Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/_Ubzr0iHZ-SOn9J5VHEH3Q88YbY.roa
File: _Ubzr0iHZ-SOn9J5VHEH3Q88YbY.roa (raw, json)
Hash identifier: rM/FbEAdPtTfrx2JWpeDzs6FAqgWIqnS1Qb1VAHVdGE=
Subject key identifier: FD:46:F3:AF:48:87:67:E4:8E:9F:D2:79:54:71:07:DD:0F:3C:61:B6
Certificate issuer: /CN=4f895ff0e99a77c017e8a383292cb5c6f8261120
Certificate serial: 018CC5DCB1B86A6C0F7E192F603DAC401739
Authority key identifier: 4F:89:5F:F0:E9:9A:77:C0:17:E8:A3:83:29:2C:B5:C6:F8:26:11:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4lf8Omad8AX6KODKSy1xvgmESA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/_Ubzr0iHZ-SOn9J5VHEH3Q88YbY.roa
Signing time: Mon 01 Jan 2024 16:30:24 +0000
ROA not before: Mon 01 Jan 2024 16:30:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58010
IP address blocks: 195.74.88.0/23 maxlen: 24
193.243.164.0/23 maxlen: 24
37.208.104.0/21 maxlen: 24
37.208.108.0/24 maxlen: 24
185.219.100.0/22 maxlen: 24
185.219.100.0/24 maxlen: 24
185.26.156.0/22 maxlen: 24
2a00:d0c0::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/T4lf8Omad8AX6KODKSy1xvgmESA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/T4lf8Omad8AX6KODKSy1xvgmESA.mft
rsync://rpki.ripe.net/repository/DEFAULT/T4lf8Omad8AX6KODKSy1xvgmESA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:b1:b8:6a:6c:0f:7e:19:2f:60:3d:ac:40:17:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f895ff0e99a77c017e8a383292cb5c6f8261120
Validity
Not Before: Jan 1 16:30:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fd46f3af488767e48e9fd279547107dd0f3c61b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:63:59:9e:7f:7b:a4:15:1a:14:42:f4:45:c6:
75:96:21:6c:e8:ca:5f:61:61:19:9f:8a:14:47:50:
ce:37:a4:06:a9:08:92:2a:b5:2c:de:ac:e0:73:30:
56:60:31:ba:b6:18:72:98:80:77:40:66:70:a4:a3:
ca:b7:e2:a8:aa:7e:b9:3d:0a:a8:5b:a3:4d:14:82:
66:a2:8b:36:43:5a:ba:59:c0:99:64:0d:4c:fe:4b:
87:92:d0:88:92:05:b2:82:f8:bf:27:cc:e0:15:3c:
69:c9:36:c9:eb:d0:c0:77:cf:36:fb:73:10:b0:94:
7c:f7:fd:21:0d:4b:c0:9c:7c:98:dd:58:29:47:87:
54:ab:e5:64:75:03:a9:20:18:5b:64:03:dd:bf:ea:
40:ec:b2:11:eb:25:f2:65:e8:db:1d:0c:a4:56:d7:
83:31:7e:22:c6:69:21:a6:50:18:31:73:a5:89:f2:
93:91:94:2b:59:6f:d9:d2:17:0f:6a:c1:e2:1b:44:
87:87:49:e0:1b:1f:5e:cf:27:2e:59:d4:b6:b5:fb:
cb:bf:8f:26:51:cb:52:3b:ce:4d:ee:82:a7:c8:cd:
7f:0b:b1:69:54:1b:04:4a:27:0c:55:d0:95:41:b0:
18:89:03:dd:96:9b:08:7f:b9:f0:5a:c6:54:91:43:
8f:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:46:F3:AF:48:87:67:E4:8E:9F:D2:79:54:71:07:DD:0F:3C:61:B6
X509v3 Authority Key Identifier:
keyid:4F:89:5F:F0:E9:9A:77:C0:17:E8:A3:83:29:2C:B5:C6:F8:26:11:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4lf8Omad8AX6KODKSy1xvgmESA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/_Ubzr0iHZ-SOn9J5VHEH3Q88YbY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/T4lf8Omad8AX6KODKSy1xvgmESA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.208.104.0/21
185.26.156.0/22
185.219.100.0/22
193.243.164.0/23
195.74.88.0/23
IPv6:
2a00:d0c0::/32
Signature Algorithm: sha256WithRSAEncryption
04:6d:a2:bc:1b:9e:36:5a:42:e5:c8:19:fc:c8:19:a8:87:a9:
46:ac:43:2d:a5:93:5d:cb:42:7f:7e:b0:da:8e:bd:a7:d5:3c:
12:3c:b0:b3:30:00:ab:39:ec:2c:16:de:80:f4:0b:d0:87:0e:
3d:01:1b:49:7d:e7:08:33:19:5e:43:37:b7:c8:42:5f:fb:92:
4c:d2:cf:50:b3:ac:6e:fe:59:c3:b1:eb:7e:1a:bd:77:97:b4:
94:39:38:fb:03:d0:42:9a:b3:eb:e4:b1:e8:06:f6:3b:df:14:
95:12:f9:e0:dd:ce:32:07:1d:ac:04:a2:23:b2:b2:4f:23:e2:
40:ae:36:87:fd:2e:dd:30:a0:98:89:6a:13:18:da:e1:8f:d0:
01:34:02:d2:c4:49:24:b4:12:3f:1c:7b:1c:af:63:57:51:28:
79:d6:09:63:29:c9:0c:82:63:fd:ec:e0:96:82:ac:3a:8f:bd:
69:46:0a:11:38:27:be:21:fe:59:94:2e:b8:b6:43:dd:ab:63:
5e:b1:5c:76:6c:c8:ce:9b:86:94:59:3d:7e:30:79:83:8d:f2:
fc:ac:0d:e8:44:3a:0d:ba:08:d1:d3:90:46:1c:31:dc:d8:65:
01:43:17:2f:c8:ce:04:ee:70:69:0c:db:b4:14:d8:fe:6e:da:
23:42:6b:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 02:36:28 2024 by rpki-client on console-ams.rpki-client.org