Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/l9OTE9py5fyhYi9fETvLRZJ3F7E.roa
File: l9OTE9py5fyhYi9fETvLRZJ3F7E.roa (raw, json)
Hash identifier: /4mY+mcEvuGLGq7Xq8eeZMvrg8g1NJ4ZvV/1JBE8g+g=
Subject key identifier: 97:D3:93:13:DA:72:E5:FC:A1:62:2F:5F:11:3B:CB:45:92:77:17:B1
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 018CC7952288BCBE507A633BCD29838DCD29
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/l9OTE9py5fyhYi9fETvLRZJ3F7E.roa
Signing time: Tue 02 Jan 2024 00:31:28 +0000
ROA not before: Tue 02 Jan 2024 00:31:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14576
IP address blocks: 193.233.136.0/22 maxlen: 22
193.233.140.0/22 maxlen: 22
193.233.82.0/23 maxlen: 23
193.233.91.0/24 maxlen: 24
193.233.90.0/24 maxlen: 24
193.233.89.0/24 maxlen: 24
193.233.88.0/24 maxlen: 24
193.233.228.0/22 maxlen: 22
193.233.251.0/24 maxlen: 24
193.233.250.0/24 maxlen: 24
193.233.249.0/24 maxlen: 24
193.233.248.0/24 maxlen: 24
193.233.210.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 20:58:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:22:88:bc:be:50:7a:63:3b:cd:29:83:8d:cd:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Jan 2 00:31:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=97d39313da72e5fca1622f5f113bcb45927717b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:2e:09:c5:b9:b2:06:c3:28:3e:62:0d:d1:5c:
83:47:2f:57:14:53:20:e7:a9:e8:ea:8f:d9:7b:54:
52:50:00:bb:3d:68:57:8d:27:cc:e4:1a:ec:81:46:
4c:a4:ff:ed:6b:39:f9:a7:54:dd:2f:91:3e:9d:d3:
c1:52:db:26:38:7e:e6:db:a1:ee:1e:6b:f1:a5:86:
2c:05:5a:40:c6:0b:98:58:a2:3d:0d:b2:06:f4:d9:
aa:4c:1c:69:d3:ba:1a:bf:c5:f1:6c:9c:71:95:cf:
0f:35:31:9e:15:32:bc:fb:6d:d5:21:41:96:88:36:
aa:ee:4b:16:c2:cd:de:bb:90:0f:7e:c9:69:18:50:
74:01:13:3a:c2:98:87:01:8d:12:57:b3:ef:76:af:
4a:b2:ad:60:00:50:15:69:c6:d9:93:6a:2f:a5:d8:
78:bf:34:a7:67:73:d6:fd:32:13:fa:00:35:95:ff:
ea:58:f4:36:aa:07:18:04:b7:26:d8:43:26:84:db:
7f:08:05:05:74:66:61:83:d1:12:7d:74:c2:43:e7:
db:85:2d:3e:d9:65:d5:6a:25:b8:c7:dd:08:ec:28:
a4:d2:6b:4d:f0:c4:7b:97:cd:d4:bb:23:97:c9:45:
d8:a9:f5:fa:a5:0e:2f:08:42:d4:e4:e8:41:be:9f:
04:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:D3:93:13:DA:72:E5:FC:A1:62:2F:5F:11:3B:CB:45:92:77:17:B1
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/l9OTE9py5fyhYi9fETvLRZJ3F7E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.233.82.0/23
193.233.88.0/22
193.233.136.0/21
193.233.210.0/23
193.233.228.0/22
193.233.248.0/22
Signature Algorithm: sha256WithRSAEncryption
56:51:b0:26:7d:96:ca:8b:46:0b:95:55:3b:7e:79:cc:76:46:
10:0d:14:9e:93:d6:15:43:34:39:00:3c:b1:8d:ee:de:9d:22:
55:8c:93:4d:f1:b2:6d:66:43:d6:a9:41:70:09:c7:c0:44:7d:
60:ad:c4:89:0c:14:b5:b8:4d:38:c4:b7:5a:24:f6:10:31:ae:
2f:6c:a8:bb:c0:e1:4c:f3:34:17:87:3b:9d:39:4a:8e:81:c8:
49:92:4e:39:69:5f:ad:1c:06:ef:7f:77:c8:5d:29:22:eb:47:
30:53:26:94:08:d8:0c:11:d8:2f:25:d9:7b:89:8a:86:fb:9c:
68:c4:9a:b8:db:7d:4a:a1:74:5b:b2:44:6e:0b:b0:b8:67:98:
ce:65:08:af:7c:c5:f0:51:47:e5:90:43:6e:e0:68:b6:e7:e6:
4e:67:73:b5:f4:c0:02:ea:2f:73:ce:0f:0c:01:2a:6a:7b:83:
a1:75:da:b5:70:11:af:e2:cd:85:9b:a7:c9:f0:a8:f8:c5:46:
12:1a:13:d6:b4:ee:b1:24:5c:46:8a:4b:17:d4:0a:05:88:14:
c2:82:17:f0:c8:f9:2f:93:12:94:c6:7b:da:d6:88:47:fd:12:
d8:82:0c:e8:12:41:c6:44:5e:0a:0d:31:ba:1d:64:89:ec:3f:
2a:56:c4:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 00:16:14 2024 by rpki-client on console-ams.rpki-client.org