Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/c7a68f-7bf8-4f80-a9a2-815d2c026646/1/NEVpuvZMKoIbcEzQYa6aMI9Lv6U.roa
File: NEVpuvZMKoIbcEzQYa6aMI9Lv6U.roa (raw, json)
Hash identifier: tgtExkr8q60F4Vp49siu2jyUn3MykgKry/9EVBV51Ec=
Subject key identifier: 34:45:69:BA:F6:4C:2A:82:1B:70:4C:D0:61:AE:9A:30:8F:4B:BF:A5
Certificate issuer: /CN=01335442514d5249b5143cfdf821216bb5c52940
Certificate serial: 018CC5DC2F09F95C3BE521F4C0DE2C45A8FD
Authority key identifier: 01:33:54:42:51:4D:52:49:B5:14:3C:FD:F8:21:21:6B:B5:C5:29:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ATNUQlFNUkm1FDz9-CEha7XFKUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/c7a68f-7bf8-4f80-a9a2-815d2c026646/1/NEVpuvZMKoIbcEzQYa6aMI9Lv6U.roa
Signing time: Mon 01 Jan 2024 16:29:50 +0000
ROA not before: Mon 01 Jan 2024 16:29:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39134
IP address blocks: 185.206.100.0/24 maxlen: 24
185.206.100.0/22 maxlen: 24
88.212.220.0/22 maxlen: 24
88.212.224.0/22 maxlen: 24
88.212.229.0/24 maxlen: 24
88.212.228.0/22 maxlen: 24
88.212.230.0/23 maxlen: 23
88.212.192.0/24 maxlen: 24
88.212.192.0/20 maxlen: 24
88.212.196.0/24 maxlen: 24
88.212.204.0/24 maxlen: 24
88.212.208.0/22 maxlen: 24
2a02:2100::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/c7a68f-7bf8-4f80-a9a2-815d2c026646/1/ATNUQlFNUkm1FDz9-CEha7XFKUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/c7a68f-7bf8-4f80-a9a2-815d2c026646/1/ATNUQlFNUkm1FDz9-CEha7XFKUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ATNUQlFNUkm1FDz9-CEha7XFKUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 28 Jun 2024 14:20:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:2f:09:f9:5c:3b:e5:21:f4:c0:de:2c:45:a8:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01335442514d5249b5143cfdf821216bb5c52940
Validity
Not Before: Jan 1 16:29:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=344569baf64c2a821b704cd061ae9a308f4bbfa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:7c:86:c3:c5:a6:b6:40:cd:f3:f2:68:8b:ee:
44:b7:03:dd:b6:40:e4:64:33:55:c1:fc:d0:06:05:
83:d1:1a:cb:97:1a:f4:a9:41:0b:05:5b:8e:14:ee:
98:f8:37:5e:eb:51:03:25:27:ea:40:ea:75:7c:19:
dc:d7:32:dc:bf:da:db:a4:d3:58:d0:e9:c3:0d:1d:
17:e7:69:ad:ef:91:fb:48:47:16:28:66:33:fc:4a:
77:63:35:b1:68:95:0a:27:04:71:74:10:dd:97:e2:
07:7e:a4:e9:e5:42:fe:04:4e:23:85:86:34:64:d1:
4d:61:84:cc:b9:d3:6e:6b:e3:e6:1c:7a:46:f4:0c:
f6:ee:e5:72:d5:7b:e8:d6:af:1d:6a:38:e9:57:6f:
76:18:b8:d7:60:e2:77:9f:9e:57:e0:79:40:a9:dc:
e8:21:3f:82:f5:3e:fd:dc:c6:65:10:81:10:87:4e:
ab:99:c1:10:c9:dc:9c:fe:dc:89:ec:9b:0e:87:42:
b0:cd:8e:21:86:8b:1b:93:bc:95:eb:35:74:a4:e6:
31:9f:e9:63:d0:8c:6c:b4:bd:6f:9f:3a:dc:c2:cd:
d1:63:b3:c9:ab:e6:71:f8:85:80:74:29:67:2f:c8:
51:35:3d:15:97:0f:82:30:bd:78:17:97:91:94:3f:
d8:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:45:69:BA:F6:4C:2A:82:1B:70:4C:D0:61:AE:9A:30:8F:4B:BF:A5
X509v3 Authority Key Identifier:
keyid:01:33:54:42:51:4D:52:49:B5:14:3C:FD:F8:21:21:6B:B5:C5:29:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ATNUQlFNUkm1FDz9-CEha7XFKUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/c7a68f-7bf8-4f80-a9a2-815d2c026646/1/NEVpuvZMKoIbcEzQYa6aMI9Lv6U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/c7a68f-7bf8-4f80-a9a2-815d2c026646/1/ATNUQlFNUkm1FDz9-CEha7XFKUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.212.192.0-88.212.211.255
88.212.220.0-88.212.231.255
185.206.100.0/22
IPv6:
2a02:2100::/32
Signature Algorithm: sha256WithRSAEncryption
5a:a5:c9:ed:2b:19:12:be:27:36:ad:a1:ad:b9:51:5d:68:0a:
9a:6f:66:5d:b5:bc:9d:54:9a:d2:02:22:12:d2:9f:8e:e1:6c:
77:73:b9:13:b4:1a:75:3e:23:8c:02:e8:67:c1:78:35:3a:9e:
fe:de:d2:bc:03:3d:0b:4e:d1:f3:24:17:9c:75:7b:24:74:10:
a3:7b:eb:be:d3:e5:2a:41:5e:e0:7c:fa:ae:20:03:b4:f4:d8:
6e:f0:70:72:31:d2:94:19:e3:c2:a9:1f:f7:e2:43:ce:fa:8d:
cc:64:57:c5:d6:ac:1b:f4:de:e9:40:4b:6d:fd:21:67:45:b5:
46:c3:98:91:8f:2c:47:35:82:5f:27:7e:e9:d4:81:04:70:7d:
b7:17:e2:92:6d:24:72:18:fe:b5:20:b1:f8:cf:12:dd:c5:fd:
6f:d1:67:95:ee:3c:49:bf:c8:c2:ca:b2:80:71:3f:03:c2:95:
ca:30:ba:3f:a4:f1:5a:fc:40:ce:f9:9c:75:76:d4:14:37:4a:
54:47:19:f5:b3:38:02:fc:11:5d:19:10:9d:4e:7e:68:c3:50:
f9:5f:18:91:20:34:55:45:67:0f:9e:e8:4d:49:f9:f2:60:63:
b2:a4:11:06:e2:62:81:5f:a9:48:34:9e:c8:d3:e2:ad:65:5e:
80:3a:2b:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 27 23:18:58 2024 by rpki-client on console-fra.rpki-client.org