Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/92332f-03e0-4116-b6f3-c82f424b6d0d/1/O6rvy8BsJpFvXEGgJRNzU7Uxqp8.roa
File: O6rvy8BsJpFvXEGgJRNzU7Uxqp8.roa (raw, json)
Hash identifier: OuWsbraG2Gy+++25gzWMcaNTRLKJYuqyTWW1Li1wcJw=
Subject key identifier: 3B:AA:EF:CB:C0:6C:26:91:6F:5C:41:A0:25:13:73:53:B5:31:AA:9F
Certificate issuer: /CN=0cda5c874354d83826e43c2535b76e20d5b61b05
Certificate serial: 019102932A16ED14AD6EAD0B9E569945925A
Authority key identifier: 0C:DA:5C:87:43:54:D8:38:26:E4:3C:25:35:B7:6E:20:D5:B6:1B:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DNpch0NU2Dgm5DwlNbduINW2GwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/92332f-03e0-4116-b6f3-c82f424b6d0d/1/O6rvy8BsJpFvXEGgJRNzU7Uxqp8.roa
Signing time: Tue 30 Jul 2024 07:38:04 +0000
ROA not before: Tue 30 Jul 2024 07:38:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48434
IP address blocks: 94.232.168.0/21 maxlen: 27
185.37.52.0/22 maxlen: 27
185.78.20.0/22 maxlen: 27
185.232.152.0/22 maxlen: 27
185.232.153.0/24 maxlen: 27
185.232.154.0/23 maxlen: 27
185.232.154.0/24 maxlen: 27
185.232.155.0/24 maxlen: 27
2a04:6e00::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/92332f-03e0-4116-b6f3-c82f424b6d0d/1/DNpch0NU2Dgm5DwlNbduINW2GwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/92332f-03e0-4116-b6f3-c82f424b6d0d/1/DNpch0NU2Dgm5DwlNbduINW2GwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DNpch0NU2Dgm5DwlNbduINW2GwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 19:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:02:93:2a:16:ed:14:ad:6e:ad:0b:9e:56:99:45:92:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cda5c874354d83826e43c2535b76e20d5b61b05
Validity
Not Before: Jul 30 07:38:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3baaefcbc06c26916f5c41a025137353b531aa9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:55:14:a3:cf:df:ad:85:88:fc:d2:a2:a7:cb:
d1:dd:c7:f3:fb:65:42:20:07:c2:c7:fd:ed:bd:99:
64:61:7d:14:46:11:e0:97:80:d6:76:2b:26:88:de:
97:29:9e:fc:b7:8b:23:ed:14:e5:e2:cf:9c:ef:8b:
a5:c3:9d:2e:78:40:61:6d:82:47:2f:aa:ed:d1:b2:
ad:63:c9:68:15:d8:5b:56:09:27:71:d2:a0:0b:40:
94:68:43:d8:e9:1b:e4:c8:31:89:44:75:72:1b:19:
72:93:65:95:46:ee:98:4b:20:23:c3:b2:e9:dc:b6:
4c:cc:ec:ad:e0:23:26:b0:5a:5d:ae:1e:eb:34:69:
f5:6c:0d:0c:5b:7a:ba:45:be:47:64:37:ff:d4:09:
cd:86:b1:25:18:f5:2f:dc:87:d2:f6:34:c7:fc:43:
fc:ea:a5:9c:a6:24:55:a4:30:70:12:c5:72:22:94:
99:10:c9:92:24:6a:00:35:dd:69:31:99:3b:3e:e3:
a1:3e:21:a9:4b:ad:c4:9e:d9:2b:a0:44:db:d8:d8:
0d:82:44:74:bd:06:75:2b:da:b6:1a:95:3a:04:3b:
24:a6:b3:83:f3:db:bf:9e:4b:1b:62:f8:a6:69:78:
09:2b:09:dc:1c:5a:62:6b:15:f1:25:8d:5c:6d:96:
1c:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:AA:EF:CB:C0:6C:26:91:6F:5C:41:A0:25:13:73:53:B5:31:AA:9F
X509v3 Authority Key Identifier:
keyid:0C:DA:5C:87:43:54:D8:38:26:E4:3C:25:35:B7:6E:20:D5:B6:1B:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DNpch0NU2Dgm5DwlNbduINW2GwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/92332f-03e0-4116-b6f3-c82f424b6d0d/1/O6rvy8BsJpFvXEGgJRNzU7Uxqp8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/92332f-03e0-4116-b6f3-c82f424b6d0d/1/DNpch0NU2Dgm5DwlNbduINW2GwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.232.168.0/21
185.37.52.0/22
185.78.20.0/22
185.232.152.0/22
IPv6:
2a04:6e00::/29
Signature Algorithm: sha256WithRSAEncryption
0b:70:01:d4:ac:32:36:ab:58:df:00:63:f9:32:ea:b5:ac:ba:
b4:65:77:e1:fa:31:d7:f5:3c:8c:76:83:0c:0e:0c:12:ac:92:
f0:29:5c:d1:c6:78:cb:16:e2:73:b0:a0:78:5c:6b:1e:23:7d:
bd:f5:b1:b0:da:44:7b:92:29:be:db:72:ba:22:a1:19:47:3d:
4d:45:87:46:a7:a2:48:c8:06:ef:8a:71:a2:28:62:2d:9c:0c:
ba:9d:c0:03:d9:2f:63:a7:c1:f9:a9:97:e5:b6:28:9c:60:56:
21:b6:00:d1:92:87:b0:02:36:57:5f:ec:12:91:81:d0:50:2c:
d7:a7:e1:d3:aa:0b:97:e7:f9:2c:75:86:1b:92:30:9a:7e:ef:
c6:60:92:c6:d5:15:b3:84:5a:bd:a2:f8:8b:94:2d:e5:dc:21:
1f:37:78:2d:c3:97:ed:ab:7c:4f:9f:8c:50:82:fb:38:e0:19:
a0:bb:ec:ba:e2:e0:0c:cb:0f:09:88:dd:18:6b:db:12:de:e0:
15:fc:c2:f2:38:5c:c8:84:74:61:1e:ce:fc:71:06:c4:38:13:
db:c8:49:2e:f2:be:e7:dc:26:8d:6b:4d:5e:d0:4d:c0:63:7f:
4c:5f:fe:a8:72:a4:14:84:8f:ca:bf:ef:1a:bc:5d:11:db:b7:
0b:c7:36:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:06:06 2024 by rpki-client on console-ams.rpki-client.org