Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/de84ce-d704-4766-a388-f8e5b2d8680c/1/27BmR2-kGiJsLV6JplpM6dZlCvU.roa
File: 27BmR2-kGiJsLV6JplpM6dZlCvU.roa (raw, json)
Hash identifier: 5eMviVzUnifrQUOqbx8q7TsIsJ9ZLE3gaXfB8bbna4U=
Subject key identifier: DB:B0:66:47:6F:A4:1A:22:6C:2D:5E:89:A6:5A:4C:E9:D6:65:0A:F5
Certificate issuer: /CN=80615315dc750c03e60fc36a750c5e3ff66eac94
Certificate serial: 018CC492EE1A9DFDCC12551851A681042620
Authority key identifier: 80:61:53:15:DC:75:0C:03:E6:0F:C3:6A:75:0C:5E:3F:F6:6E:AC:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/de84ce-d704-4766-a388-f8e5b2d8680c/1/27BmR2-kGiJsLV6JplpM6dZlCvU.roa
Signing time: Mon 01 Jan 2024 10:30:12 +0000
ROA not before: Mon 01 Jan 2024 10:30:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199669
IP address blocks: 185.195.170.0/23 maxlen: 24
91.109.200.0/21 maxlen: 24
46.29.118.0/23 maxlen: 24
185.10.44.0/24 maxlen: 24
185.10.44.0/22 maxlen: 24
185.71.196.0/22 maxlen: 24
2a03:ec0::/48 maxlen: 64
2a03:ec0:1::/48 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/de84ce-d704-4766-a388-f8e5b2d8680c/1/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/de84ce-d704-4766-a388-f8e5b2d8680c/1/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:92:ee:1a:9d:fd:cc:12:55:18:51:a6:81:04:26:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80615315dc750c03e60fc36a750c5e3ff66eac94
Validity
Not Before: Jan 1 10:30:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dbb066476fa41a226c2d5e89a65a4ce9d6650af5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:e1:fe:7b:c1:7f:98:40:5e:e2:ef:fe:53:87:
e0:d6:42:97:88:cc:e3:0b:3c:aa:1e:ce:b0:d9:19:
f0:e7:ed:1e:0e:2b:59:48:a8:91:74:44:7b:97:51:
0d:7a:c3:26:20:0b:df:11:f0:a6:4d:a6:f5:76:50:
df:17:61:c8:69:e0:fe:a2:a1:48:6f:a9:9b:f4:34:
7a:bb:7d:0c:22:38:20:d8:a5:bb:79:10:65:98:53:
17:90:0b:f4:7d:fa:1a:ca:6f:00:0b:82:f8:ab:bd:
d1:59:b4:35:a1:f3:bb:2a:4f:a4:2f:68:fe:e5:6c:
a6:80:62:b8:7a:0f:23:b1:20:8b:2a:06:cd:f7:be:
6e:e6:48:a1:d3:06:7a:68:5b:67:c5:4e:40:a7:41:
82:8e:4d:6d:c9:12:90:86:36:cf:b8:d2:18:7b:45:
75:5b:78:eb:46:e9:10:ae:53:9e:57:98:13:87:b7:
bb:24:ee:a6:1a:52:14:c7:b8:c2:1e:0b:bf:ca:45:
35:61:c1:8c:f2:62:ef:87:25:66:2c:d5:2a:14:39:
82:ce:5f:cb:bb:e2:aa:79:d0:6c:2d:6a:33:12:53:
c7:7c:6c:42:29:8a:79:db:70:ed:37:9a:db:e8:ae:
89:f3:c4:ce:77:59:db:b9:75:6f:87:69:94:11:22:
2f:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:B0:66:47:6F:A4:1A:22:6C:2D:5E:89:A6:5A:4C:E9:D6:65:0A:F5
X509v3 Authority Key Identifier:
keyid:80:61:53:15:DC:75:0C:03:E6:0F:C3:6A:75:0C:5E:3F:F6:6E:AC:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/de84ce-d704-4766-a388-f8e5b2d8680c/1/27BmR2-kGiJsLV6JplpM6dZlCvU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/de84ce-d704-4766-a388-f8e5b2d8680c/1/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.29.118.0/23
91.109.200.0/21
185.10.44.0/22
185.71.196.0/22
185.195.170.0/23
IPv6:
2a03:ec0::/47
Signature Algorithm: sha256WithRSAEncryption
54:28:43:7b:76:4a:57:b3:8c:b3:44:14:76:3f:86:6e:58:36:
bb:3a:29:5b:8d:a3:f7:71:f7:2e:a2:e1:42:98:54:48:74:2e:
28:ed:72:ed:aa:72:34:21:e1:13:ac:1f:ef:5d:10:00:87:2e:
bf:4d:a9:0c:cb:3f:50:34:59:b6:ef:1a:54:a6:e4:5c:67:a5:
a4:0d:b0:4e:d3:cd:45:20:ce:29:c3:4c:73:bf:d5:16:54:2f:
6b:6a:0a:83:fa:11:93:cd:8a:58:c4:8c:06:32:a9:b1:14:ba:
6a:b7:27:4e:4e:6a:33:88:78:e4:78:99:dd:06:49:c4:6a:63:
80:05:90:c3:0d:9e:1e:b3:62:ef:1b:26:fe:eb:92:c4:f0:d6:
92:80:b5:c6:83:52:3d:20:04:a0:0e:41:7f:1f:3f:da:cd:ca:
d8:42:8b:a9:cb:87:00:de:c4:e4:ad:3c:82:f1:17:e9:76:0d:
48:38:dd:d3:b5:2b:92:08:87:ba:ee:7a:2d:79:f0:0b:05:35:
91:44:c1:65:a8:98:9e:c3:47:ae:81:ec:a5:85:9b:63:cb:b9:
2b:71:3a:51:6e:8d:4f:d4:80:19:82:8f:db:e4:4d:7c:6b:7e:
b9:d7:28:08:58:3d:73:fc:09:99:6c:42:7b:04:ea:46:40:7f:
c3:bd:5d:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 07:32:26 2024 by rpki-client on console-ams.rpki-client.org