Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/s04Tg-iXQC2FsP7R_dK8kDf-8S8.roa
File: s04Tg-iXQC2FsP7R_dK8kDf-8S8.roa (raw, json)
Hash identifier: PJ38HCbIRrvHjgNq/UkALh9qPTZR+BynmmhZZ51EmVQ=
Subject key identifier: B3:4E:13:83:E8:97:40:2D:85:B0:FE:D1:FD:D2:BC:90:37:FE:F1:2F
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 018CE9CB42207E34F6E5014CA1622A399E2F
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/s04Tg-iXQC2FsP7R_dK8kDf-8S8.roa
Signing time: Mon 08 Jan 2024 15:57:41 +0000
ROA not before: Mon 08 Jan 2024 15:57:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201237
IP address blocks: 87.229.67.0/24 maxlen: 24
79.172.227.0/24 maxlen: 24
178.238.215.0/24 maxlen: 24
178.238.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Jun 2024 13:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:e9:cb:42:20:7e:34:f6:e5:01:4c:a1:62:2a:39:9e:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Jan 8 15:57:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b34e1383e897402d85b0fed1fdd2bc9037fef12f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:50:d9:b9:69:93:8b:1b:89:15:3b:52:28:e0:
d0:0c:ae:8b:95:c9:3e:2a:eb:fd:5d:50:51:f3:4b:
33:b0:16:1b:9e:70:51:c8:7b:cd:31:df:a1:2f:12:
18:8d:1c:59:e3:60:02:a6:ab:65:cc:25:9f:e6:37:
f7:03:70:e3:1e:2e:a0:4c:f3:f3:d9:ee:88:aa:a2:
5b:54:b4:1c:f2:14:d9:26:98:70:eb:ab:66:c3:34:
71:50:e1:d7:31:76:d2:84:48:9a:e9:56:35:c9:b0:
ce:01:3a:41:79:e9:a3:cb:28:1b:aa:a2:fc:e2:88:
0d:58:dc:62:f9:c4:f6:30:11:df:e5:8f:17:a8:42:
be:bc:80:41:47:a8:ed:f7:4a:e0:d2:e9:59:15:28:
85:1a:c5:57:39:f5:c7:b3:76:3c:a0:94:95:9b:b8:
da:6f:c0:bf:04:85:a7:44:a2:31:d0:73:6a:e6:a9:
96:e0:bd:12:72:17:6c:90:9f:02:2f:5c:b1:2d:27:
6a:dc:c1:25:0e:ef:75:4b:66:68:63:f9:7e:30:f3:
04:f3:46:fb:73:09:62:5a:92:a5:06:4d:93:09:7b:
35:fc:6d:7a:e9:f8:e0:81:19:9b:19:8b:bc:d4:3c:
b1:76:18:e0:af:2e:20:ca:81:fe:15:0d:2f:56:80:
2e:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:4E:13:83:E8:97:40:2D:85:B0:FE:D1:FD:D2:BC:90:37:FE:F1:2F
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/s04Tg-iXQC2FsP7R_dK8kDf-8S8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.172.227.0/24
87.229.67.0/24
178.238.215.0/24
178.238.220.0/24
Signature Algorithm: sha256WithRSAEncryption
16:f5:66:cc:31:0b:b4:23:34:4c:4d:17:27:90:f8:16:f6:52:
58:bf:2c:0e:6d:e1:2d:45:93:e6:80:75:04:40:c3:13:91:6f:
21:31:e7:81:06:ca:ae:56:cc:ca:6a:aa:15:f5:86:de:c0:6d:
f6:6a:19:bd:ee:b4:54:60:15:17:03:b6:0e:ce:92:21:ab:35:
94:d3:1c:83:50:f7:30:c5:c5:ef:be:61:90:06:96:ba:f8:be:
a8:dc:a5:c2:c5:af:0c:16:72:9a:e7:d0:af:fa:19:9e:62:77:
48:80:c4:06:65:2d:8b:68:da:c0:f6:57:53:ea:38:e0:02:3a:
05:f6:0a:29:4c:94:4d:22:e7:09:d3:ec:ca:ab:69:93:b3:0c:
21:7a:af:f3:5c:62:8e:ff:e3:22:a4:06:90:4c:96:de:29:99:
34:f4:af:3c:e0:5b:11:d3:6b:32:6a:00:3f:7f:a1:c0:9f:19:
9d:78:0b:2e:f5:5a:d1:d5:c1:0e:78:ec:72:8d:ec:ab:cf:ec:
4f:c0:2d:d5:52:e8:33:10:f9:e2:8a:ff:a1:38:0f:bd:df:45:
22:a6:44:bb:1b:66:3f:20:53:cc:87:42:3e:32:bb:c0:e1:96:
3a:61:7c:7e:cc:fd:7d:2f:cb:93:1a:e6:40:d8:fe:e9:a8:43:
74:13:4a:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 17:12:36 2024 by rpki-client on console-fra.rpki-client.org