Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/xKAkct9wqtHoiSv2HENDoJw-IHM.roa
File: xKAkct9wqtHoiSv2HENDoJw-IHM.roa (raw, json)
Hash identifier: dpX58auaXU2BWZv0BYeJOPZHqPpNiot/uX0WQyTEoIU=
Subject key identifier: C4:A0:24:72:DF:70:AA:D1:E8:89:2B:F6:1C:43:43:A0:9C:3E:20:73
Certificate issuer: /CN=02b610cd43bafced91480fabfdcaae82049fbf71
Certificate serial: 018CC86F07B313048CBB70590A895F0D8ED5
Authority key identifier: 02:B6:10:CD:43:BA:FC:ED:91:48:0F:AB:FD:CA:AE:82:04:9F:BF:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ArYQzUO6_O2RSA-r_cquggSfv3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/xKAkct9wqtHoiSv2HENDoJw-IHM.roa
Signing time: Tue 02 Jan 2024 04:29:28 +0000
ROA not before: Tue 02 Jan 2024 04:29:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51115
IP address blocks: 185.65.148.0/22 maxlen: 24
195.43.92.0/23 maxlen: 24
178.248.232.0/21 maxlen: 24
185.94.108.0/22 maxlen: 24
2a03:70c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/ArYQzUO6_O2RSA-r_cquggSfv3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/ArYQzUO6_O2RSA-r_cquggSfv3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/ArYQzUO6_O2RSA-r_cquggSfv3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 May 2024 19:23:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:07:b3:13:04:8c:bb:70:59:0a:89:5f:0d:8e:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02b610cd43bafced91480fabfdcaae82049fbf71
Validity
Not Before: Jan 2 04:29:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c4a02472df70aad1e8892bf61c4343a09c3e2073
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:3d:33:54:38:75:51:b2:c7:1e:59:a5:2e:93:
c6:33:8a:4b:54:6e:7d:ff:1e:3b:0b:49:21:02:b4:
a2:23:87:53:07:72:64:0a:dd:01:71:44:ef:c2:ab:
0d:a2:a1:bd:a4:0c:ec:47:c7:49:6a:4b:20:02:aa:
82:07:85:da:5b:dc:22:67:b3:cc:3c:e2:2f:52:45:
32:13:73:ce:4a:28:93:62:70:e0:c1:a6:36:47:45:
f2:80:3f:d5:6c:c8:a6:f9:f1:71:af:9a:d2:b8:26:
c3:dd:23:33:31:fa:a5:38:e8:a1:ec:84:b1:55:25:
83:80:7c:7d:e7:8f:c8:92:b3:6a:08:43:18:5d:4a:
57:a0:31:85:06:6f:a1:48:ca:df:a3:99:24:3b:03:
a9:5e:b9:64:a2:cd:53:f8:36:8f:4a:82:fb:19:70:
25:1b:88:1c:98:b9:87:83:94:27:79:ff:36:57:7a:
04:04:bc:d6:5a:66:73:9f:9b:0c:47:6a:fa:4a:dc:
40:e1:de:6b:a6:ec:54:02:2d:90:03:f1:e9:76:7c:
13:2f:f6:5d:69:c1:95:1c:5c:b4:37:0f:1a:4b:df:
0a:40:9b:da:87:9d:66:07:f3:f8:f0:98:05:ed:59:
3d:c6:fd:aa:13:ff:ef:81:c4:73:3c:d8:72:c7:81:
26:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:A0:24:72:DF:70:AA:D1:E8:89:2B:F6:1C:43:43:A0:9C:3E:20:73
X509v3 Authority Key Identifier:
keyid:02:B6:10:CD:43:BA:FC:ED:91:48:0F:AB:FD:CA:AE:82:04:9F:BF:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ArYQzUO6_O2RSA-r_cquggSfv3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/xKAkct9wqtHoiSv2HENDoJw-IHM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/ArYQzUO6_O2RSA-r_cquggSfv3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.248.232.0/21
185.65.148.0/22
185.94.108.0/22
195.43.92.0/23
IPv6:
2a03:70c0::/32
Signature Algorithm: sha256WithRSAEncryption
36:92:29:1c:1a:8d:8e:7e:6e:55:96:6b:f6:69:39:59:9f:66:
ea:7c:62:d4:bf:96:23:77:6d:c2:97:28:42:69:14:59:cc:23:
a8:96:b5:d9:a7:16:07:d8:1e:7f:b3:f8:c7:bf:77:41:72:eb:
77:5d:35:f6:bc:57:51:b5:ad:81:f8:7c:9f:38:b5:32:78:e8:
8e:ad:49:aa:37:73:cd:ec:8c:c4:2a:2d:24:75:b0:b2:3f:00:
18:37:a4:e6:06:a2:62:59:03:e6:9f:97:39:e3:d7:11:60:0a:
28:17:56:35:88:60:f6:d2:3b:2a:c3:dd:f4:fb:e9:fa:82:3c:
93:18:85:eb:37:d7:31:01:bd:81:99:c8:b3:1d:82:ac:9d:15:
b3:e4:00:4b:0a:9b:fa:8e:43:dd:52:65:99:f6:7d:1a:a2:ec:
e5:61:35:1d:f0:3e:d2:93:ea:ae:56:b5:da:a2:9c:a5:08:4d:
c4:da:5e:ac:ac:48:b5:51:14:de:6a:ec:d6:3e:b9:4e:ba:6a:
32:0c:d8:a9:fb:a9:45:9b:5a:ba:7b:4b:16:6a:8f:19:f9:c0:
5d:01:d5:e7:a4:12:84:1e:d0:43:cb:0f:ae:3f:47:8c:6a:7d:
e2:9c:f4:fb:62:3c:cb:19:1c:de:ff:21:35:07:4c:4c:72:43:
13:56:16:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 02:41:00 2024 by rpki-client on console-fra.rpki-client.org