Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/vOMo9qyOWJKDYVr6dhwZgtMiyq0.roa
File: vOMo9qyOWJKDYVr6dhwZgtMiyq0.roa (raw, json)
Hash identifier: oEQYpGI6HRlYNN9qBzEAy5XD/J+i7I9nMFBBwv31MtM=
Subject key identifier: BC:E3:28:F6:AC:8E:58:92:83:61:5A:FA:76:1C:19:82:D3:22:CA:AD
Certificate issuer: /CN=e801f23ce821c264d67727536ec183537594c5f2
Certificate serial: 018CC49368DCFFFA376AF8058BE9BCF58869
Authority key identifier: E8:01:F2:3C:E8:21:C2:64:D6:77:27:53:6E:C1:83:53:75:94:C5:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6AHyPOghwmTWdydTbsGDU3WUxfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/vOMo9qyOWJKDYVr6dhwZgtMiyq0.roa
Signing time: Mon 01 Jan 2024 10:30:44 +0000
ROA not before: Mon 01 Jan 2024 10:30:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2603
IP address blocks: 193.10.95.0/24 maxlen: 24
193.10.94.0/24 maxlen: 24
193.10.252.0/24 maxlen: 24
193.11.3.0/24 maxlen: 24
193.10.255.0/24 maxlen: 24
193.10.254.0/24 maxlen: 24
193.10.68.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/6AHyPOghwmTWdydTbsGDU3WUxfI.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/6AHyPOghwmTWdydTbsGDU3WUxfI.mft
rsync://rpki.ripe.net/repository/DEFAULT/6AHyPOghwmTWdydTbsGDU3WUxfI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 May 2024 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:68:dc:ff:fa:37:6a:f8:05:8b:e9:bc:f5:88:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e801f23ce821c264d67727536ec183537594c5f2
Validity
Not Before: Jan 1 10:30:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bce328f6ac8e589283615afa761c1982d322caad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:02:b0:6e:08:16:29:ce:b7:e4:7b:e6:c3:69:
5a:0a:7a:10:9b:d3:81:14:d2:e5:fa:31:c7:bf:74:
82:46:51:48:6d:94:1a:3b:ef:5a:5f:86:65:3e:e7:
8c:58:b3:9b:5b:52:67:bd:1a:93:b2:1e:45:a9:4f:
12:8a:c7:5c:4d:d0:01:8b:62:3f:ea:f4:91:21:2d:
c7:dd:3f:7e:39:7f:ec:3c:9f:60:13:cd:ef:23:d2:
85:65:61:c9:3b:41:5d:b1:20:62:c7:9b:6a:bb:07:
b1:10:af:d5:2b:65:7d:36:e7:bf:30:90:5d:95:a0:
58:4b:6a:56:92:b9:9c:bf:ef:ff:4c:27:07:d0:84:
55:bf:8a:87:ba:d4:1e:74:dd:7d:90:e2:22:e6:33:
da:e1:c9:a6:5f:bc:1e:17:a8:ba:08:a3:bc:ab:8f:
fc:7b:ce:74:a3:9d:6e:42:55:36:a7:b7:b0:0e:f0:
c5:7e:2d:ca:e9:6a:c4:28:37:37:6b:fb:88:34:be:
42:e3:f0:09:eb:ad:7e:a8:29:ac:3d:fb:f7:b1:62:
df:e7:68:59:75:17:6b:d3:80:5e:e4:9e:b7:fe:8b:
6d:cd:08:f4:ba:ff:ec:f3:77:63:25:0e:6b:d5:21:
2e:65:7d:3b:50:cf:a0:aa:07:05:99:1f:fc:43:45:
f7:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:E3:28:F6:AC:8E:58:92:83:61:5A:FA:76:1C:19:82:D3:22:CA:AD
X509v3 Authority Key Identifier:
keyid:E8:01:F2:3C:E8:21:C2:64:D6:77:27:53:6E:C1:83:53:75:94:C5:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6AHyPOghwmTWdydTbsGDU3WUxfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/vOMo9qyOWJKDYVr6dhwZgtMiyq0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/6AHyPOghwmTWdydTbsGDU3WUxfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.10.68.0/24
193.10.94.0/23
193.10.252.0/24
193.10.254.0/23
193.11.3.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:2e:87:69:df:af:93:7e:6e:1c:73:dc:e0:cb:f1:78:ba:8a:
7f:e3:1a:c8:f1:af:c8:a3:83:5f:49:44:4d:d3:13:5d:c9:5e:
66:87:45:3e:74:b4:d6:86:39:2c:11:80:00:6a:9c:81:95:09:
83:17:43:87:e2:77:1e:27:61:ee:c3:26:e0:e1:65:b2:b1:95:
47:61:f0:95:fe:42:6c:de:cf:ab:1a:62:98:62:cc:92:57:4a:
77:33:d0:ef:bd:8a:9e:65:dd:77:69:3d:00:7f:38:c8:27:a3:
c8:dd:46:60:0a:49:34:b8:af:f4:e3:f0:87:90:a2:91:cb:38:
9d:10:54:25:a1:ec:32:08:9a:90:66:7c:ba:81:16:2a:74:e3:
3c:03:93:d0:fa:ce:43:23:31:45:6d:b6:31:4c:5f:c2:dc:03:
c9:42:57:5a:1c:bf:86:02:7b:b4:45:2d:f6:86:8b:e5:d8:4b:
bf:6c:f1:cc:42:4d:89:7c:40:dd:e4:a7:9e:b7:8c:42:9c:c6:
4e:0d:5c:4f:27:5b:d0:66:c3:c0:d9:25:3e:12:1e:a3:c0:06:
94:0f:0c:b7:61:fb:43:7f:9d:02:89:e5:7d:b1:37:de:15:bc:
08:3e:37:3f:f6:dc:4a:81:0a:7b:5a:f4:b8:7d:c2:90:59:b5:
3a:f3:d1:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 08:36:19 2024 by rpki-client on console-fra.rpki-client.org