Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/B0TC2iGMBRMDn1N2DIvQDOq0SoE.roa
File: B0TC2iGMBRMDn1N2DIvQDOq0SoE.roa (raw, json)
Hash identifier: uW6U50cDN6ctghDLiIEpTwqXkXRG3HEdRDgJur9Xhvo=
Subject key identifier: 07:44:C2:DA:21:8C:05:13:03:9F:53:76:0C:8B:D0:0C:EA:B4:4A:81
Certificate issuer: /CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96
Certificate serial: 0193297D7CBED8BD9639C6C2565CF29AF120
Authority key identifier: 08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/B0TC2iGMBRMDn1N2DIvQDOq0SoE.roa
Signing time: Thu 14 Nov 2024 07:05:10 +0000
ROA not before: Thu 14 Nov 2024 07:05:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21859
IP address blocks: 188.66.26.0/24 maxlen: 24
193.108.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 17:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:29:7d:7c:be:d8:bd:96:39:c6:c2:56:5c:f2:9a:f1:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96
Validity
Not Before: Nov 14 07:05:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0744c2da218c0513039f53760c8bd00ceab44a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:06:2d:55:4a:ed:fe:24:c1:8a:f1:60:e9:af:
f1:e4:2d:fa:60:48:f2:0f:f8:c3:e4:46:b0:78:20:
f6:49:65:a1:51:69:d3:6d:90:b2:f5:3d:fa:74:00:
de:f4:b9:22:2d:bd:be:68:93:7a:67:e5:4e:c9:63:
cb:37:4c:28:e1:1f:eb:32:a5:43:90:f0:e4:0c:c9:
d5:e7:ea:1b:e4:e7:03:dd:e7:a7:0c:99:11:d8:5b:
a9:d1:8f:4b:b1:11:1c:71:8d:e9:7d:5a:5d:b7:1e:
47:77:5e:a4:16:3b:db:44:00:53:bb:12:1f:94:f3:
1c:2b:d8:0d:7b:46:b0:5e:16:37:94:83:82:03:0b:
87:88:74:48:ec:f5:13:02:c7:42:07:1a:a3:65:d4:
3a:c4:1e:e5:06:95:56:29:2e:52:fd:73:a2:d7:f2:
64:d6:65:be:9a:10:91:9f:42:79:be:cb:1f:bb:c6:
b8:06:a8:0d:6e:4d:aa:3c:65:71:75:bc:1c:5e:08:
f0:d2:18:38:d4:06:76:27:47:36:43:dd:da:69:ec:
67:7f:3a:2e:3a:a1:42:b8:c9:8b:a8:22:e7:ea:a3:
1b:37:07:fc:bd:45:07:5f:f4:f8:04:fb:83:22:b4:
cc:af:e5:bf:65:42:5b:d6:aa:13:51:79:58:90:31:
96:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:44:C2:DA:21:8C:05:13:03:9F:53:76:0C:8B:D0:0C:EA:B4:4A:81
X509v3 Authority Key Identifier:
keyid:08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/B0TC2iGMBRMDn1N2DIvQDOq0SoE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.66.26.0/24
193.108.59.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:b2:59:ba:95:98:4e:5f:64:f3:64:06:a9:d2:71:d7:bf:2c:
d5:60:5a:ff:03:90:91:e1:a3:58:cc:69:0f:f5:01:28:77:4f:
4a:ce:dc:11:94:2b:0b:29:81:6e:9d:d3:9f:1e:0e:41:69:e2:
6d:52:9b:a0:bc:48:2b:a0:36:5c:64:f4:47:6d:f1:01:a4:f7:
54:12:a0:05:16:34:2f:11:6d:34:6d:55:17:8f:5d:31:50:8f:
3e:65:ad:b0:f4:af:00:39:2a:ee:3e:2e:de:a2:09:9f:ac:60:
ea:c3:17:3f:87:15:d1:6d:e2:93:5b:9b:49:c1:d6:aa:38:e9:
71:ea:39:e6:bd:44:d9:75:13:23:b9:36:36:7f:b8:92:cf:f6:
5c:05:64:9f:ee:6c:92:0b:78:b7:e4:29:a5:02:d9:64:4e:4c:
2c:f9:cc:db:00:59:4e:42:47:72:dc:93:26:fb:3b:17:8f:40:
69:1c:4f:af:d6:d0:71:fd:3e:fd:9f:b2:da:ab:ca:4e:c4:ec:
37:a0:68:94:9a:1d:42:ec:9a:19:4a:b1:d5:3a:1b:e5:78:05:
7f:3e:30:36:19:37:a1:6a:9e:af:11:5b:a4:b3:2d:2a:e3:4f:
dc:02:0e:3e:6b:82:26:d8:36:ae:c8:dd:b6:25:e3:e6:0e:c0:
7c:70:2d:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:30:58 2024 by rpki-client on console-fra.rpki-client.org