Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/348789-3208-4847-9c3f-982d1f21a32b/1/aJ2Lrgsn3p-HU283muV-Ac3bqp8.roa
File: aJ2Lrgsn3p-HU283muV-Ac3bqp8.roa (raw, json)
Hash identifier: UeuY6pfVeGWTHY5Tbgc/vcRYy6YyQ9eWUNROjGHOwbE=
Subject key identifier: 68:9D:8B:AE:0B:27:DE:9F:87:53:6F:37:9A:E5:7E:01:CD:DB:AA:9F
Certificate issuer: /CN=cbf74cd846493138f522c57c0065b5c60512dd09
Certificate serial: 01930718BAD100DE1875A8FFC593861F3D27
Authority key identifier: CB:F7:4C:D8:46:49:31:38:F5:22:C5:7C:00:65:B5:C6:05:12:DD:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y_dM2EZJMTj1IsV8AGW1xgUS3Qk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/348789-3208-4847-9c3f-982d1f21a32b/1/aJ2Lrgsn3p-HU283muV-Ac3bqp8.roa
Signing time: Thu 07 Nov 2024 14:48:01 +0000
ROA not before: Thu 07 Nov 2024 14:48:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200478
IP address blocks: 93.114.168.0/24 maxlen: 24
141.226.124.0/24 maxlen: 24
141.226.127.0/24 maxlen: 24
141.226.224.0/23 maxlen: 24
141.226.224.0/24 maxlen: 24
141.226.225.0/24 maxlen: 24
141.226.226.0/24 maxlen: 24
141.226.227.0/24 maxlen: 24
141.226.228.0/24 maxlen: 24
141.226.229.0/24 maxlen: 24
141.226.230.0/24 maxlen: 24
141.226.231.0/24 maxlen: 24
185.106.32.0/22 maxlen: 24
185.106.32.0/24 maxlen: 24
185.106.33.0/24 maxlen: 24
185.106.34.0/24 maxlen: 24
185.106.35.0/24 maxlen: 24
2a06:3b80:30::/48 maxlen: 48
2a06:3b80:110::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/348789-3208-4847-9c3f-982d1f21a32b/1/y_dM2EZJMTj1IsV8AGW1xgUS3Qk.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/348789-3208-4847-9c3f-982d1f21a32b/1/y_dM2EZJMTj1IsV8AGW1xgUS3Qk.mft
rsync://rpki.ripe.net/repository/DEFAULT/y_dM2EZJMTj1IsV8AGW1xgUS3Qk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 05:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:07:18:ba:d1:00:de:18:75:a8:ff:c5:93:86:1f:3d:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbf74cd846493138f522c57c0065b5c60512dd09
Validity
Not Before: Nov 7 14:48:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=689d8bae0b27de9f87536f379ae57e01cddbaa9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:89:bb:c6:7d:05:7c:f4:2d:0a:df:11:37:7e:
e7:e4:a9:9f:2b:bf:bd:50:0f:ac:9d:2f:bd:bd:cb:
ec:32:65:d4:df:c2:38:1e:7d:00:6f:41:c1:37:81:
c8:bd:59:87:c9:17:f8:82:d3:8b:93:5c:ed:e0:03:
da:7d:f3:0b:df:e6:0b:a6:48:f4:36:40:68:9e:44:
f8:11:2d:0e:9c:34:af:c3:ba:d0:bf:cb:ec:ff:af:
46:49:bf:9f:4f:23:0c:d3:d4:3a:7b:d0:89:78:6c:
08:68:ed:aa:e5:59:e5:36:da:79:fc:56:c2:5a:cc:
4e:2f:11:cf:fa:4d:13:53:79:97:32:c8:58:c0:fa:
74:f4:7f:93:c7:19:fe:46:16:71:30:cd:a3:ab:86:
1c:07:0a:85:16:6f:2f:15:01:a3:b9:8d:72:25:ab:
31:cc:12:4d:12:6d:b9:33:16:a6:e5:11:dc:19:dd:
c7:26:88:4b:75:f9:75:cd:70:3b:37:49:f5:d7:27:
d4:43:32:b9:af:a0:04:98:11:81:fe:39:e3:a1:dd:
1f:ea:87:92:50:7d:e4:f6:44:cf:1b:df:ef:81:bb:
15:7a:2a:3a:fb:e2:13:01:c7:39:94:a3:1d:94:b7:
5f:a3:bd:14:da:a2:e7:b0:36:dd:29:cb:91:e9:55:
00:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:9D:8B:AE:0B:27:DE:9F:87:53:6F:37:9A:E5:7E:01:CD:DB:AA:9F
X509v3 Authority Key Identifier:
keyid:CB:F7:4C:D8:46:49:31:38:F5:22:C5:7C:00:65:B5:C6:05:12:DD:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y_dM2EZJMTj1IsV8AGW1xgUS3Qk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/348789-3208-4847-9c3f-982d1f21a32b/1/aJ2Lrgsn3p-HU283muV-Ac3bqp8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/348789-3208-4847-9c3f-982d1f21a32b/1/y_dM2EZJMTj1IsV8AGW1xgUS3Qk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.114.168.0/24
141.226.124.0/24
141.226.127.0/24
141.226.224.0/21
185.106.32.0/22
IPv6:
2a06:3b80:30::/48
2a06:3b80:110::/48
Signature Algorithm: sha256WithRSAEncryption
28:d6:93:38:8b:5c:07:ca:e7:bc:c9:94:10:f2:2c:01:fd:8e:
a5:59:04:94:81:14:90:c3:35:ae:e2:9c:fd:24:97:12:86:18:
8d:cf:d3:f6:38:9c:c4:d2:75:f8:4d:7f:2a:fa:c4:7d:e3:6d:
51:c1:e1:c8:0f:9c:a7:78:7c:0c:d7:de:26:a7:2c:83:44:26:
24:70:98:a5:c4:28:29:bf:0d:ab:dd:b4:d2:87:6b:52:76:00:
b0:ec:ad:4d:fb:c5:7d:0c:e1:16:25:8c:2c:e0:f3:a5:be:05:
2a:c0:9d:63:97:01:eb:c0:78:ca:5e:8f:7d:34:7e:9f:c2:e7:
be:09:7d:63:17:3b:20:ca:c2:0d:6c:d5:14:af:b1:f2:49:43:
e1:7f:c4:01:38:59:8c:0a:2a:0a:cb:f1:7e:03:0c:74:06:91:
9a:5f:dc:bd:61:2a:13:0f:3b:56:99:c6:0f:c4:72:e6:4f:37:
75:5a:6b:c5:aa:d5:c7:de:49:e4:a1:9e:77:e3:df:03:c6:46:
21:ca:59:4e:f7:60:86:bb:fc:b1:18:6d:42:d1:45:fa:3c:f5:
53:52:c7:0a:db:a6:eb:1b:a2:ec:f5:c8:b9:94:b3:f3:ce:b5:
6b:64:55:f8:49:89:aa:8b:54:de:1e:b5:68:85:34:aa:24:9f:
6b:9b:ec:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:44:08 2024 by rpki-client on console-fra.rpki-client.org