Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/2ccDIA9WRo8sQkHj12i3SSLyhZU.roa
File: 2ccDIA9WRo8sQkHj12i3SSLyhZU.roa (raw, json)
Hash identifier: 0/osOlUuB7DWNeVfo96mIBC1HsNSXDO8WAKFRhWo6S8=
Subject key identifier: D9:C7:03:20:0F:56:46:8F:2C:42:41:E3:D7:68:B7:49:22:F2:85:95
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 018F813EC1AFAC43D83FF7229597D819C9E0
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/2ccDIA9WRo8sQkHj12i3SSLyhZU.roa
Signing time: Thu 16 May 2024 11:52:04 +0000
ROA not before: Thu 16 May 2024 11:52:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 52000
IP address blocks: 193.233.22.0/24 maxlen: 24
193.233.88.0/22 maxlen: 24
193.233.248.0/24 maxlen: 24
193.233.249.0/24 maxlen: 24
193.233.250.0/24 maxlen: 24
193.233.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Jun 2024 04:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:81:3e:c1:af:ac:43:d8:3f:f7:22:95:97:d8:19:c9:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: May 16 11:52:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d9c703200f56468f2c4241e3d768b74922f28595
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:f5:57:81:a0:ad:04:8b:20:50:14:9a:8e:01:
8e:b4:ea:80:ab:99:66:48:08:f6:94:69:95:a4:a1:
38:02:35:b1:58:7e:1a:35:1f:e8:3b:52:81:ad:61:
2b:aa:36:10:bb:1e:d2:3c:64:50:84:3e:f6:db:47:
a0:d9:7d:ed:e5:4b:28:d5:38:b4:c4:83:65:d1:18:
ad:38:d0:c4:77:e9:00:d1:7c:79:cf:c1:ca:01:1b:
90:7d:39:24:f6:b0:14:aa:5a:ae:2a:8f:b0:2b:33:
bc:31:5c:7a:02:5c:62:3c:54:75:3d:1d:72:c9:64:
b2:67:cc:38:34:7b:ce:82:a4:69:08:6a:51:8f:ba:
0e:a4:d0:1f:6e:14:83:d1:9d:f5:46:2c:e5:7b:3f:
c6:67:43:fb:06:34:98:19:31:c6:81:e7:6b:e8:74:
ff:da:51:a0:dc:82:f9:b0:6f:33:a4:f7:cc:fc:49:
64:43:44:eb:38:60:4e:c6:eb:e9:c8:99:ee:29:b2:
ea:a3:66:6d:2b:51:96:9f:e5:bd:cf:28:e6:e0:f3:
7b:28:05:16:1c:b4:b4:21:e3:c9:e9:68:7f:d3:b5:
89:f7:96:9a:c4:42:90:51:d8:ef:10:a3:33:0b:fd:
74:e5:d2:65:39:30:5b:77:35:63:4f:93:08:0d:f7:
42:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:C7:03:20:0F:56:46:8F:2C:42:41:E3:D7:68:B7:49:22:F2:85:95
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/2ccDIA9WRo8sQkHj12i3SSLyhZU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.233.22.0/24
193.233.88.0/22
193.233.248.0/22
Signature Algorithm: sha256WithRSAEncryption
2a:40:59:7f:c5:01:d6:e6:02:6e:f3:1c:b1:5b:03:9c:8d:b5:
d8:77:0a:36:3a:4a:55:6c:d4:fe:c6:e0:e8:c8:1a:3e:da:02:
65:b7:ca:52:b9:12:f1:50:99:e5:62:72:2d:1a:67:11:bb:d6:
75:3a:27:e1:37:b2:bd:b2:05:be:39:4d:99:df:a8:cb:bb:57:
5c:9f:86:03:64:d4:0b:29:1c:19:fc:87:6f:26:4f:1d:0a:8b:
7f:54:71:2c:ee:7a:de:e5:ec:a6:c8:1b:48:af:ff:8a:fe:35:
42:63:b9:43:e2:dd:0c:88:08:2f:97:14:09:44:7f:dd:cf:45:
c3:00:36:5d:68:2d:dc:f8:18:cc:ca:1a:bd:9f:ea:93:7d:20:
6b:14:32:37:ee:69:a8:fb:76:26:c0:5d:f5:d1:d9:5d:e3:bd:
aa:b6:a1:77:59:bd:d5:24:f9:65:e9:09:a1:f3:3f:7c:bc:92:
b1:24:46:35:0d:0b:6c:8d:13:78:be:df:d3:f7:83:0f:7e:af:
c2:6f:4a:e6:92:7a:db:c1:e2:e7:a7:72:42:6f:f2:9b:6e:36:
15:fa:84:00:3a:39:cd:9e:4a:92:b5:30:61:fa:71:04:3a:bb:
96:67:ad:59:40:cc:79:1e:d2:ad:d2:e7:f3:07:55:1d:c0:a3:
c8:87:08:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 07:55:21 2024 by rpki-client on console-fra.rpki-client.org