3E:86:D6:49:B2:E3:01:0B:AD:7E:79:56:CC:63:74:8D:03:A5:FB
Certificate issuer: /CN=e8403b5e45cd58be5f6c5d33fa565ab49223e3db
Certificate serial: 018CC795839E00E98529AB9E247F62C05492
Authority key identifier: E8:40:3B:5E:45:CD:58:BE:5F:6C:5D:33:FA:56:5A:B4:92:23:E3:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6EA7XkXNWL5fbF0z-lZatJIj49s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/tT6G1kmy4wELrX55VsxjdI0Dpfs.roa
Signing time: Tue 02 Jan 2024 00:31:53 +0000
ROA not before: Tue 02 Jan 2024 00:31:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12541
IP address blocks: 212.80.160.0/19 maxlen: 24
213.170.32.0/19 maxlen: 24
185.123.120.0/22 maxlen: 24
212.66.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/6EA7XkXNWL5fbF0z-lZatJIj49s.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/6EA7XkXNWL5fbF0z-lZatJIj49s.mft
rsync://rpki.ripe.net/repository/DEFAULT/6EA7XkXNWL5fbF0z-lZatJIj49s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:83:9e:00:e9:85:29:ab:9e:24:7f:62:c0:54:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8403b5e45cd58be5f6c5d33fa565ab49223e3db
Validity
Not Before: Jan 2 00:31:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b53e86d649b2e3010bad7e7956cc63748d03a5fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:b5:68:f6:71:49:38:51:fd:38:7f:51:66:ed:
57:ca:00:ff:88:e3:3c:82:15:6f:82:17:fa:f2:1b:
bf:c7:a9:0e:bf:c0:c7:5f:6c:a8:ec:aa:59:17:f7:
82:2a:1f:7a:ce:7a:45:55:b9:6d:ce:b4:69:3f:84:
79:cc:d6:6c:d6:94:6e:bd:c7:ce:df:61:bd:2c:c1:
96:62:f1:69:1f:bb:31:2d:35:39:68:ba:dc:cb:15:
4b:ff:aa:11:83:d0:15:d4:4a:a2:c9:05:08:d0:8d:
9d:7d:7a:ae:e3:8f:bd:de:1b:d0:ba:cf:9c:0f:89:
ad:09:40:f7:68:6b:55:50:11:e0:be:9f:f2:19:0e:
9d:72:1e:7a:b1:c3:e9:e1:1e:0d:2c:7a:49:d7:59:
74:ea:ff:e2:f0:46:08:6e:45:2a:7d:2d:98:e1:e7:
6d:62:1f:58:05:80:cf:38:f7:f0:8f:cc:6b:db:59:
91:b2:2e:b3:72:e7:b6:2d:44:38:d0:c9:db:81:9e:
a5:b3:ee:42:67:31:03:23:83:e9:e9:3d:de:ea:7e:
24:e4:34:9e:0c:31:1d:8e:f9:54:f2:df:33:d4:7d:
5f:91:7d:7c:35:99:48:fe:b0:c1:01:4b:4f:e0:b2:
61:96:d2:62:a1:ad:6e:4d:8d:df:b2:db:26:0e:51:
98:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:3E:86:D6:49:B2:E3:01:0B:AD:7E:79:56:CC:63:74:8D:03:A5:FB
X509v3 Authority Key Identifier:
keyid:E8:40:3B:5E:45:CD:58:BE:5F:6C:5D:33:FA:56:5A:B4:92:23:E3:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6EA7XkXNWL5fbF0z-lZatJIj49s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/tT6G1kmy4wELrX55VsxjdI0Dpfs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/6EA7XkXNWL5fbF0z-lZatJIj49s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.123.120.0/22
212.66.160.0/24
212.80.160.0/19
213.170.32.0/19
Signature Algorithm: sha256WithRSAEncryption
9c:ab:f9:2f:b7:ec:af:3b:fc:db:bd:9a:9c:1f:aa:99:f5:db:
10:a7:19:b2:1c:df:62:bf:4d:64:cc:3d:39:8b:19:4a:e3:11:
23:8d:de:80:d3:b5:85:56:e4:01:7e:51:ac:11:33:1f:63:20:
c4:3b:57:2f:24:32:41:c1:e4:dc:92:bb:05:05:49:55:42:0e:
6c:1e:ef:18:38:70:19:33:73:d9:e9:cd:b0:67:94:86:63:99:
1d:a5:e8:72:a0:5b:d8:6b:ea:3e:a6:ec:f5:c0:d4:d0:62:09:
c8:54:a4:c3:90:9a:3e:d6:0d:46:ce:34:e0:1f:64:bd:97:ad:
1f:d8:61:4a:3f:dc:59:22:0a:fb:1f:f4:12:f8:b9:34:0b:f9:
04:1e:c6:1c:0a:7a:83:66:7e:e7:86:af:d2:c9:6d:61:48:7d:
88:0d:74:31:b6:03:62:2e:ba:72:a3:21:28:2f:87:0c:0a:b0:
18:2d:61:ff:8f:b0:c1:cd:0a:36:24:40:5c:8b:8f:73:cb:d0:
79:e1:84:c3:45:ff:58:d0:88:2d:69:2a:6a:b6:bb:ff:2c:26:
84:88:a0:37:c6:d3:1b:73:20:79:a1:b5:da:7e:a8:ee:50:c7:
3a:5a:00:e0:ed:7c:3e:c6:57:08:f7:05:7e:41:0c:eb:ac:1a:
77:b2:42:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:54:04 2024 by rpki-client on console-fra.rpki-client.org