Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/vxI1DEr5LXrFtENG1ZHEAhhPF7s.roa
File: vxI1DEr5LXrFtENG1ZHEAhhPF7s.roa (raw, json)
Hash identifier: UCKyeGj0KIqv6UmWla/GlGpbz9gDClZKD1fAoHtjTmQ=
Subject key identifier: BF:12:35:0C:4A:F9:2D:7A:C5:B4:43:46:D5:91:C4:02:18:4F:17:BB
Certificate issuer: /CN=f5d9a9282c9d2547c566634f3bacccbcf2588827
Certificate serial: 019230077922758C36E0C60F721C15CBB1E1
Authority key identifier: F5:D9:A9:28:2C:9D:25:47:C5:66:63:4F:3B:AC:CC:BC:F2:58:88:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9dmpKCydJUfFZmNPO6zMvPJYiCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/vxI1DEr5LXrFtENG1ZHEAhhPF7s.roa
Signing time: Thu 26 Sep 2024 20:30:49 +0000
ROA not before: Thu 26 Sep 2024 20:30:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49434
IP address blocks: 91.238.180.0/24 maxlen: 24
91.238.181.0/24 maxlen: 24
91.239.208.0/24 maxlen: 24
185.55.240.0/24 maxlen: 24
194.24.161.0/24 maxlen: 24
2a12:5e40::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/9dmpKCydJUfFZmNPO6zMvPJYiCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/9dmpKCydJUfFZmNPO6zMvPJYiCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/9dmpKCydJUfFZmNPO6zMvPJYiCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 05:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:30:07:79:22:75:8c:36:e0:c6:0f:72:1c:15:cb:b1:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5d9a9282c9d2547c566634f3bacccbcf2588827
Validity
Not Before: Sep 26 20:30:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bf12350c4af92d7ac5b44346d591c402184f17bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a1:b1:56:ef:32:d2:87:22:8e:a0:c9:1b:11:
a2:7d:d7:b7:7a:62:fc:e1:6f:3a:f6:a4:3d:20:09:
f8:f6:f8:88:ab:ce:2c:ac:99:c3:83:d6:87:69:d2:
19:e5:df:a0:a2:ea:3d:41:93:72:2d:77:93:44:f3:
92:53:b7:0d:ef:e4:3b:27:24:bf:97:04:7f:75:d8:
e6:d6:e1:0c:01:9f:7b:5e:a5:58:b6:11:36:26:c1:
b3:73:12:aa:de:e5:45:4b:f9:cb:41:66:fb:66:d6:
af:a8:33:b3:fc:94:39:c1:25:2a:58:a4:fe:3a:e7:
01:5c:5a:7b:13:e7:c8:41:73:37:8f:b5:3f:7b:82:
2c:56:5a:ec:37:08:3b:41:ca:b9:ab:c1:c7:1f:c3:
92:71:b9:ff:67:2f:07:c3:a8:96:e3:b8:da:c6:ea:
0f:3e:d7:d6:2e:d0:5e:9a:bd:c5:ee:c2:39:c0:50:
4b:21:1f:a5:37:b0:7d:f6:56:6f:06:f9:97:a9:e6:
b8:b9:38:64:0a:90:37:aa:37:78:12:9e:ea:ab:5a:
23:d3:e0:f1:c1:a2:a8:91:ba:70:41:ba:99:66:e8:
e7:ea:42:c4:1e:fe:88:21:e7:8f:db:b6:19:66:43:
62:78:a5:62:bd:71:de:ad:03:b4:8b:4f:51:ae:32:
0f:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:12:35:0C:4A:F9:2D:7A:C5:B4:43:46:D5:91:C4:02:18:4F:17:BB
X509v3 Authority Key Identifier:
keyid:F5:D9:A9:28:2C:9D:25:47:C5:66:63:4F:3B:AC:CC:BC:F2:58:88:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9dmpKCydJUfFZmNPO6zMvPJYiCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/vxI1DEr5LXrFtENG1ZHEAhhPF7s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/9dmpKCydJUfFZmNPO6zMvPJYiCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.238.180.0/23
91.239.208.0/24
185.55.240.0/24
194.24.161.0/24
IPv6:
2a12:5e40::/32
Signature Algorithm: sha256WithRSAEncryption
6c:63:28:2b:3e:23:60:2d:14:0d:51:46:d3:1b:b9:b7:1e:27:
46:7c:16:b9:48:ea:82:08:4f:23:d4:09:27:ce:0d:03:f3:c1:
b0:b6:0b:a3:95:6c:15:c4:a7:7b:a1:c3:df:ec:87:80:dd:95:
9a:97:eb:59:61:a7:02:70:d6:6a:93:e9:07:59:5f:fa:ca:0d:
99:05:1f:9b:62:9d:74:de:cc:dc:3e:08:f8:7f:9b:9d:c8:71:
8c:7e:a3:39:85:7a:48:aa:5c:69:bb:a7:0c:ab:d3:9a:91:f4:
04:7a:8d:32:d4:65:09:d6:d3:cd:63:fb:56:3d:cf:32:b3:1e:
ef:ef:55:0f:30:5a:80:ee:8e:85:7d:a9:bd:a6:28:e0:8e:36:
d3:74:62:e3:94:23:e2:6e:d4:31:f6:eb:b9:2f:73:d0:ca:6e:
94:cd:d9:ea:52:9c:9c:14:77:3d:bc:bb:05:3f:69:f6:7a:39:
87:c1:53:53:a2:41:65:68:c4:20:42:70:7b:f7:66:0d:07:95:
18:11:aa:d3:4e:6a:0b:c2:84:2f:ed:af:12:ed:28:d0:b6:90:
56:44:74:50:84:ed:48:be:84:25:0d:63:4a:d8:1e:e0:71:e6:
45:23:1a:56:25:09:2c:9e:81:13:7f:41:8e:70:52:09:c7:08:
ed:de:a6:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:43:01 2024 by rpki-client on console-fra.rpki-client.org