Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/aKeL1dDdgnzzWRcSnEbxQc0NvBA.roa
File: aKeL1dDdgnzzWRcSnEbxQc0NvBA.roa (raw, json)
Hash identifier: Q4nrlGBdsWk2FLsmTwZU6AA70yQoxnVv4uodAqHVMj4=
Subject key identifier: 68:A7:8B:D5:D0:DD:82:7C:F3:59:17:12:9C:46:F1:41:CD:0D:BC:10
Certificate issuer: /CN=3622fc2f8ad8b008357dbe6f0195960c9de61bd5
Certificate serial: 0190EF29AE991574815C8B3A723985244156
Authority key identifier: 36:22:FC:2F:8A:D8:B0:08:35:7D:BE:6F:01:95:96:0C:9D:E6:1B:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/aKeL1dDdgnzzWRcSnEbxQc0NvBA.roa
Signing time: Fri 26 Jul 2024 13:10:04 +0000
ROA not before: Fri 26 Jul 2024 13:10:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200373
IP address blocks: 45.3.32.0/19 maxlen: 24
65.111.0.0/19 maxlen: 24
95.141.242.0/24 maxlen: 24
104.167.24.0/21 maxlen: 24
104.207.32.0/19 maxlen: 24
2a09:dc00::/29 maxlen: 32
2a0a:1f40::/29 maxlen: 32
2a0a:1f40::/32 maxlen: 32
2a0a:1f41::/32 maxlen: 32
2a0a:da40::/29 maxlen: 29
2a13:3f80::/32 maxlen: 32
2a13:3f83::/32 maxlen: 32
2a13:3f84::/32 maxlen: 32
2a13:3f85::/32 maxlen: 32
2a13:3f86::/32 maxlen: 32
2a13:3f87::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 23:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:ef:29:ae:99:15:74:81:5c:8b:3a:72:39:85:24:41:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3622fc2f8ad8b008357dbe6f0195960c9de61bd5
Validity
Not Before: Jul 26 13:10:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=68a78bd5d0dd827cf35917129c46f141cd0dbc10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:bc:95:0b:cb:14:31:1a:7a:78:32:ce:8e:f6:
6e:bf:ed:a4:38:46:96:9e:bd:c4:e8:3e:ea:d0:6b:
f3:d3:c8:88:e0:cf:4c:85:3b:50:72:96:89:ac:b6:
7f:8a:11:4f:df:2f:d0:2f:11:21:15:ba:69:a8:d3:
60:af:c3:60:aa:22:52:67:93:44:ed:3f:41:ff:77:
2a:2e:61:d6:aa:1a:5a:76:02:47:0b:2e:0b:aa:2f:
59:8d:b6:bd:c5:04:29:a4:02:ed:f2:99:d0:74:8a:
b4:93:34:6a:56:e9:dd:d9:93:cc:52:a9:19:d0:ae:
97:4f:37:ce:d5:60:60:96:13:24:f6:83:8f:01:da:
fa:68:ab:c0:9e:b2:4d:17:ae:b3:bc:ed:a7:d5:0e:
97:21:48:ef:a3:24:0f:ef:fb:d3:c6:74:51:02:35:
d1:3c:dd:80:cc:f5:2f:cd:9c:77:72:d6:05:b2:a0:
96:5c:38:47:c3:05:81:f0:72:f3:26:c8:22:89:ef:
ac:2b:27:c7:4c:ac:af:76:f8:51:7e:66:7c:6c:9a:
2e:30:4d:03:d9:c2:41:bb:aa:39:a2:c6:68:df:e4:
46:cf:55:67:41:d1:4e:c7:a4:eb:0c:1d:ec:d4:48:
17:40:96:18:dc:f4:aa:8a:b5:38:6d:bf:4a:5f:51:
3c:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:A7:8B:D5:D0:DD:82:7C:F3:59:17:12:9C:46:F1:41:CD:0D:BC:10
X509v3 Authority Key Identifier:
keyid:36:22:FC:2F:8A:D8:B0:08:35:7D:BE:6F:01:95:96:0C:9D:E6:1B:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/aKeL1dDdgnzzWRcSnEbxQc0NvBA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.3.32.0/19
65.111.0.0/19
95.141.242.0/24
104.167.24.0/21
104.207.32.0/19
IPv6:
2a09:dc00::/29
2a0a:1f40::/29
2a0a:da40::/29
2a13:3f80::/32
2a13:3f83::-2a13:3f87:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
0c:20:71:73:e1:a1:57:59:4c:e3:b3:93:1f:09:b3:66:d4:88:
44:4b:f2:96:5f:60:78:42:67:3c:bc:88:0a:1d:c1:f1:d0:08:
32:45:17:ae:21:25:ab:8a:13:4e:25:8d:bd:c7:2d:ce:66:5a:
fa:3b:90:29:90:df:d2:56:cb:12:bc:dd:4e:45:87:54:9c:af:
0c:17:dd:62:b8:51:dd:1f:c4:66:49:15:80:4d:f8:9b:f5:b7:
e8:4c:de:ff:4e:18:9c:c2:79:7b:dc:35:0e:b8:f9:2a:c5:02:
6c:1e:e5:3d:d3:91:d5:3c:85:32:2a:20:8c:39:7e:59:1d:bf:
02:5f:d8:80:36:e4:10:0b:17:22:6b:a4:1e:c1:72:4e:af:6e:
a7:e5:6d:f7:cc:75:ff:28:d6:24:d1:b6:8f:b4:75:cd:00:bf:
c5:ed:62:0a:79:5f:e2:2e:71:87:a7:8e:49:e1:e6:d3:45:bc:
2d:88:74:27:0a:e6:5e:8f:51:42:d8:14:b1:ab:60:fe:83:28:
e0:87:99:d8:8a:a1:f3:18:15:6a:56:c3:cd:c9:29:45:8b:0d:
42:9f:c2:c5:1f:39:30:77:1b:d0:53:c2:d6:4e:45:80:16:e5:
84:eb:36:db:8e:31:d9:d2:f5:9f:c4:4d:43:f5:73:0b:d6:a3:
11:98:dc:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:58:22 2024 by rpki-client on console-ams.rpki-client.org