Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/29bf7b-4745-4423-a8fa-a32e2ed0cfd3/1/0uZZcmWDCbANRCKso6dcF-UTZwM.roa
File: 0uZZcmWDCbANRCKso6dcF-UTZwM.roa (raw, json)
Hash identifier: p8AFs4jfLc24qitJc+FO4Xczh4lCV0z5v9r25Jf8LCE=
Subject key identifier: D2:E6:59:72:65:83:09:B0:0D:44:22:AC:A3:A7:5C:17:E5:13:67:03
Certificate issuer: /CN=6177c580926599e83ab735ba2e04fc108778c441
Certificate serial: 018CC94D9A41C48197F2BF34B83F3B5212EF
Authority key identifier: 61:77:C5:80:92:65:99:E8:3A:B7:35:BA:2E:04:FC:10:87:78:C4:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YXfFgJJlmeg6tzW6LgT8EId4xEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/29bf7b-4745-4423-a8fa-a32e2ed0cfd3/1/0uZZcmWDCbANRCKso6dcF-UTZwM.roa
Signing time: Tue 02 Jan 2024 08:32:35 +0000
ROA not before: Tue 02 Jan 2024 08:32:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207131
IP address blocks: 93.95.28.0/24 maxlen: 24
2a12:af40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/29bf7b-4745-4423-a8fa-a32e2ed0cfd3/1/YXfFgJJlmeg6tzW6LgT8EId4xEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/29bf7b-4745-4423-a8fa-a32e2ed0cfd3/1/YXfFgJJlmeg6tzW6LgT8EId4xEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/YXfFgJJlmeg6tzW6LgT8EId4xEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 05:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:9a:41:c4:81:97:f2:bf:34:b8:3f:3b:52:12:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6177c580926599e83ab735ba2e04fc108778c441
Validity
Not Before: Jan 2 08:32:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d2e65972658309b00d4422aca3a75c17e5136703
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:14:e6:24:a2:7c:70:d9:01:7d:45:29:40:b1:
52:66:0d:3c:60:6a:f9:54:e7:d0:c5:1a:0d:4c:ea:
4e:a3:f3:d4:e8:50:21:e9:ab:c9:e3:bd:01:b8:1d:
f0:57:6f:98:d1:77:90:3a:b8:95:31:5e:2c:f3:a3:
f8:e7:55:38:56:d0:14:a5:38:e6:7b:49:d0:3f:e3:
0d:73:bd:50:c8:0d:b5:80:61:fb:68:3c:f8:c6:40:
93:b5:f0:2b:8c:69:ad:d6:3d:fc:2d:cc:9e:26:9d:
63:bf:48:48:35:7d:cf:27:0d:d8:71:bb:a4:1a:b9:
7c:85:b0:12:c4:fc:0c:f5:5d:cc:98:35:02:c2:aa:
1c:9d:87:e3:84:78:cf:32:ea:1f:bd:3d:aa:c4:a3:
0c:5a:81:91:85:8b:0b:a4:0c:bc:13:dd:01:9f:1a:
75:39:d3:e8:6f:f6:47:7c:7f:19:b2:3a:43:bb:4d:
76:ae:b1:26:11:61:a0:61:73:cf:d3:cf:b3:ae:7a:
d9:d1:78:57:01:19:24:61:98:be:dc:21:cb:5b:6b:
9b:af:f8:a6:fe:0b:39:6f:a7:bc:99:6b:ea:fc:43:
28:0b:b0:f2:bc:4b:e1:f6:e6:93:62:f9:90:81:d2:
68:83:54:9b:7a:20:23:89:23:f8:8e:a3:8d:00:92:
26:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:E6:59:72:65:83:09:B0:0D:44:22:AC:A3:A7:5C:17:E5:13:67:03
X509v3 Authority Key Identifier:
keyid:61:77:C5:80:92:65:99:E8:3A:B7:35:BA:2E:04:FC:10:87:78:C4:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YXfFgJJlmeg6tzW6LgT8EId4xEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/29bf7b-4745-4423-a8fa-a32e2ed0cfd3/1/0uZZcmWDCbANRCKso6dcF-UTZwM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/29bf7b-4745-4423-a8fa-a32e2ed0cfd3/1/YXfFgJJlmeg6tzW6LgT8EId4xEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.95.28.0/24
IPv6:
2a12:af40::/29
Signature Algorithm: sha256WithRSAEncryption
b3:b2:40:b1:2e:54:03:0d:ef:57:05:62:a3:e8:26:59:6c:dd:
9c:52:84:b6:f5:77:f2:58:3a:45:34:bc:0c:a4:a1:fa:bc:b6:
0a:38:28:2b:53:85:b4:83:b8:74:22:d6:ed:a7:7c:1e:2f:88:
85:ad:5c:53:e3:0d:e4:10:3a:69:08:97:95:eb:4a:e2:de:59:
17:9d:14:18:4e:07:a3:e2:57:d3:bf:8b:90:5d:f7:28:e3:4b:
b9:5a:89:0d:ff:9f:6d:50:e4:f8:33:a8:4b:92:b3:e6:a3:67:
f7:3d:da:ac:e9:50:10:99:d5:c6:78:ee:2f:07:55:5f:b8:ee:
00:67:e6:54:49:eb:85:ea:40:29:8f:ba:d6:24:3e:b6:24:f1:
6b:42:5c:2d:d3:19:fa:f5:bd:83:a1:ea:17:9b:6a:8a:1a:b9:
d8:26:35:9b:9a:ea:f3:69:28:3e:5a:71:86:c0:14:d2:a9:14:
21:b9:8e:44:c4:ee:f5:d8:cc:3c:4c:b8:8c:40:bd:7a:7d:fd:
99:ae:7a:10:7f:17:96:1b:5e:76:82:14:96:ae:9f:52:e8:9f:
65:3a:f1:14:7a:fa:45:d2:df:66:f8:51:ad:35:40:e8:e5:53:
57:83:53:b9:83:cb:3a:b2:19:09:13:c5:b6:e7:29:25:0f:5c:
42:20:c2:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 13:35:03 2024 by rpki-client on console-fra.rpki-client.org