Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/929f1b-b047-48bf-a8f1-1bed2ee065f0/1/s-v7tYSHCekSl7eUZeKYe4iHd54.roa
File: s-v7tYSHCekSl7eUZeKYe4iHd54.roa (raw, json)
Hash identifier: dlCO9d232uKfLy5Pb76mmoWkS1Hep0ArJT+1zIKTQCY=
Subject key identifier: B3:EB:FB:B5:84:87:09:E9:12:97:B7:94:65:E2:98:7B:88:87:77:9E
Certificate issuer: /CN=057407d2e7b2ff4bcee6ea10d40852ecdcbc69b8
Certificate serial: 018CC94DA883E576090A1907A633EBCA8D79
Authority key identifier: 05:74:07:D2:E7:B2:FF:4B:CE:E6:EA:10:D4:08:52:EC:DC:BC:69:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BXQH0uey_0vO5uoQ1AhS7Ny8abg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/929f1b-b047-48bf-a8f1-1bed2ee065f0/1/s-v7tYSHCekSl7eUZeKYe4iHd54.roa
Signing time: Tue 02 Jan 2024 08:32:38 +0000
ROA not before: Tue 02 Jan 2024 08:32:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47866
IP address blocks: 93.158.36.0/23 maxlen: 23
93.158.32.0/19 maxlen: 19
93.158.32.0/21 maxlen: 21
185.28.28.0/22 maxlen: 22
93.158.0.0/18 maxlen: 18
93.158.16.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/929f1b-b047-48bf-a8f1-1bed2ee065f0/1/BXQH0uey_0vO5uoQ1AhS7Ny8abg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/929f1b-b047-48bf-a8f1-1bed2ee065f0/1/BXQH0uey_0vO5uoQ1AhS7Ny8abg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BXQH0uey_0vO5uoQ1AhS7Ny8abg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:a8:83:e5:76:09:0a:19:07:a6:33:eb:ca:8d:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=057407d2e7b2ff4bcee6ea10d40852ecdcbc69b8
Validity
Not Before: Jan 2 08:32:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b3ebfbb5848709e91297b79465e2987b8887779e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:db:d5:e8:08:b9:29:5f:4f:20:a8:05:3f:b2:
c1:62:3f:ce:62:8d:cc:13:30:d6:34:3b:d2:db:1c:
d2:82:42:1d:7e:21:17:c9:1c:ed:2b:d6:c7:53:56:
c5:14:c7:42:db:70:ad:f0:d1:a3:54:ca:fb:a3:e3:
76:5b:3c:8a:ee:0b:34:ae:e5:09:63:fb:75:53:1b:
b8:61:e4:3e:7a:2d:33:21:0d:e7:ed:b0:cf:97:dd:
42:8d:54:2c:c0:fc:e5:dd:1f:0f:eb:5f:0d:0e:6e:
1d:7f:0e:8e:5b:6d:c9:24:4f:45:88:3e:2d:3d:28:
83:c5:de:c7:24:c2:bb:fe:bd:d5:8b:ef:35:c2:f2:
c0:e5:6c:6a:c6:a3:61:fc:0f:3c:23:92:2a:3e:7e:
07:71:84:10:b2:7e:02:14:4e:6e:47:4e:86:7e:5d:
13:0b:15:f6:ad:c6:be:30:82:39:ac:a1:2f:23:28:
a7:7a:fb:d8:3a:f1:80:93:29:1f:52:d8:49:55:f7:
51:f6:d6:e0:ba:92:b6:77:5e:d6:e5:2f:bc:d0:05:
5a:1b:74:d3:88:c8:af:82:d3:2b:28:31:ce:06:4e:
ae:9f:b3:9e:fd:56:62:51:b2:b9:b4:8f:07:66:e7:
2b:c8:b4:d5:07:3c:43:0b:44:57:d2:4c:61:68:c1:
12:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:EB:FB:B5:84:87:09:E9:12:97:B7:94:65:E2:98:7B:88:87:77:9E
X509v3 Authority Key Identifier:
keyid:05:74:07:D2:E7:B2:FF:4B:CE:E6:EA:10:D4:08:52:EC:DC:BC:69:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BXQH0uey_0vO5uoQ1AhS7Ny8abg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/929f1b-b047-48bf-a8f1-1bed2ee065f0/1/s-v7tYSHCekSl7eUZeKYe4iHd54.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/929f1b-b047-48bf-a8f1-1bed2ee065f0/1/BXQH0uey_0vO5uoQ1AhS7Ny8abg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.158.0.0/18
185.28.28.0/22
Signature Algorithm: sha256WithRSAEncryption
91:30:b1:4b:6e:11:3a:6b:94:e8:30:91:91:7f:31:8a:77:2d:
8a:fb:76:c8:d7:94:de:dd:f9:97:a6:50:19:09:02:c9:09:56:
0a:90:e9:d0:61:df:4d:c1:08:3b:71:17:02:c1:00:5e:a1:79:
fb:8a:20:5a:70:78:b7:c2:3a:1d:ce:98:5f:cf:e6:2e:8f:c3:
df:df:57:5f:43:a4:64:4f:86:ed:84:5d:89:cc:0c:9b:79:17:
ec:7b:54:fa:87:ee:8e:ec:93:1a:0d:34:f6:c0:b9:d7:10:05:
f2:6c:3e:b0:67:92:b1:8f:82:77:df:51:cf:5f:28:b3:35:dc:
92:04:ef:da:f0:4c:6f:8d:22:cc:cd:2c:b4:23:00:d3:70:00:
5d:84:95:0a:7c:03:74:54:6d:37:59:c8:da:02:0a:17:b5:93:
e9:00:47:9c:16:68:78:21:bd:8b:c2:aa:16:51:f5:65:d8:87:
53:14:5d:d5:04:11:a5:22:94:8b:8a:3a:9c:b9:f1:02:75:d4:
b9:be:61:f4:39:24:72:ce:ec:b7:a7:ba:63:77:72:d0:f8:8a:
cc:b5:9a:20:33:59:7a:7b:d6:be:c2:b2:fa:a1:b4:e2:a3:f2:
41:f3:58:5c:5a:20:9d:63:d4:ce:26:ca:27:c9:d2:ec:82:2a:
08:48:cc:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:05:30 2024 by rpki-client on console-fra.rpki-client.org