Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/d154c1-9d13-4340-a362-5dee1ea2973b/1/P4OvsaulHfbb0gvMU0WH_Gufbfw.roa
File: P4OvsaulHfbb0gvMU0WH_Gufbfw.roa (raw, json)
Hash identifier: UXxD0mUnzBsx+LpBB/UlYnsWipMWVFPjrkNCQgof+EU=
Subject key identifier: 3F:83:AF:B1:AB:A5:1D:F6:DB:D2:0B:CC:53:45:87:FC:6B:9F:6D:FC
Certificate issuer: /CN=6e52e105f0e826e715f72cc5cb0312a2534424ba
Certificate serial: 0193059A09E8EFF12CA404D7B732F009B26C
Authority key identifier: 6E:52:E1:05:F0:E8:26:E7:15:F7:2C:C5:CB:03:12:A2:53:44:24:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/blLhBfDoJucV9yzFywMSolNEJLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/d154c1-9d13-4340-a362-5dee1ea2973b/1/P4OvsaulHfbb0gvMU0WH_Gufbfw.roa
Signing time: Thu 07 Nov 2024 07:50:01 +0000
ROA not before: Thu 07 Nov 2024 07:50:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198004
IP address blocks: 88.135.180.0/22 maxlen: 24
91.233.156.0/22 maxlen: 22
91.233.160.0/23 maxlen: 23
176.103.72.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/d154c1-9d13-4340-a362-5dee1ea2973b/1/blLhBfDoJucV9yzFywMSolNEJLo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/d154c1-9d13-4340-a362-5dee1ea2973b/1/blLhBfDoJucV9yzFywMSolNEJLo.mft
rsync://rpki.ripe.net/repository/DEFAULT/blLhBfDoJucV9yzFywMSolNEJLo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:05:9a:09:e8:ef:f1:2c:a4:04:d7:b7:32:f0:09:b2:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e52e105f0e826e715f72cc5cb0312a2534424ba
Validity
Not Before: Nov 7 07:50:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3f83afb1aba51df6dbd20bcc534587fc6b9f6dfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:35:2c:7b:ab:6c:8f:7b:88:b0:45:f3:18:cb:
d4:ce:d4:64:24:56:26:4b:2e:47:59:dc:d1:3e:46:
92:76:d2:2c:74:fd:86:03:76:33:12:81:80:87:7b:
fb:9a:25:23:9a:f9:6b:aa:af:3d:0f:13:4e:8d:68:
ba:88:7c:1c:27:ae:14:0c:7c:17:f1:62:4d:25:e1:
42:ea:a0:2b:90:a1:8d:a6:53:ff:a7:21:28:5b:91:
2e:f9:dc:af:74:14:09:2b:a9:d0:d2:b6:14:d6:f4:
82:a5:3b:b7:2c:a8:1b:76:68:ad:0b:16:b6:2e:8f:
98:6d:da:26:e0:98:34:7f:42:54:a4:e5:75:6b:ef:
00:d7:76:ca:52:2d:23:0d:03:4b:cc:af:0d:12:9c:
7d:48:91:cd:d4:5c:4f:a6:ff:90:c3:87:e0:94:90:
2e:52:ef:b4:81:3b:23:66:c6:36:b6:14:9d:c4:eb:
aa:06:12:e3:bc:f9:3e:45:d7:8a:29:8e:f3:14:45:
7f:c9:5a:97:5d:3b:42:af:0c:b6:48:08:1c:00:f6:
cd:45:d6:2d:72:65:ba:bb:f3:21:26:54:06:8a:29:
2e:75:85:a5:44:fa:cd:a6:18:45:89:53:71:7c:29:
70:67:38:a8:d6:d4:0d:63:d4:b1:ee:e4:94:1c:43:
d9:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:83:AF:B1:AB:A5:1D:F6:DB:D2:0B:CC:53:45:87:FC:6B:9F:6D:FC
X509v3 Authority Key Identifier:
keyid:6E:52:E1:05:F0:E8:26:E7:15:F7:2C:C5:CB:03:12:A2:53:44:24:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/blLhBfDoJucV9yzFywMSolNEJLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/d154c1-9d13-4340-a362-5dee1ea2973b/1/P4OvsaulHfbb0gvMU0WH_Gufbfw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/d154c1-9d13-4340-a362-5dee1ea2973b/1/blLhBfDoJucV9yzFywMSolNEJLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.135.180.0/22
91.233.156.0-91.233.161.255
176.103.72.0/21
Signature Algorithm: sha256WithRSAEncryption
25:3c:d9:19:2b:2a:3c:af:6f:39:0d:e5:e8:ca:07:31:f2:fb:
66:2d:b6:9a:45:26:39:92:b8:ac:cc:b0:7e:2c:9b:c5:9a:b3:
c2:70:ff:6f:c5:01:4c:0e:8a:3e:fc:2c:ce:34:34:39:b5:1e:
50:f2:05:3c:55:96:6c:a6:51:19:7d:1c:e7:c9:60:8c:4c:c1:
95:49:85:20:5f:90:b0:2c:6b:6a:6e:c4:21:8a:3c:58:c0:a1:
bd:0c:58:27:95:c7:9a:a0:22:f0:f7:5f:77:fd:24:05:ce:89:
46:ee:e0:4e:98:21:25:a7:84:d2:96:7d:31:b5:34:b8:da:13:
ef:fb:25:01:3d:42:82:40:f6:c1:3b:85:76:ef:91:ca:17:ef:
7e:4c:ef:79:cc:db:ac:b6:d1:4e:9c:34:15:e0:e4:e5:6f:66:
d8:fd:1a:0d:8e:98:34:ca:71:de:cd:ef:a2:c0:01:bd:4d:de:
54:24:90:d7:07:1c:72:27:47:cd:b9:e7:2e:0c:67:07:bd:0b:
e5:dd:72:e4:b7:85:b9:2e:d5:21:be:cb:bd:9c:87:d3:16:da:
71:34:51:25:32:a6:25:a0:e9:ef:0d:0f:57:6e:26:8b:51:df:
46:c9:d8:a6:82:75:4b:a7:80:21:cc:dc:f8:85:34:6c:36:74:
f9:9f:1a:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:39:13 2024 by rpki-client on console-ams.rpki-client.org