Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/B03hxoCLKDqZrBrm478nVnwuOk8.roa
File: B03hxoCLKDqZrBrm478nVnwuOk8.roa (raw, json)
Hash identifier: 7SA+/2qQ/Uk1c0f4M6ZbS3tNtYMglA7T/ks8kJCIN90=
Subject key identifier: 07:4D:E1:C6:80:8B:28:3A:99:AC:1A:E6:E3:BF:27:56:7C:2E:3A:4F
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 018CC8DF16641C65FA7C3EAD901015346344
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/B03hxoCLKDqZrBrm478nVnwuOk8.roa
Signing time: Tue 02 Jan 2024 06:31:52 +0000
ROA not before: Tue 02 Jan 2024 06:31:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197518
IP address blocks: 185.255.200.0/22 maxlen: 22
188.95.248.0/21 maxlen: 21
130.193.104.0/24 maxlen: 24
130.193.104.0/21 maxlen: 21
130.193.108.0/24 maxlen: 24
2a03:680::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 May 2024 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:16:64:1c:65:fa:7c:3e:ad:90:10:15:34:63:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Jan 2 06:31:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=074de1c6808b283a99ac1ae6e3bf27567c2e3a4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:22:b1:10:1a:b0:6d:ea:f1:b0:97:a3:85:3d:
ee:ea:42:e7:d2:df:36:ac:c9:62:a7:e6:67:47:4d:
4f:b6:21:24:c7:05:81:cf:94:90:bd:82:8b:38:a4:
71:92:c1:41:fe:68:3b:6d:e1:65:dc:1f:c2:4a:bd:
25:37:10:06:09:5a:c8:bc:ab:3d:18:41:ef:39:f6:
a0:91:ed:52:a6:98:64:b7:7b:7f:70:a5:20:f8:cb:
f1:97:0e:8a:77:d0:d5:ee:89:8a:f8:a5:72:54:ee:
b8:15:21:7f:2f:da:23:15:c4:b3:e9:63:6a:93:7c:
96:e5:88:c6:56:59:43:83:78:e2:3b:51:c7:d9:7a:
eb:92:5d:ba:5c:2f:74:19:93:2d:5a:ee:7a:05:68:
54:91:39:ba:af:c0:e9:89:fc:22:30:98:2b:50:c5:
3f:b1:28:86:09:25:b2:3d:e9:a1:94:90:fc:05:34:
22:3f:68:ef:06:82:df:d8:ca:a8:af:ea:b9:93:57:
5a:9b:84:65:67:1b:fc:bd:ed:a6:94:f6:f7:58:8e:
b0:5b:e8:e3:f2:c3:73:c2:fa:1d:27:00:80:28:6d:
3f:10:22:29:6d:57:ad:bc:72:00:ee:97:44:a1:55:
05:6a:dc:f7:67:d2:07:be:35:19:39:be:10:47:2c:
1a:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:4D:E1:C6:80:8B:28:3A:99:AC:1A:E6:E3:BF:27:56:7C:2E:3A:4F
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/B03hxoCLKDqZrBrm478nVnwuOk8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.193.104.0/21
185.255.200.0/22
188.95.248.0/21
IPv6:
2a03:680::/32
Signature Algorithm: sha256WithRSAEncryption
7e:53:f9:21:e5:cf:43:f8:4a:9b:8a:56:e9:89:4f:f1:ba:5d:
e6:6b:e0:38:4f:53:35:29:31:56:f1:94:e5:7d:7d:7d:84:e1:
ff:16:8f:17:03:85:09:96:6d:34:36:57:13:1f:93:9c:00:6e:
83:91:b6:54:86:95:0f:5b:6b:d3:11:d0:5d:b8:2a:e2:8b:19:
e3:69:9d:02:29:11:e2:be:2a:13:88:26:5b:80:49:c1:a3:dd:
9c:be:d2:78:c3:fa:09:0b:89:ff:1f:e1:a0:34:c5:a8:2f:12:
ac:4a:8f:af:5e:c5:11:40:5a:3a:e2:03:86:a5:71:10:03:84:
ce:d0:2b:e5:0e:db:db:cc:3e:e4:87:20:79:67:98:27:20:10:
89:44:cb:a5:7b:72:d5:b0:5a:01:b7:2c:5b:d1:e8:b0:12:5b:
cf:b3:fe:34:b4:18:b2:da:be:67:ee:8d:83:be:b0:db:33:cb:
bc:57:b0:09:c2:a4:cf:81:35:d4:38:35:c6:23:d9:25:f3:07:
aa:26:8f:73:9c:2c:9b:8c:8e:34:b2:76:ba:43:13:c0:c7:e1:
0c:04:a0:ee:03:39:f8:c9:eb:fd:0e:5d:09:e5:c2:6e:66:16:
82:b6:56:dd:4f:35:d6:f9:b8:7e:57:2b:e4:e8:9f:a2:53:41:
2a:8c:87:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 29 07:49:19 2024 by rpki-client on console-ams.rpki-client.org