Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/f150b1-43b9-4911-a005-aacad86c617d/1/y6C1e-UCM3EpoEJzWiddEcId2Qw.roa
File: y6C1e-UCM3EpoEJzWiddEcId2Qw.roa (raw, json)
Hash identifier: i5AgIhKdrTPfF4JsCsAhIv8T5BpONSNbBYVBavhuBG4=
Subject key identifier: CB:A0:B5:7B:E5:02:33:71:29:A0:42:73:5A:27:5D:11:C2:1D:D9:0C
Certificate issuer: /CN=3b3daef89306a75f0b88191440742a720afb3f20
Certificate serial: 018CC56EE5699DF6B85CB9F7FDF2FE4F1FFF
Authority key identifier: 3B:3D:AE:F8:93:06:A7:5F:0B:88:19:14:40:74:2A:72:0A:FB:3F:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oz2u-JMGp18LiBkUQHQqcgr7PyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/f150b1-43b9-4911-a005-aacad86c617d/1/y6C1e-UCM3EpoEJzWiddEcId2Qw.roa
Signing time: Mon 01 Jan 2024 14:30:28 +0000
ROA not before: Mon 01 Jan 2024 14:30:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 24796
IP address blocks: 193.201.40.0/24 maxlen: 24
193.24.29.0/24 maxlen: 24
185.33.110.0/24 maxlen: 24
185.33.110.0/23 maxlen: 23
185.33.111.0/24 maxlen: 24
185.33.108.0/23 maxlen: 23
185.33.108.0/24 maxlen: 24
185.33.108.0/22 maxlen: 22
185.33.109.0/24 maxlen: 24
2a0f:80::/32 maxlen: 32
2a0f:80:b::/48 maxlen: 48
2a0f:80:a::/48 maxlen: 48
2a0f:80:d::/48 maxlen: 48
2a0f:80:3::/48 maxlen: 48
2a0f:80:e::/48 maxlen: 48
2a0f:80:1::/48 maxlen: 48
2a0f:80:c::/48 maxlen: 48
2a0f:80:2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/f150b1-43b9-4911-a005-aacad86c617d/1/Oz2u-JMGp18LiBkUQHQqcgr7PyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/f150b1-43b9-4911-a005-aacad86c617d/1/Oz2u-JMGp18LiBkUQHQqcgr7PyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Oz2u-JMGp18LiBkUQHQqcgr7PyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:e5:69:9d:f6:b8:5c:b9:f7:fd:f2:fe:4f:1f:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b3daef89306a75f0b88191440742a720afb3f20
Validity
Not Before: Jan 1 14:30:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cba0b57be502337129a042735a275d11c21dd90c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ee:ab:7f:6c:57:f9:d7:48:09:b2:e3:26:41:
d4:9e:50:ec:70:36:b7:d6:3c:9e:96:c6:ef:35:f9:
9f:2b:7c:ea:f3:c5:af:13:c3:55:4d:50:ca:7e:6a:
f5:4c:0b:8d:da:70:ad:e2:8c:2e:ed:43:57:4f:23:
b4:ae:01:14:06:ef:bf:5b:83:15:3c:8a:04:78:97:
42:56:a9:9e:cf:e7:2b:1f:ec:f8:4b:75:6a:05:01:
31:08:e6:0b:70:ea:87:e3:95:f4:33:08:31:b6:25:
07:22:a0:c9:bf:01:1c:8f:39:0c:79:db:e9:ec:c3:
7a:d2:32:a1:2f:af:65:11:00:1f:07:9e:a4:bd:ee:
cd:67:cf:24:8c:bb:fc:ab:5d:21:bb:bb:ad:18:f5:
eb:8b:94:da:8e:18:dd:e4:41:5a:32:63:d4:31:eb:
c7:61:4e:f5:28:89:68:2e:45:5a:42:a1:c8:10:9d:
28:e3:9a:f6:84:ca:e0:c5:bc:1b:ef:ed:c9:82:bf:
44:34:9c:ad:c3:e0:15:eb:f0:b4:a6:01:e3:df:d1:
d6:4d:fd:66:46:9a:f9:03:5c:06:17:7b:f0:c1:8b:
be:3f:28:35:dd:a1:11:84:c0:10:fb:ef:99:ac:57:
f0:fd:65:8a:f1:66:30:eb:59:4d:09:a1:09:15:e4:
ef:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:A0:B5:7B:E5:02:33:71:29:A0:42:73:5A:27:5D:11:C2:1D:D9:0C
X509v3 Authority Key Identifier:
keyid:3B:3D:AE:F8:93:06:A7:5F:0B:88:19:14:40:74:2A:72:0A:FB:3F:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oz2u-JMGp18LiBkUQHQqcgr7PyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/f150b1-43b9-4911-a005-aacad86c617d/1/y6C1e-UCM3EpoEJzWiddEcId2Qw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/f150b1-43b9-4911-a005-aacad86c617d/1/Oz2u-JMGp18LiBkUQHQqcgr7PyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.33.108.0/22
193.24.29.0/24
193.201.40.0/24
IPv6:
2a0f:80::/32
Signature Algorithm: sha256WithRSAEncryption
a2:cb:96:55:80:e7:03:fe:48:2a:9c:84:79:b9:f0:73:a7:f3:
51:3a:d9:c0:81:b6:24:80:a7:67:d0:04:04:70:1c:70:99:d8:
96:fd:51:bb:01:e4:60:32:7a:41:29:08:d0:df:97:2a:fe:01:
45:8a:7e:f5:ec:ce:3a:e9:be:ab:20:fc:89:eb:81:fa:64:35:
88:7c:d5:29:b3:34:b6:74:fe:e2:c6:1f:2c:94:00:c0:ee:04:
86:24:11:46:b8:d0:cb:a1:b1:84:2d:9c:d7:62:1b:36:44:20:
9f:a9:5f:e3:54:d1:5b:2d:80:98:3c:5d:83:3e:3d:e0:9d:42:
d1:ec:1e:96:68:db:fe:b8:43:13:b8:aa:54:bb:3e:b7:1b:d3:
b8:bc:c1:f0:76:93:49:5b:eb:bb:fc:cb:0b:e9:e0:d8:c5:ed:
05:8a:41:d1:29:f5:c3:94:76:93:21:93:58:5d:b2:c0:c4:ca:
b8:4c:2d:39:0f:9e:39:b6:97:33:24:43:59:6f:a2:16:ff:44:
4b:4d:b4:99:e9:4a:d3:9e:37:8f:06:93:e7:05:67:e8:dd:7b:
fd:42:b4:9a:2e:b5:ce:14:34:a8:57:82:9b:1a:06:14:09:dc:
5a:fb:74:bf:44:32:36:b7:ac:83:51:71:2d:44:46:4f:1d:f8:
6e:06:f3:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 21:05:45 2024 by rpki-client on console-ams.rpki-client.org