Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0NCzHTwsPBaGJT9lphUx5lKC5rw.roa
File: 0NCzHTwsPBaGJT9lphUx5lKC5rw.roa (raw, json)
Hash identifier: SJTRuu5StLMkRSb5bWueZ2Rc9ezY6jgheYpfyxkJF6I=
Subject key identifier: D0:D0:B3:1D:3C:2C:3C:16:86:25:3F:65:A6:15:31:E6:52:82:E6:BC
Certificate issuer: /CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Certificate serial: 018CC7952BEE6B64F046F58E7817CBB8922F
Authority key identifier: D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0NCzHTwsPBaGJT9lphUx5lKC5rw.roa
Signing time: Tue 02 Jan 2024 00:31:31 +0000
ROA not before: Tue 02 Jan 2024 00:31:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202592
IP address blocks: 185.96.56.0/22 maxlen: 24
194.38.48.0/22 maxlen: 24
193.168.200.0/22 maxlen: 24
193.160.220.0/22 maxlen: 24
185.136.16.0/22 maxlen: 24
147.185.196.0/23 maxlen: 24
147.185.206.0/23 maxlen: 24
207.244.196.0/22 maxlen: 24
43.240.148.0/22 maxlen: 24
207.244.208.0/22 maxlen: 24
45.12.100.0/22 maxlen: 24
2a07:5b40::/29 maxlen: 48
2a05:ff00::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Jun 2024 06:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:2b:ee:6b:64:f0:46:f5:8e:78:17:cb:b8:92:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Validity
Not Before: Jan 2 00:31:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d0d0b31d3c2c3c1686253f65a61531e65282e6bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:da:ac:46:50:52:c7:04:7c:33:e9:6f:b5:7c:
cb:9c:a3:ca:3c:9e:43:d3:db:4f:3f:30:fd:58:e5:
c1:07:be:d2:da:17:ec:4e:ec:67:de:36:06:90:e4:
ef:11:9f:8b:ad:c9:08:c5:43:b1:e3:a8:66:00:7e:
53:81:b4:5d:f4:a9:09:ab:b6:a6:a3:e0:70:0c:94:
a0:8f:ec:53:c3:99:7a:72:b5:10:e3:4e:4b:b3:00:
d0:41:97:08:38:15:4c:29:d2:4b:08:c8:4d:89:17:
af:4c:e4:64:f0:8d:1b:b7:79:1a:c8:d6:34:bf:c6:
4d:c5:6d:67:2b:85:de:47:b8:66:dc:f6:b4:77:b1:
d8:48:d0:a9:b4:f9:37:76:c0:52:ce:0e:6f:f7:30:
12:22:55:47:0e:6b:20:92:31:a3:d5:9a:b1:e6:38:
3f:de:ee:9c:35:08:1c:77:9e:fc:8e:ce:5e:d5:aa:
36:06:4c:ad:fb:fc:4d:e1:67:e3:54:97:62:bd:19:
06:86:86:9f:01:09:26:1d:44:d9:3c:75:7a:23:02:
38:50:a4:0f:71:64:99:65:59:a3:89:46:ef:19:a0:
4c:7d:25:d3:31:0b:00:2c:f2:e8:8b:df:fd:6d:de:
76:06:70:b5:7f:46:b7:26:66:4d:2a:51:16:fc:b3:
84:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:D0:B3:1D:3C:2C:3C:16:86:25:3F:65:A6:15:31:E6:52:82:E6:BC
X509v3 Authority Key Identifier:
keyid:D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0NCzHTwsPBaGJT9lphUx5lKC5rw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.240.148.0/22
45.12.100.0/22
147.185.196.0/23
147.185.206.0/23
185.96.56.0/22
185.136.16.0/22
193.160.220.0/22
193.168.200.0/22
194.38.48.0/22
207.244.196.0/22
207.244.208.0/22
IPv6:
2a05:ff00::/29
2a07:5b40::/29
Signature Algorithm: sha256WithRSAEncryption
68:da:eb:89:87:d6:8a:c1:85:05:4c:75:9a:b7:8c:c9:03:33:
7e:44:df:05:dd:d3:60:2d:9c:7f:a7:3b:40:5d:85:f1:56:a4:
d4:77:61:95:79:18:ec:4f:f2:01:c0:e0:54:de:1c:36:a7:12:
b6:29:8c:eb:f0:62:57:ee:e9:f7:e6:d3:4f:de:8e:df:70:b4:
ec:7c:a1:cd:ad:3d:9c:ed:d0:2f:c7:d6:6f:1e:0d:1d:5f:5f:
11:f1:9a:c2:f2:aa:87:83:71:a0:a1:5d:a3:00:3b:38:7e:5a:
e2:dd:ba:de:99:9b:c3:89:c2:7c:5e:cc:64:ff:b4:2b:a9:47:
48:9d:4c:7e:cb:61:b3:46:cb:49:b6:7c:c6:f8:44:22:8d:5b:
ba:a4:55:d0:db:d9:64:76:05:80:ed:6d:36:ad:94:97:73:47:
b8:23:ae:5f:08:92:55:80:7e:ef:cf:ae:52:ed:34:6d:ec:31:
9e:51:37:3e:70:eb:58:c0:52:1f:a3:b3:36:03:5b:28:9c:26:
99:82:1d:7d:79:75:c4:a3:4c:7e:1e:d7:d1:47:e2:35:e8:40:
28:b9:40:b1:20:35:00:07:cd:65:d6:fa:05:d4:f1:3a:cb:d7:
2e:43:8e:e9:ec:ef:b3:79:9a:d2:6a:7d:ab:c2:7c:12:8b:0f:
81:e2:13:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 09:45:09 2024 by rpki-client on console-fra.rpki-client.org