Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/B2om4sJ8TKCJI2QNXTltC3HOjBg.roa
File: B2om4sJ8TKCJI2QNXTltC3HOjBg.roa (raw, json)
Hash identifier: i1hl8MsoP1yu0RwBzoSUy0PyzgBw+bMLL6ozFWphmoo=
Subject key identifier: 07:6A:26:E2:C2:7C:4C:A0:89:23:64:0D:5D:39:6D:0B:71:CE:8C:18
Certificate issuer: /CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Certificate serial: 018D94D6B4D9559EDD1D91D90DEBC75E6C59
Authority key identifier: 6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/B2om4sJ8TKCJI2QNXTltC3HOjBg.roa
Signing time: Sat 10 Feb 2024 21:05:15 +0000
ROA not before: Sat 10 Feb 2024 21:05:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44477
IP address blocks: 94.131.2.0/24 maxlen: 24
94.131.3.0/24 maxlen: 24
94.131.8.0/21 maxlen: 24
94.131.96.0/24 maxlen: 24
94.131.97.0/24 maxlen: 24
94.131.98.0/24 maxlen: 24
94.131.99.0/24 maxlen: 24
94.131.100.0/24 maxlen: 24
94.131.101.0/24 maxlen: 24
94.131.102.0/24 maxlen: 24
94.131.103.0/24 maxlen: 24
94.131.104.0/24 maxlen: 24
94.131.105.0/24 maxlen: 24
94.131.106.0/24 maxlen: 24
94.131.107.0/24 maxlen: 24
94.131.108.0/24 maxlen: 24
94.131.109.0/24 maxlen: 24
94.131.110.0/24 maxlen: 24
94.131.111.0/24 maxlen: 24
94.131.112.0/24 maxlen: 24
94.131.113.0/24 maxlen: 24
94.131.114.0/24 maxlen: 24
94.131.115.0/24 maxlen: 24
94.131.116.0/24 maxlen: 24
94.131.117.0/24 maxlen: 24
94.131.118.0/24 maxlen: 24
94.131.119.0/24 maxlen: 24
94.131.120.0/22 maxlen: 24
95.164.0.0/22 maxlen: 24
95.164.4.0/22 maxlen: 24
95.164.8.0/22 maxlen: 24
95.164.16.0/22 maxlen: 24
95.164.21.0/24 maxlen: 24
95.164.22.0/24 maxlen: 24
95.164.23.0/24 maxlen: 24
95.164.32.0/21 maxlen: 24
95.164.44.0/22 maxlen: 24
95.164.51.0/24 maxlen: 24
95.164.60.0/22 maxlen: 24
95.164.68.0/24 maxlen: 24
95.164.69.0/24 maxlen: 24
95.164.84.0/22 maxlen: 24
95.164.88.0/24 maxlen: 24
95.164.89.0/24 maxlen: 24
95.164.112.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:94:d6:b4:d9:55:9e:dd:1d:91:d9:0d:eb:c7:5e:6c:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Validity
Not Before: Feb 10 21:05:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=076a26e2c27c4ca08923640d5d396d0b71ce8c18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:58:43:3d:ee:ce:a5:4f:af:a1:0a:41:e7:f4:
28:4f:68:3b:f2:89:b2:6d:47:76:9f:f4:e1:40:e0:
05:b8:6c:fd:63:07:3b:f7:fa:46:4d:b5:da:2a:48:
2d:47:76:f6:69:24:67:51:dc:c3:34:d3:e4:7d:0c:
fb:19:93:a7:25:21:c0:f7:ce:b2:85:8d:3f:9f:3f:
7b:57:ce:fe:5e:ff:7d:7d:fe:33:95:d0:bd:36:3b:
23:79:8d:46:83:c6:3a:ae:bf:5c:53:d7:88:10:69:
57:7f:0d:34:24:fb:35:ae:68:36:99:e2:dc:3e:ab:
90:a6:80:0a:b8:73:0e:8d:06:91:7d:1e:c0:0c:57:
75:22:18:88:1e:d3:8b:9b:51:0d:7f:6a:c2:05:4c:
50:94:0a:e0:2c:35:32:b2:c9:d4:fc:58:ee:36:6e:
27:47:41:63:27:ae:54:c4:e7:5d:99:3b:14:d5:af:
9d:8c:fd:41:24:bd:93:6b:59:42:bf:ff:4f:0b:f3:
84:94:78:c7:0e:82:cc:a9:8c:fd:89:12:9c:5a:56:
5f:0a:3e:ae:4e:57:39:53:03:f7:23:eb:1d:14:f6:
c3:6a:74:6b:6d:af:23:b2:70:fe:f7:ad:5a:df:37:
85:eb:95:02:b5:94:45:52:45:fa:55:56:c9:ce:0b:
66:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:6A:26:E2:C2:7C:4C:A0:89:23:64:0D:5D:39:6D:0B:71:CE:8C:18
X509v3 Authority Key Identifier:
keyid:6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/B2om4sJ8TKCJI2QNXTltC3HOjBg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.131.2.0/23
94.131.8.0/21
94.131.96.0-94.131.123.255
95.164.0.0-95.164.11.255
95.164.16.0/22
95.164.21.0-95.164.23.255
95.164.32.0/21
95.164.44.0/22
95.164.51.0/24
95.164.60.0/22
95.164.68.0/23
95.164.84.0-95.164.89.255
95.164.112.0/21
Signature Algorithm: sha256WithRSAEncryption
a4:35:d5:89:16:3a:1c:cf:7a:b5:1f:4e:25:b6:f3:a8:17:a7:
79:b9:de:d1:7f:2e:07:46:b1:b1:87:10:53:02:10:c3:d2:1d:
4b:b3:ab:3a:5d:6e:22:f8:8a:b5:a8:51:7a:d4:c0:84:e7:3f:
25:70:f3:4a:f7:1a:60:f5:b9:1b:f5:df:57:87:55:92:49:9e:
90:5d:0c:d7:66:92:34:32:51:17:4c:43:c6:ee:04:0f:ab:8b:
7f:f7:02:5d:9a:2c:47:4f:75:5e:36:55:89:fa:34:6e:8e:19:
2b:80:32:6e:13:74:11:e9:c7:81:dc:36:6b:f3:09:bf:d8:46:
88:4d:35:9f:23:ed:a9:b5:31:ca:47:50:86:31:05:ca:0d:e3:
f8:a1:56:46:4c:c4:5e:e6:98:fc:82:75:ad:e7:6c:d7:b4:ef:
df:a2:99:43:80:32:b8:41:4c:90:de:ee:5b:cd:54:8e:a4:23:
53:5d:64:e5:b2:7f:cf:80:5b:04:56:d6:47:06:3b:6f:1f:3b:
ea:d5:6a:66:1d:c1:ea:2a:0e:55:5e:d4:45:34:d7:f2:d7:94:
94:de:35:ef:6d:1a:97:c4:01:c9:4f:d4:51:28:b6:01:d3:0b:
a6:85:8b:26:da:6a:49:bb:01:a1:d1:85:94:aa:15:11:93:56:
d1:68:01:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 21:05:44 2024 by rpki-client on console-ams.rpki-client.org