Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/l6nJOz2FDz3Q8iXNb0uIuw46BE4.roa
File: l6nJOz2FDz3Q8iXNb0uIuw46BE4.roa (raw, json)
Hash identifier: VtZMi2Fyjk4256Wb9VPVs41+kIVjuqs92YkEWuRUvkM=
Subject key identifier: 97:A9:C9:3B:3D:85:0F:3D:D0:F2:25:CD:6F:4B:88:BB:0E:3A:04:4E
Certificate issuer: /CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Certificate serial: 0192136C2B2E28C75A388D9D253A6EDD996B
Authority key identifier: E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/l6nJOz2FDz3Q8iXNb0uIuw46BE4.roa
Signing time: Sat 21 Sep 2024 07:11:48 +0000
ROA not before: Sat 21 Sep 2024 07:11:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 398779
IP address blocks: 31.40.193.0/24 maxlen: 24
45.141.13.0/24 maxlen: 24
83.136.48.0/24 maxlen: 24
93.177.111.0/24 maxlen: 24
185.240.86.0/24 maxlen: 24
194.62.164.0/24 maxlen: 24
194.62.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:13:6c:2b:2e:28:c7:5a:38:8d:9d:25:3a:6e:dd:99:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Validity
Not Before: Sep 21 07:11:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=97a9c93b3d850f3dd0f225cd6f4b88bb0e3a044e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:07:1e:c2:20:95:d5:48:c3:ff:17:65:a8:ae:
8c:0d:8c:4a:aa:93:bf:cd:50:df:8d:58:08:a8:2b:
8a:e5:15:75:08:b4:e7:83:02:b1:c9:97:7c:0e:29:
2c:17:d1:b4:e8:4b:04:e9:ca:19:63:af:cc:51:95:
4d:e7:42:5a:a8:69:97:eb:c0:ff:f7:c1:32:a9:b0:
60:a7:64:5a:30:25:13:99:cc:ee:05:d3:45:02:40:
55:34:de:6f:d3:ad:27:1a:c2:67:30:4b:02:5f:9f:
b1:1a:74:4a:48:87:38:f3:0e:00:7a:eb:08:55:7c:
10:b2:34:3d:c9:95:67:97:c9:eb:03:de:35:9d:c8:
d4:01:d5:f3:7b:8a:76:9d:e5:76:2b:e5:84:4b:80:
1f:f2:77:2f:91:51:ba:3c:6b:96:48:3b:13:ff:85:
a9:55:51:d3:3c:69:e9:37:88:81:ce:60:51:78:b7:
53:55:e2:4c:66:75:6e:bd:9e:49:73:b7:a7:65:db:
fc:4d:bc:77:9c:a9:ad:2f:bb:24:35:1e:9e:3f:aa:
bb:93:cf:dd:8a:38:83:d0:d9:95:fe:b9:fe:bc:8a:
3c:3f:5a:15:e7:e1:aa:b0:ef:fb:90:8b:fc:19:6d:
a2:6b:64:e0:18:db:d5:b9:bb:db:a5:62:09:27:51:
77:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:A9:C9:3B:3D:85:0F:3D:D0:F2:25:CD:6F:4B:88:BB:0E:3A:04:4E
X509v3 Authority Key Identifier:
keyid:E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/l6nJOz2FDz3Q8iXNb0uIuw46BE4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.40.193.0/24
45.141.13.0/24
83.136.48.0/24
93.177.111.0/24
185.240.86.0/24
194.62.164.0/24
194.62.167.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:ca:b1:6d:b5:d1:89:d4:8c:0a:e3:d0:db:7a:57:bf:7d:93:
97:17:a2:63:13:c9:e9:ee:24:63:ff:30:20:e3:9f:d3:d2:9e:
b7:8d:e8:31:26:e4:19:fa:ba:04:96:aa:7d:91:22:54:8e:00:
cf:a9:4e:67:91:e1:f6:64:3b:b3:bb:50:6f:58:d5:0f:c7:cd:
94:3a:e0:26:c5:8a:fb:fc:3b:3c:99:04:1b:6f:dc:f0:71:58:
42:ff:38:e6:96:3b:3c:54:63:35:fd:ba:28:e3:ae:61:06:fa:
20:37:ee:9c:c7:04:c0:4a:4f:7d:56:16:ee:29:0c:21:cb:3d:
e3:9a:d5:c1:46:c9:b2:47:5b:09:8c:59:6e:13:1b:2e:5b:e7:
a3:ad:f1:f8:6d:cf:73:f9:07:e6:79:63:aa:2f:d3:c4:fc:56:
d9:cf:14:d5:2e:8f:17:b0:91:df:8c:e9:a2:3b:82:96:74:16:
79:f8:f0:59:41:4f:a6:9b:26:f8:56:3c:4b:72:bb:ec:a4:3e:
ce:0c:d0:39:cb:1d:d5:cb:8f:b9:bf:70:44:ca:00:24:4b:1f:
34:e5:a9:df:21:9a:6b:5c:d8:cb:e1:92:ae:4e:71:cf:5a:38:
75:d6:ca:64:81:08:8e:67:f3:c7:f4:75:ac:8c:fe:d9:1e:d3:
bb:e0:e4:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:37:55 2024 by rpki-client on console-fra.rpki-client.org