Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/CBeTSzD-ZGKawQFk_aQ2xOm9v8A.roa
File: CBeTSzD-ZGKawQFk_aQ2xOm9v8A.roa (raw, json)
Hash identifier: a6xiF6y37M2vqFhADADxBhQckdQWcdyChJa9tAu80w0=
Subject key identifier: 08:17:93:4B:30:FE:64:62:9A:C1:01:64:FD:A4:36:C4:E9:BD:BF:C0
Certificate issuer: /CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Certificate serial: 018CC794E8BED11AF38F7C0ED75473CD44DA
Authority key identifier: E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/CBeTSzD-ZGKawQFk_aQ2xOm9v8A.roa
Signing time: Tue 02 Jan 2024 00:31:14 +0000
ROA not before: Tue 02 Jan 2024 00:31:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3356
IP address blocks: 193.142.36.0/22 maxlen: 24
194.180.232.0/23 maxlen: 24
212.87.218.0/23 maxlen: 24
91.132.124.0/23 maxlen: 24
212.87.216.0/24 maxlen: 24
194.180.236.0/23 maxlen: 24
93.177.94.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 16:59:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:e8:be:d1:1a:f3:8f:7c:0e:d7:54:73:cd:44:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Validity
Not Before: Jan 2 00:31:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0817934b30fe64629ac10164fda436c4e9bdbfc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:ff:e4:28:a5:5e:12:37:19:6c:e3:0e:57:66:
47:34:d2:95:52:7f:8c:be:2f:f2:22:4e:bb:ea:a1:
07:1c:06:f8:cc:ca:8a:14:e5:d6:70:29:d1:07:df:
24:0e:5d:7c:45:09:7f:c1:4d:6b:88:2b:e5:43:e4:
9e:8e:92:13:84:af:86:6a:40:c5:26:c3:a1:64:ad:
d9:61:b0:3e:7d:b7:a0:68:12:64:44:f6:c3:51:d9:
71:45:f6:3e:84:73:77:d6:2f:92:1a:a3:a8:e4:ea:
bb:70:bb:c4:fa:7e:99:82:cc:da:5f:a7:ac:63:9f:
bb:cd:72:4c:3e:d6:e7:9f:ab:23:4a:3d:a6:4a:ca:
2f:7f:b9:81:47:9b:55:43:fa:80:7e:f4:07:61:c4:
c7:2c:ec:7d:e2:48:98:f3:59:24:2c:08:ee:93:11:
b0:98:be:ea:6a:41:42:cd:d2:3b:72:3e:22:af:c2:
c4:5d:68:e3:52:23:bd:5c:95:64:92:ac:06:25:b0:
72:9e:cc:e8:19:94:55:d7:fc:bb:e6:db:97:2e:89:
91:5b:a5:19:5d:b8:09:42:65:c7:45:2d:d1:7b:7d:
92:1c:01:87:a6:45:27:74:2c:e8:00:34:71:0b:70:
ea:08:d2:fa:46:1e:d0:b0:1e:f0:aa:82:99:4a:0f:
ff:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:17:93:4B:30:FE:64:62:9A:C1:01:64:FD:A4:36:C4:E9:BD:BF:C0
X509v3 Authority Key Identifier:
keyid:E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/CBeTSzD-ZGKawQFk_aQ2xOm9v8A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.132.124.0/23
93.177.94.0/23
193.142.36.0/22
194.180.232.0/23
194.180.236.0/23
212.87.216.0/24
212.87.218.0/23
Signature Algorithm: sha256WithRSAEncryption
11:ff:6e:02:dc:79:0a:d1:bb:0a:07:99:2c:f6:39:65:55:92:
7d:fa:a7:3f:b1:91:57:95:a2:e8:23:cd:c7:20:85:54:06:60:
08:59:93:27:42:53:23:47:5b:11:75:ae:96:b4:56:af:58:63:
b5:1c:79:f9:78:c1:b8:82:53:7c:bf:27:fd:c0:92:55:9e:cc:
42:78:b4:cc:91:47:fe:1f:42:e8:08:2b:70:2a:77:f2:7b:b5:
db:f9:97:71:b3:01:e4:63:24:06:88:37:1a:97:44:f2:a4:33:
df:1e:de:95:63:66:57:70:99:a0:75:a8:a7:eb:ea:4d:4a:62:
b2:6d:80:b9:76:39:f6:1d:81:d9:5f:68:0c:f6:c6:d1:41:53:
ce:8d:04:cc:ad:92:93:0e:47:c1:f2:99:1c:8a:a6:35:84:a6:
9d:09:1a:93:9a:a5:37:57:5a:e0:18:55:44:a1:27:24:c1:5d:
77:31:2c:c6:9c:f3:c5:62:de:37:01:3a:fc:b8:b0:05:19:07:
3c:0f:04:68:fd:95:2f:98:95:b4:43:b5:63:e3:95:d7:db:da:
24:48:c0:96:da:3a:7a:92:0e:65:04:34:1a:8b:74:30:b2:d3:
98:fd:00:a5:c7:75:c0:79:4a:a0:11:dc:af:a1:75:0a:41:9a:
bd:84:d5:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 21:16:18 2024 by rpki-client on console-fra.rpki-client.org