Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/4_tYXgfB40jhpmhgXjCDSMZ4Z00.roa
File: 4_tYXgfB40jhpmhgXjCDSMZ4Z00.roa (raw, json)
Hash identifier: DG1gFALWlfLnEZROMhahajmNwLIiYB01cSFiuMbizvg=
Subject key identifier: E3:FB:58:5E:07:C1:E3:48:E1:A6:68:60:5E:30:83:48:C6:78:67:4D
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 01935F9A54F9A90A9BB45B367637206467CC
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/4_tYXgfB40jhpmhgXjCDSMZ4Z00.roa
Signing time: Sun 24 Nov 2024 19:16:10 +0000
ROA not before: Sun 24 Nov 2024 19:16:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215073
IP address blocks: 185.254.29.0/24 maxlen: 24
185.254.239.0/24 maxlen: 24
193.35.152.0/24 maxlen: 24
193.160.143.0/24 maxlen: 24
194.62.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 22:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:5f:9a:54:f9:a9:0a:9b:b4:5b:36:76:37:20:64:67:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Nov 24 19:16:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e3fb585e07c1e348e1a668605e308348c678674d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:34:ae:cf:6f:1d:b2:25:fd:de:02:22:dd:47:
2b:7e:a3:03:3a:05:84:aa:a5:b5:d9:7d:f1:85:86:
9a:ea:b8:00:c5:41:f1:6f:63:d8:7e:a6:6e:87:c0:
59:ed:bd:e8:98:a4:ef:ef:4d:1d:21:37:63:2a:a2:
bc:c0:89:e2:a7:41:b6:cd:72:fd:e3:61:74:d7:c6:
3b:c7:05:bb:a9:81:0a:c5:dc:81:93:47:1d:a5:ec:
a6:d4:51:71:9e:68:4f:0a:da:69:1a:00:fd:6b:56:
b9:4e:62:90:b9:6b:1d:3f:ca:d2:58:54:5e:2e:2c:
aa:4e:6c:9b:cd:d4:ca:6e:fc:eb:7b:65:f1:b5:20:
5e:48:de:03:e3:3f:6f:c8:ca:cc:8b:63:a3:2c:e0:
af:f6:84:1c:3e:92:a4:9d:27:5a:ef:10:ba:09:40:
34:32:b9:77:56:01:d1:70:66:27:09:ac:7e:35:79:
e3:52:1e:2e:42:41:3f:3f:a2:ac:30:f2:0c:ca:e1:
0e:8f:31:12:2a:68:1e:08:f4:29:3c:c3:6d:fb:96:
98:5d:b3:8d:72:c4:b5:06:91:b3:b6:39:2b:ef:3a:
db:07:c6:7b:71:65:88:6d:4a:93:f9:7c:da:24:4a:
fa:c1:f0:8c:1d:e8:78:be:54:44:77:9e:9b:32:6f:
cf:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:FB:58:5E:07:C1:E3:48:E1:A6:68:60:5E:30:83:48:C6:78:67:4D
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/4_tYXgfB40jhpmhgXjCDSMZ4Z00.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.254.29.0/24
185.254.239.0/24
193.35.152.0/24
193.160.143.0/24
194.62.54.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:43:e9:3a:77:9f:fb:83:e0:6d:34:fc:8f:f9:18:3e:aa:e4:
38:82:c7:0e:66:c7:bb:8c:d8:78:91:c8:a3:41:32:9d:c0:c1:
b6:73:67:c7:b1:f9:62:d5:b4:5f:07:cc:10:d1:08:f3:21:2e:
62:7d:cb:cd:67:64:be:e2:91:6f:eb:e5:06:1b:6e:b6:fc:52:
a7:74:b5:22:5d:05:3a:13:e6:26:3f:69:7d:4f:ee:34:45:75:
39:a2:12:a9:b0:8c:19:c1:af:ff:f7:4e:12:03:8b:3b:67:a0:
b5:3f:cf:a7:1f:96:f4:15:86:28:32:ca:38:a5:96:7f:2b:96:
69:62:89:a8:c0:3b:59:a6:cb:b5:37:7f:e9:b4:12:fb:c4:c7:
3e:1f:9d:58:3b:81:31:cf:37:0e:6a:0b:fb:df:bb:60:0d:41:
95:02:2e:6d:68:da:5b:d7:c7:97:31:f6:9a:4c:e2:44:e8:00:
90:d3:3c:8a:3f:7d:8c:42:83:f5:dd:6d:41:47:31:17:cb:25:
fb:a6:e4:a4:ac:c4:83:f5:5f:29:90:78:ea:fc:84:47:57:b0:
c7:83:a3:8b:ec:ad:a3:14:b0:2c:4a:1d:47:93:8b:60:af:28:
a5:7e:ed:dc:f0:ce:e2:ce:bb:3b:4d:d7:3d:ad:0d:46:86:35:
8e:39:3c:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 03:09:41 2024 by rpki-client on console-ams.rpki-client.org