Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/C4MW5yzzQptlkxxEMmuWXdshUho.roa
File: C4MW5yzzQptlkxxEMmuWXdshUho.roa (raw, json)
Hash identifier: Awwl9nf0G3rtcFCYN/hjgJd7/BRCHpf8p7lewgXiaPU=
Subject key identifier: 0B:83:16:E7:2C:F3:42:9B:65:93:1C:44:32:6B:96:5D:DB:21:52:1A
Certificate issuer: /CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Certificate serial: 018CC794F0675B6E60933AA18FB7D25C691E
Authority key identifier: E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/C4MW5yzzQptlkxxEMmuWXdshUho.roa
Signing time: Tue 02 Jan 2024 00:31:15 +0000
ROA not before: Tue 02 Jan 2024 00:31:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207795
IP address blocks: 194.28.156.0/24 maxlen: 24
194.28.158.0/24 maxlen: 24
194.104.4.0/24 maxlen: 24
194.104.5.0/24 maxlen: 24
194.104.6.0/24 maxlen: 24
212.69.132.0/24 maxlen: 24
212.69.133.0/24 maxlen: 24
212.69.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:f0:67:5b:6e:60:93:3a:a1:8f:b7:d2:5c:69:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Validity
Not Before: Jan 2 00:31:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0b8316e72cf3429b65931c44326b965ddb21521a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:20:98:ab:71:12:ca:da:ce:3a:76:24:17:46:
87:30:20:60:70:dd:12:1d:37:c8:bc:84:71:0f:87:
92:af:27:4d:07:5d:06:9c:74:b9:12:fd:ae:f2:47:
de:ba:91:4e:68:ab:af:52:65:e9:6d:fe:c2:ab:0b:
01:a5:dc:18:19:31:26:94:47:67:d2:a8:20:85:84:
ca:0d:9f:1f:bb:56:9d:39:11:a6:12:42:73:5a:1f:
bb:1a:fe:86:f9:db:f5:b6:e0:3d:b3:42:84:3c:2f:
6f:2c:d4:6c:18:0e:b0:86:7b:92:92:86:67:0e:d5:
93:2e:fa:2b:5f:39:ef:ab:7b:16:e1:09:f1:b2:70:
89:fc:0e:c1:bb:08:f3:81:ff:8b:ab:2d:61:4f:a8:
50:93:f7:f5:88:a1:81:56:d6:e7:c2:4f:42:2b:00:
de:7e:db:1b:a2:39:e6:fd:ff:87:5c:b4:33:be:b3:
76:68:dc:11:4a:48:15:80:f5:e1:b1:9e:c0:e8:6b:
f4:1d:de:6f:5a:c3:d8:b3:2d:3e:80:eb:f3:28:73:
59:4f:59:b3:e2:55:47:90:ef:f2:85:97:38:0e:26:
54:d8:ae:62:f1:77:b2:6a:41:d1:28:bb:2f:35:c2:
f9:0f:53:df:60:c4:be:e0:51:d8:29:23:97:ea:43:
b4:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:83:16:E7:2C:F3:42:9B:65:93:1C:44:32:6B:96:5D:DB:21:52:1A
X509v3 Authority Key Identifier:
keyid:E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/C4MW5yzzQptlkxxEMmuWXdshUho.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.28.156.0/24
194.28.158.0/24
194.104.4.0-194.104.6.255
212.69.132.0-212.69.134.255
Signature Algorithm: sha256WithRSAEncryption
1f:6d:ad:8e:06:2d:95:22:d5:6e:a1:b5:0c:ea:02:f8:8f:9e:
66:69:a3:57:c3:34:11:28:13:d6:19:56:4f:00:1e:d2:4f:e7:
c8:7a:7f:51:16:72:58:e3:66:6c:e4:65:e4:4b:ce:87:31:a8:
68:6a:a5:84:e6:20:fc:46:01:4a:6e:3c:72:4d:06:08:79:4a:
b2:3f:bb:f7:b1:a9:53:a2:e2:dc:c8:e9:7a:23:80:f4:e1:2d:
be:e5:70:5a:15:b9:99:72:d2:c4:90:e7:71:69:be:8e:a8:b2:
b2:1d:27:a1:c0:1e:3b:e6:30:32:77:89:19:3b:b4:13:50:cc:
58:66:36:4b:46:bb:b3:7e:02:b5:97:9a:f2:8f:22:93:f6:62:
a5:4c:f8:91:0e:8d:9f:3e:bf:e3:53:78:4e:64:90:77:e6:ce:
b5:be:ca:2b:51:80:d0:8c:4a:06:45:9e:7c:9f:cb:c4:07:09:
d5:64:b4:e4:0d:e8:3b:28:89:32:04:68:6d:bb:3c:0b:c3:0d:
23:03:f4:21:74:9c:2a:3e:78:e7:ed:03:06:20:17:8d:84:30:
0a:50:01:ff:33:90:b4:11:fa:37:7a:d5:35:b3:10:2f:55:09:
79:4f:28:90:54:95:f3:53:7a:2a:cc:e7:f3:6b:d2:7d:9b:c4:
25:e7:67:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:22:29 2024 by rpki-client on console-ams.rpki-client.org