Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/ddbbab-5edc-4a14-b0e7-eb80221e538d/1/0Pe35IPu0g7sXCJZwLBLy1tHo-s.roa
File: 0Pe35IPu0g7sXCJZwLBLy1tHo-s.roa (raw, json)
Hash identifier: g+oFRbxupl8j/qAfRa9GiWRsj5x3EmayfKtS8X0miwQ=
Subject key identifier: D0:F7:B7:E4:83:EE:D2:0E:EC:5C:22:59:C0:B0:4B:CB:5B:47:A3:EB
Certificate issuer: /CN=8f137200c9ea1560a3f42fd7e100ed28411416bc
Certificate serial: 018CC86EEE2D7F2957C9B79E546ED4EB772B
Authority key identifier: 8F:13:72:00:C9:EA:15:60:A3:F4:2F:D7:E1:00:ED:28:41:14:16:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jxNyAMnqFWCj9C_X4QDtKEEUFrw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/ddbbab-5edc-4a14-b0e7-eb80221e538d/1/0Pe35IPu0g7sXCJZwLBLy1tHo-s.roa
Signing time: Tue 02 Jan 2024 04:29:22 +0000
ROA not before: Tue 02 Jan 2024 04:29:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199114
IP address blocks: 194.37.84.0/24 maxlen: 24
194.37.86.0/24 maxlen: 24
91.198.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/ddbbab-5edc-4a14-b0e7-eb80221e538d/1/jxNyAMnqFWCj9C_X4QDtKEEUFrw.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/ddbbab-5edc-4a14-b0e7-eb80221e538d/1/jxNyAMnqFWCj9C_X4QDtKEEUFrw.mft
rsync://rpki.ripe.net/repository/DEFAULT/jxNyAMnqFWCj9C_X4QDtKEEUFrw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6e:ee:2d:7f:29:57:c9:b7:9e:54:6e:d4:eb:77:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f137200c9ea1560a3f42fd7e100ed28411416bc
Validity
Not Before: Jan 2 04:29:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d0f7b7e483eed20eec5c2259c0b04bcb5b47a3eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:68:92:5a:76:50:2b:8e:af:54:d0:bf:a4:68:
1e:fc:16:71:49:66:4b:40:54:38:44:78:24:a7:aa:
5a:c9:48:2c:fe:b1:e2:5c:84:d3:98:65:4a:fa:50:
25:80:69:69:33:1f:af:62:1c:9f:40:87:51:ec:d9:
9b:22:46:28:67:dc:95:65:ee:6f:11:96:0e:b2:2a:
7b:c5:5f:57:26:32:c6:f8:d8:d7:26:72:bc:ab:27:
df:cf:73:79:20:74:ca:25:a1:54:82:47:ba:2e:6c:
ca:5f:de:71:6c:ef:d0:ea:00:ad:15:4e:ec:46:39:
0e:51:d9:9b:0e:03:42:66:14:f7:be:f3:63:75:42:
4d:45:76:8f:47:8f:5e:ca:56:01:e1:7f:05:49:4e:
9e:c7:71:c9:26:c2:47:20:db:9c:c2:7c:17:6a:03:
8a:c9:61:65:11:d7:45:35:cf:6d:88:7e:d8:45:00:
0f:e8:b8:3f:4b:92:9a:18:a1:ca:3b:9c:23:82:9c:
c9:6c:a1:6a:21:c6:3f:70:7c:01:7b:f5:dc:d2:07:
66:dc:95:40:77:a4:d2:cc:df:87:8b:f7:35:1d:a3:
33:04:62:47:04:73:72:eb:15:50:7a:8f:6c:d8:b2:
0e:55:3b:f6:8a:a4:50:4b:d9:5f:34:fd:5b:0c:24:
a3:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:F7:B7:E4:83:EE:D2:0E:EC:5C:22:59:C0:B0:4B:CB:5B:47:A3:EB
X509v3 Authority Key Identifier:
keyid:8F:13:72:00:C9:EA:15:60:A3:F4:2F:D7:E1:00:ED:28:41:14:16:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jxNyAMnqFWCj9C_X4QDtKEEUFrw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ddbbab-5edc-4a14-b0e7-eb80221e538d/1/0Pe35IPu0g7sXCJZwLBLy1tHo-s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ddbbab-5edc-4a14-b0e7-eb80221e538d/1/jxNyAMnqFWCj9C_X4QDtKEEUFrw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.18.0/24
194.37.84.0/24
194.37.86.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:bf:c4:27:49:97:9f:f0:ab:7e:20:72:b6:1e:56:b1:1a:8f:
73:74:4d:0b:b5:fc:5a:6f:26:66:c7:05:f7:14:21:8c:be:db:
18:bf:5c:57:6d:1d:b8:36:0f:68:13:3e:61:ee:5e:37:7a:6a:
86:70:59:30:b8:23:79:a0:04:70:33:9c:b1:23:55:a3:d6:27:
86:2f:ab:41:aa:9a:90:6f:0d:99:ae:08:64:5c:98:f9:d8:0d:
4d:46:75:40:9e:ca:72:fa:fe:7b:88:4b:10:9f:a8:ef:2b:4c:
f6:55:44:b2:35:7b:d2:dd:08:b3:73:2e:0a:a4:eb:e4:7e:de:
2f:55:19:b5:f0:d3:5e:42:f1:fe:ea:c6:ab:d2:4d:60:ce:d9:
b4:06:db:11:e9:65:5b:9b:3a:0f:06:6e:16:80:78:8f:d0:ca:
6c:84:51:77:66:ba:9c:60:14:c9:d3:34:7c:fa:a0:59:8c:f5:
74:5a:3d:4b:3a:7d:ca:72:cd:9b:9b:42:1b:1b:62:9a:9b:81:
b4:52:a9:3f:1c:13:74:81:4c:41:e7:92:56:ec:f2:aa:fa:7b:
d5:7d:bd:e6:b4:66:72:27:76:31:93:d7:fb:33:45:05:73:ca:
3b:33:ce:ed:0d:83:5f:26:b0:e7:ec:d2:18:62:24:4c:95:14:
79:51:66:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:09:17 2024 by rpki-client on console-fra.rpki-client.org