Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/179ed5-d253-4255-9017-88df125ba663/1/1sz7PGY8zY0JbRGXSd2rleyTANM.roa
File: 1sz7PGY8zY0JbRGXSd2rleyTANM.roa (raw, json)
Hash identifier: kMItTuZuWYX3G9TI6akhYrTJaSksgCYU3Hrsae6Dn08=
Subject key identifier: D6:CC:FB:3C:66:3C:CD:8D:09:6D:11:97:49:DD:AB:95:EC:93:00:D3
Certificate issuer: /CN=4ce98606bc9a5d44074ff8cbedcbdbcfc35f0562
Certificate serial: 018CC26D39D9D7404C1BBC87E67B7F37A9A1
Authority key identifier: 4C:E9:86:06:BC:9A:5D:44:07:4F:F8:CB:ED:CB:DB:CF:C3:5F:05:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TOmGBryaXUQHT_jL7cvbz8NfBWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/179ed5-d253-4255-9017-88df125ba663/1/1sz7PGY8zY0JbRGXSd2rleyTANM.roa
Signing time: Mon 01 Jan 2024 00:29:47 +0000
ROA not before: Mon 01 Jan 2024 00:29:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31510
IP address blocks: 212.56.160.0/19 maxlen: 19
185.72.72.0/22 maxlen: 22
83.175.126.0/24 maxlen: 24
156.67.200.0/21 maxlen: 21
156.67.200.0/24 maxlen: 24
83.175.64.0/18 maxlen: 18
83.175.86.0/24 maxlen: 24
2a02:6180::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/179ed5-d253-4255-9017-88df125ba663/1/TOmGBryaXUQHT_jL7cvbz8NfBWI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/179ed5-d253-4255-9017-88df125ba663/1/TOmGBryaXUQHT_jL7cvbz8NfBWI.mft
rsync://rpki.ripe.net/repository/DEFAULT/TOmGBryaXUQHT_jL7cvbz8NfBWI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 07:03:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:39:d9:d7:40:4c:1b:bc:87:e6:7b:7f:37:a9:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ce98606bc9a5d44074ff8cbedcbdbcfc35f0562
Validity
Not Before: Jan 1 00:29:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d6ccfb3c663ccd8d096d119749ddab95ec9300d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:79:8c:27:ec:33:aa:c8:f8:07:ae:77:84:bf:
a2:ba:9e:23:48:36:85:49:92:a5:1b:9f:b9:9d:ce:
b8:cf:b6:77:81:d0:c4:c5:e3:ca:53:84:51:85:c2:
1f:b5:07:41:83:64:69:c0:96:48:45:84:5d:06:ae:
7a:1d:32:74:31:12:9b:7a:16:ef:74:95:fe:91:b3:
4f:b5:4a:3c:80:66:de:9f:5e:44:cf:43:0e:f4:4d:
e6:54:3c:58:a9:6d:0c:06:33:fe:db:da:dc:33:f7:
96:3c:cf:87:57:62:99:86:e2:0a:04:43:3f:a5:2d:
80:af:8c:17:de:10:8c:a1:5d:6b:75:1d:7c:8c:db:
08:40:93:55:de:bd:8b:5e:d0:ec:83:0f:e0:d4:48:
37:ff:45:b0:d0:6a:7b:d1:04:7f:86:93:37:69:20:
89:09:11:aa:55:39:31:92:d2:28:00:16:3f:e5:24:
8e:65:d8:53:4d:ea:d5:2d:b8:aa:c2:0e:18:a0:6d:
1f:53:75:06:28:74:a1:66:0b:94:60:5a:8f:5a:d8:
5c:f1:6b:4a:b7:be:43:d0:8d:2c:61:32:ad:0d:f4:
ff:18:b9:5f:0c:0f:e5:20:5e:a5:1f:29:b8:92:a2:
ae:8d:54:6c:85:8e:95:93:11:b0:d0:c8:63:15:c2:
a2:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:CC:FB:3C:66:3C:CD:8D:09:6D:11:97:49:DD:AB:95:EC:93:00:D3
X509v3 Authority Key Identifier:
keyid:4C:E9:86:06:BC:9A:5D:44:07:4F:F8:CB:ED:CB:DB:CF:C3:5F:05:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TOmGBryaXUQHT_jL7cvbz8NfBWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/179ed5-d253-4255-9017-88df125ba663/1/1sz7PGY8zY0JbRGXSd2rleyTANM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/179ed5-d253-4255-9017-88df125ba663/1/TOmGBryaXUQHT_jL7cvbz8NfBWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.175.64.0/18
156.67.200.0/21
185.72.72.0/22
212.56.160.0/19
IPv6:
2a02:6180::/32
Signature Algorithm: sha256WithRSAEncryption
47:39:ff:7d:0b:86:82:d0:0e:26:1b:88:6f:a6:36:a4:ed:d8:
e5:47:a5:e6:b9:19:e0:ae:4c:26:9a:f7:60:ff:bd:0c:a2:8f:
6c:ac:f2:48:88:77:5d:62:75:e1:46:0e:90:ea:1f:48:40:d8:
ea:f0:be:a9:2d:4a:33:07:c5:39:71:be:e0:41:f5:e1:81:c9:
3b:5f:8e:4c:b5:96:9e:9f:0f:40:52:81:22:d4:0b:d7:ba:36:
95:dc:17:fd:ad:62:c3:e0:6e:c1:56:a8:2b:55:e2:19:55:9e:
a5:d8:6b:d8:e7:43:de:ab:21:cd:f9:bc:7e:4e:ca:58:b9:58:
c4:a7:ed:8e:03:25:95:2c:a0:a2:fe:45:a0:54:d6:4b:5e:7d:
8c:de:ed:ff:e1:f6:fe:f9:40:72:bc:30:ed:a5:7d:9d:38:7e:
ff:2e:3a:09:21:38:53:39:c9:f3:9b:b4:fa:bf:79:6a:62:34:
21:d0:01:68:ab:f4:1e:3c:ac:26:45:2b:c5:a1:97:cf:12:fb:
0a:90:da:8d:3e:df:3b:a6:85:cf:c9:24:9f:9b:05:a7:60:ca:
b9:1e:15:8a:85:26:c1:41:4d:1d:c0:6d:dc:93:f0:dd:b9:1f:
52:c6:e7:18:11:f9:e0:07:22:c0:72:d7:05:0a:5a:43:33:8a:
16:a2:04:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 14:02:28 2024 by rpki-client on console-ams.rpki-client.org