Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/BoR2VIryTsHHcWj-FDFDFmt5Nzo.roa
File: BoR2VIryTsHHcWj-FDFDFmt5Nzo.roa (raw, json)
Hash identifier: OQITac9AherGb72sUGcK8Cs2Z8KQFS7mmKbQfWEJd04=
Subject key identifier: 06:84:76:54:8A:F2:4E:C1:C7:71:68:FE:14:31:43:16:6B:79:37:3A
Certificate issuer: /CN=b3a5d99863db2e49b44f6c324eb04388fc7515d2
Certificate serial: 018CCA99F9073E069606EE839AADED64D93F
Authority key identifier: B3:A5:D9:98:63:DB:2E:49:B4:4F:6C:32:4E:B0:43:88:FC:75:15:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s6XZmGPbLkm0T2wyTrBDiPx1FdI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/BoR2VIryTsHHcWj-FDFDFmt5Nzo.roa
Signing time: Tue 02 Jan 2024 14:35:37 +0000
ROA not before: Tue 02 Jan 2024 14:35:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201917
IP address blocks: 37.25.128.0/17 maxlen: 24
46.108.0.0/16 maxlen: 24
195.232.128.0/17 maxlen: 24
46.190.128.0/17 maxlen: 24
139.47.192.0/18 maxlen: 24
195.233.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/s6XZmGPbLkm0T2wyTrBDiPx1FdI.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/s6XZmGPbLkm0T2wyTrBDiPx1FdI.mft
rsync://rpki.ripe.net/repository/DEFAULT/s6XZmGPbLkm0T2wyTrBDiPx1FdI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 17:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:99:f9:07:3e:06:96:06:ee:83:9a:ad:ed:64:d9:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3a5d99863db2e49b44f6c324eb04388fc7515d2
Validity
Not Before: Jan 2 14:35:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=068476548af24ec1c77168fe143143166b79373a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:71:0f:7f:e1:7f:b0:07:64:02:e0:cd:75:db:
fa:46:22:9f:ee:6e:57:a8:7e:e1:0f:3b:03:39:1f:
a2:f3:6f:bf:c1:e0:19:f8:0e:8b:3a:a9:bb:2a:1d:
d2:9f:a8:74:b2:c6:66:fe:1e:c1:e7:f2:fa:2d:6b:
51:01:78:40:5f:9a:d2:ef:9c:eb:bb:b6:73:df:59:
87:77:00:6e:c6:53:3e:a8:0b:e8:66:3b:d4:e7:54:
ce:7c:ef:81:80:48:9b:36:d9:84:d5:14:4b:91:dd:
d3:0e:2d:e5:34:9d:01:4c:43:ec:51:53:58:57:a5:
94:93:5e:cd:55:b8:db:5e:e5:9b:99:52:f5:b5:84:
8c:fb:7f:fa:15:2f:22:f2:f4:79:c7:b9:3e:09:77:
cd:3a:1e:0c:e8:a8:a3:d0:68:a1:03:e1:07:df:9f:
62:4a:bd:61:a5:33:d1:f3:16:e4:a2:77:d5:8a:2d:
52:db:62:c1:13:23:49:26:4a:74:00:48:a6:1d:63:
00:7c:05:a0:42:6c:33:32:9d:e1:ea:e9:76:63:28:
2f:8e:e9:01:28:98:27:7f:9e:d9:77:27:2a:53:4a:
ad:6b:e0:1e:34:dc:21:84:f2:c7:c6:3b:fc:4e:31:
8f:f2:0d:21:42:5b:e1:8d:f5:7a:9f:96:1d:3c:05:
e7:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:84:76:54:8A:F2:4E:C1:C7:71:68:FE:14:31:43:16:6B:79:37:3A
X509v3 Authority Key Identifier:
keyid:B3:A5:D9:98:63:DB:2E:49:B4:4F:6C:32:4E:B0:43:88:FC:75:15:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s6XZmGPbLkm0T2wyTrBDiPx1FdI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/BoR2VIryTsHHcWj-FDFDFmt5Nzo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/s6XZmGPbLkm0T2wyTrBDiPx1FdI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.25.128.0/17
46.108.0.0/16
46.190.128.0/17
139.47.192.0/18
195.232.128.0-195.233.255.255
Signature Algorithm: sha256WithRSAEncryption
88:f0:ff:2e:72:37:05:99:5a:bf:5d:91:57:b8:d3:13:d6:22:
e6:4e:66:c5:ea:e0:e5:e3:ad:f0:48:9c:25:7e:32:e1:79:57:
2d:96:65:17:01:51:1a:7d:76:c6:0d:98:bc:96:10:e6:a0:16:
bb:a4:4c:90:0d:d0:3b:89:f0:43:06:7e:f2:52:9a:69:e2:3a:
90:83:33:71:b6:ad:77:62:02:54:fc:35:65:82:e8:f9:ff:3f:
ea:f5:31:a7:d1:69:e8:45:b1:56:ef:e4:1e:39:95:ed:4a:8d:
e1:0a:e5:e8:e7:d2:7a:97:9f:9d:32:47:6c:c6:dc:57:79:93:
26:c2:57:14:87:07:46:39:97:f6:bf:22:3b:53:d5:38:4c:d9:
74:10:cc:7d:fe:ab:58:29:66:3e:fa:53:f4:df:26:ed:06:9e:
86:25:96:16:8a:11:bd:25:82:94:cb:dd:1b:a5:5a:2a:f6:67:
ef:b4:9f:6e:d2:4d:a7:56:71:d2:aa:ef:f1:03:2b:6e:4a:76:
07:d9:58:e3:12:e2:97:0b:85:5f:e3:d5:7b:ab:1c:36:12:56:
44:78:7a:f1:1e:9f:66:c0:74:01:4e:15:1c:82:17:11:02:1b:
29:a2:c8:ca:77:5e:6b:d1:72:88:6a:34:a2:d3:e9:d6:0c:85:
ed:61:89:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 01:17:15 2024 by rpki-client on console-ams.rpki-client.org