Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/iWFXwSnjUwDKRUy_EQHbPwlfXTk.roa
File: iWFXwSnjUwDKRUy_EQHbPwlfXTk.roa (raw, json)
Hash identifier: V0ASOigHbRk/2stv51tEFeUunqOLL1VOOAvyW8ggl7Y=
Subject key identifier: 89:61:57:C1:29:E3:53:00:CA:45:4C:BF:11:01:DB:3F:09:5F:5D:39
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018CCA2A790222A63E03EDF17ED0D277E72F
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/iWFXwSnjUwDKRUy_EQHbPwlfXTk.roa
Signing time: Tue 02 Jan 2024 12:33:50 +0000
ROA not before: Tue 02 Jan 2024 12:33:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49392
IP address blocks: 194.87.118.0/23 maxlen: 24
193.124.254.0/24 maxlen: 24
195.133.10.0/23 maxlen: 23
195.133.26.0/23 maxlen: 24
195.133.52.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 19:07:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:79:02:22:a6:3e:03:ed:f1:7e:d0:d2:77:e7:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 2 12:33:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=896157c129e35300ca454cbf1101db3f095f5d39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:7d:5b:91:dc:8d:0b:80:9f:e8:37:13:a7:d4:
86:4d:23:db:9d:74:f1:c6:99:cb:00:1c:96:af:49:
ff:bf:a4:ec:87:71:a5:d1:92:63:38:b0:cb:ca:7f:
a9:1d:05:2a:7c:e0:7d:1f:7c:27:6f:73:de:c3:00:
e9:76:74:81:26:28:39:e9:3e:19:2c:ee:cd:c2:18:
6a:f4:58:5e:19:d8:a8:a0:b1:61:0d:1e:1e:6c:f7:
2a:c6:45:21:e4:c6:0e:73:b3:3f:87:c2:ca:e0:db:
9d:a8:3f:d2:84:f7:05:c1:d4:33:fb:14:ae:56:7b:
5d:48:7f:99:cd:14:dc:ae:73:67:c7:af:ce:26:04:
32:f2:84:65:61:5c:e8:22:b3:82:b7:d6:4a:f6:8d:
6d:47:c1:27:bc:a3:35:6a:49:cc:8b:c1:b7:bc:a9:
6a:c9:9e:5d:90:19:32:2b:a2:92:30:6f:02:ff:fd:
3d:d2:c6:a8:e7:2b:87:db:d8:4d:83:fe:26:14:47:
2b:5e:6e:b3:e0:19:ae:43:f3:fb:14:32:6f:02:9f:
ab:c9:8c:20:3e:cb:a1:26:32:c2:56:05:7a:99:1c:
e4:dd:2d:84:23:ac:ea:12:d2:72:a9:ac:19:b0:ee:
69:fc:ca:2a:c8:b4:a2:0c:e0:61:76:78:10:d2:bf:
0b:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:61:57:C1:29:E3:53:00:CA:45:4C:BF:11:01:DB:3F:09:5F:5D:39
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/iWFXwSnjUwDKRUy_EQHbPwlfXTk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.254.0/24
194.87.118.0/23
195.133.10.0/23
195.133.26.0/23
195.133.52.0/23
Signature Algorithm: sha256WithRSAEncryption
71:6d:c6:a7:a1:79:d5:52:3a:a2:ad:59:7a:fc:00:7d:99:37:
06:2c:cc:a5:9b:ce:c3:9a:37:59:09:94:f8:71:b5:96:41:cc:
01:fb:60:f5:b6:2f:ee:ef:34:3f:25:84:54:e8:96:4b:d1:4d:
d7:64:c3:96:3d:50:5f:93:5e:d3:71:87:f8:ea:58:9a:fd:f2:
f2:53:b9:3b:35:06:7c:0a:72:0c:02:1b:e6:b6:8f:0a:bf:58:
cc:48:60:9c:3a:0e:a2:a7:7f:06:f5:f9:ac:c6:ba:31:e8:fa:
47:37:31:60:07:e8:e6:15:a3:8e:2e:da:cb:ed:d9:af:d5:54:
e1:7d:f6:a3:22:7c:bf:f7:c0:29:c0:27:60:68:d0:b4:c2:88:
3f:3e:3f:73:ee:b8:13:ed:75:1b:3f:c3:2f:64:28:28:a0:af:
c6:fe:e7:98:c1:de:ec:dc:57:8a:d2:cd:90:be:62:da:7e:d2:
e5:57:67:3d:96:74:ea:f8:84:2c:d4:32:7c:79:ca:4b:ba:3d:
36:ad:ed:64:fc:1f:da:7a:76:1f:fb:09:ca:59:9b:49:a4:c2:
bc:fa:04:e5:e1:d3:c4:87:05:7f:dc:3e:89:ec:06:a2:12:c4:
2c:64:94:ee:c1:b2:22:8a:d0:8d:c1:de:a9:0c:95:28:34:12:
3b:9e:92:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 01:26:11 2024 by rpki-client on console-fra.rpki-client.org