Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/KoW9YRneAGDvw6gSqqA8-u2Uz7c.roa
File: KoW9YRneAGDvw6gSqqA8-u2Uz7c.roa (raw, json)
Hash identifier: Cg/FTGgvCtgwr8O6+8shaYQTNZpoNZmCh1AK1G5RjXQ=
Subject key identifier: 2A:85:BD:61:19:DE:00:60:EF:C3:A8:12:AA:A0:3C:FA:ED:94:CF:B7
Certificate issuer: /CN=ceb86983547113359bade1f3f38104091e3a6439
Certificate serial: 01926C66D7198106781E7107BC951374EAB1
Authority key identifier: CE:B8:69:83:54:71:13:35:9B:AD:E1:F3:F3:81:04:09:1E:3A:64:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zrhpg1RxEzWbreHz84EECR46ZDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/KoW9YRneAGDvw6gSqqA8-u2Uz7c.roa
Signing time: Tue 08 Oct 2024 13:52:11 +0000
ROA not before: Tue 08 Oct 2024 13:52:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3269
IP address blocks: 94.199.8.0/21 maxlen: 24
193.207.192.0/20 maxlen: 20
193.207.208.0/20 maxlen: 20
193.207.224.0/21 maxlen: 21
193.207.232.0/21 maxlen: 21
193.207.240.0/22 maxlen: 22
193.207.244.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/zrhpg1RxEzWbreHz84EECR46ZDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/zrhpg1RxEzWbreHz84EECR46ZDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/zrhpg1RxEzWbreHz84EECR46ZDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:6c:66:d7:19:81:06:78:1e:71:07:bc:95:13:74:ea:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ceb86983547113359bade1f3f38104091e3a6439
Validity
Not Before: Oct 8 13:52:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2a85bd6119de0060efc3a812aaa03cfaed94cfb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:88:54:1b:69:8d:57:d8:65:8d:b2:94:52:74:
62:33:f0:ae:a5:72:c5:8e:95:ca:08:96:0d:ae:ba:
e6:97:ac:36:4e:08:c3:7d:df:83:2f:80:f8:39:02:
71:80:6d:ea:98:84:f5:02:4a:f3:87:05:fe:2a:da:
f7:e7:5e:b8:e5:4b:a7:a1:9e:20:ca:0e:2d:c6:4e:
29:d8:9a:e3:11:eb:10:c1:55:67:f9:59:23:4b:0e:
05:7b:29:f4:b0:6b:f9:c7:89:71:94:d6:16:a3:94:
c8:28:44:d7:db:45:29:18:b2:a9:fa:a2:dc:61:05:
30:be:a5:10:6a:6b:b1:a4:98:b3:e6:54:d9:bd:e5:
cc:be:13:85:a9:30:79:a3:ba:a2:35:e9:43:f8:f6:
b8:90:d1:91:8f:1e:2c:d4:fc:8b:16:e6:43:44:b6:
57:de:bb:58:04:e3:c8:9d:b8:a9:c5:27:4d:72:32:
e6:54:72:05:d4:b4:55:6e:33:3f:27:ca:a1:38:56:
cb:f8:15:f0:8f:fd:40:24:15:61:0e:56:7f:77:1d:
19:39:11:0e:a2:ab:7b:0c:2e:ee:15:41:96:09:61:
90:1b:5f:a5:bd:f8:46:1e:52:50:cc:eb:63:e4:4f:
58:65:7b:74:ca:9c:b2:64:17:fc:37:96:e7:12:f1:
a2:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:85:BD:61:19:DE:00:60:EF:C3:A8:12:AA:A0:3C:FA:ED:94:CF:B7
X509v3 Authority Key Identifier:
keyid:CE:B8:69:83:54:71:13:35:9B:AD:E1:F3:F3:81:04:09:1E:3A:64:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zrhpg1RxEzWbreHz84EECR46ZDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/KoW9YRneAGDvw6gSqqA8-u2Uz7c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/zrhpg1RxEzWbreHz84EECR46ZDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.199.8.0/21
193.207.192.0-193.207.247.255
Signature Algorithm: sha256WithRSAEncryption
2e:8a:0b:1f:2d:58:49:b5:55:1b:af:f1:ca:72:a1:53:29:bd:
bd:e0:bf:90:8d:a3:2c:26:aa:52:5f:6e:ff:2c:30:9b:0c:d7:
58:90:78:d6:0f:5d:0f:92:2f:9b:78:5a:3b:9e:d1:b9:fa:e3:
ee:68:a4:d6:d9:a7:8d:32:6c:ad:03:5b:95:c2:6c:e8:a3:10:
8a:f3:25:80:5f:96:a5:ed:c2:81:f9:5a:7d:66:81:0a:a9:dd:
03:3a:8d:af:12:22:b6:24:b4:8f:af:37:8e:ac:b5:01:5a:fa:
ca:73:f1:51:13:f2:0e:1f:48:95:06:11:bb:14:19:c0:22:30:
ae:9f:6d:89:fa:83:6c:09:24:d2:fc:9f:87:86:ea:78:d5:28:
ea:e3:e8:e6:14:3a:c9:5c:1f:cf:96:1d:94:82:29:2c:04:c3:
13:10:88:d0:4f:2b:57:71:ef:4b:4d:f9:52:80:23:08:e1:1d:
6e:6b:d5:c5:95:5f:62:ae:05:8e:37:52:7a:d1:c9:64:91:e6:
ba:5a:00:26:8a:d8:53:bb:fb:47:64:db:a0:8d:a6:c0:a5:7e:
04:05:d4:bb:c2:fb:03:93:1a:53:ee:f4:c4:e5:c1:e8:9b:96:
6e:23:de:75:c1:d2:66:3f:f5:5d:11:be:ca:31:e8:a7:ca:82:
b3:cc:52:5e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Nov 23 05:11:42 2024 by rpki-client on console-fra.rpki-client.org