Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/4D_qC5uUEDm5VyWP5gDlD49YL4w.roa
File: 4D_qC5uUEDm5VyWP5gDlD49YL4w.roa (raw, json)
Hash identifier: Bg/ru1OED9OlufKrIYBZo/uTt0J4wvaVEHKxiNfvXQo=
Subject key identifier: E0:3F:EA:0B:9B:94:10:39:B9:57:25:8F:E6:00:E5:0F:8F:58:2F:8C
Certificate issuer: /CN=ff698eeb2e49fcb5f9c65a99857af29ce06641d9
Certificate serial: 018CC6499A6CD454EFBD61C96EE2609BCB8A
Authority key identifier: FF:69:8E:EB:2E:49:FC:B5:F9:C6:5A:99:85:7A:F2:9C:E0:66:41:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_2mO6y5J_LX5xlqZhXrynOBmQdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/4D_qC5uUEDm5VyWP5gDlD49YL4w.roa
Signing time: Mon 01 Jan 2024 18:29:21 +0000
ROA not before: Mon 01 Jan 2024 18:29:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8194
IP address blocks: 212.70.160.0/19 maxlen: 24
31.24.192.0/21 maxlen: 24
195.244.144.0/20 maxlen: 24
2a00:1780::/32 maxlen: 48
2a00:1780:dd00::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_2mO6y5J_LX5xlqZhXrynOBmQdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:49:9a:6c:d4:54:ef:bd:61:c9:6e:e2:60:9b:cb:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff698eeb2e49fcb5f9c65a99857af29ce06641d9
Validity
Not Before: Jan 1 18:29:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e03fea0b9b941039b957258fe600e50f8f582f8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a8:04:1b:04:39:c7:5d:00:d5:09:ec:ce:f9:
d3:19:e7:60:98:e4:52:95:b5:b7:d8:5a:d4:eb:e4:
bf:fc:71:2b:87:e3:0f:fb:80:58:ad:da:4d:99:8e:
f9:75:e2:4b:12:1a:4d:8c:5a:fe:8c:ea:85:bb:ef:
bc:30:b6:c9:1d:30:ea:53:0d:1d:5a:4c:a5:db:47:
ad:69:88:89:1b:c7:9c:99:12:05:5c:52:ca:84:8f:
ec:f0:0f:9d:a2:ea:f3:d4:a1:6b:9f:ea:ac:a4:f0:
c4:f1:fc:25:5b:76:58:36:56:db:6a:3b:bb:ec:fd:
ff:28:8e:19:1f:c8:c5:32:f4:af:5e:e7:ce:c1:84:
5c:38:08:35:86:93:75:0f:e2:7c:5c:4b:31:f5:20:
b1:1c:2d:b0:14:dc:1a:1a:07:1c:2f:32:2a:37:35:
6d:82:f2:53:31:2a:8f:38:48:d1:9d:48:9d:35:3b:
e5:84:b7:a6:89:4a:81:a5:38:74:19:39:7a:5e:8d:
f8:ee:4b:88:44:bd:aa:d7:a3:bf:e2:c2:1a:a7:aa:
eb:ab:0a:cb:99:59:b3:12:ae:bc:06:37:e5:c1:09:
f4:fa:e0:c5:7f:cc:c3:a2:a2:9d:16:1a:86:21:94:
b5:30:aa:1c:2a:c3:6a:1f:0b:f1:8f:9d:0e:53:7d:
0f:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:3F:EA:0B:9B:94:10:39:B9:57:25:8F:E6:00:E5:0F:8F:58:2F:8C
X509v3 Authority Key Identifier:
keyid:FF:69:8E:EB:2E:49:FC:B5:F9:C6:5A:99:85:7A:F2:9C:E0:66:41:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_2mO6y5J_LX5xlqZhXrynOBmQdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/4D_qC5uUEDm5VyWP5gDlD49YL4w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.24.192.0/21
195.244.144.0/20
212.70.160.0/19
IPv6:
2a00:1780::/32
Signature Algorithm: sha256WithRSAEncryption
b5:4f:38:32:d9:86:1d:4b:38:42:17:eb:9b:17:df:c3:0b:4f:
03:b5:c4:43:ec:94:cb:d9:24:19:5c:47:b5:70:66:51:47:bc:
7d:69:46:bf:f6:d1:0d:76:1b:e0:45:a7:4a:d1:2e:78:0b:f1:
57:3e:8a:cf:e4:00:91:3c:e6:1e:1c:fc:68:f1:02:db:50:93:
44:7d:be:1e:32:08:b5:db:08:fe:28:c2:fd:e1:ac:f0:6d:81:
6d:9b:41:93:88:21:08:1e:cd:55:e7:bf:a0:be:2b:9b:af:0d:
eb:da:d9:0f:c4:bf:b5:32:bc:5f:95:84:95:59:0f:1b:f6:3d:
6b:b9:a9:cb:9d:76:87:f5:1d:9f:84:e5:d1:de:30:07:5f:20:
e7:60:44:d5:fd:43:13:b5:a7:1a:17:02:ff:ff:9d:75:86:22:
ff:ce:96:91:92:18:a4:d6:cf:36:02:14:21:e8:d4:f9:23:77:
42:49:32:e5:ec:88:83:2b:d0:8e:4c:78:e8:0c:4b:eb:53:e4:
16:34:24:13:0e:b0:29:f0:36:d4:a0:73:76:92:d8:40:f7:70:
20:6d:01:14:7f:13:f1:96:92:9f:c1:d7:0c:d0:39:77:12:4e:
4b:01:c1:65:52:0f:40:d8:26:1f:df:db:12:43:c1:7f:ef:95:
c9:6e:c2:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 21:01:40 2024 by rpki-client on console-fra.rpki-client.org