Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/4f2367-73f3-4816-bea8-a045ff8e2ac0/1/_2wvTvK9m8He5L4YoTHV0XpLIUE.roa
File: _2wvTvK9m8He5L4YoTHV0XpLIUE.roa (raw, json)
Hash identifier: EeMZ44zJAOCYfqIZllPU5rCQypJtErEamProZPUlW+o=
Subject key identifier: FF:6C:2F:4E:F2:BD:9B:C1:DE:E4:BE:18:A1:31:D5:D1:7A:4B:21:41
Certificate issuer: /CN=9cce3b1197d0cf9511540572a58fd372dcc07489
Certificate serial: 018CC86F11D2760890C29E8C87AA88AC0C15
Authority key identifier: 9C:CE:3B:11:97:D0:CF:95:11:54:05:72:A5:8F:D3:72:DC:C0:74:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nM47EZfQz5URVAVypY_TctzAdIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/4f2367-73f3-4816-bea8-a045ff8e2ac0/1/_2wvTvK9m8He5L4YoTHV0XpLIUE.roa
Signing time: Tue 02 Jan 2024 04:29:31 +0000
ROA not before: Tue 02 Jan 2024 04:29:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41705
IP address blocks: 193.32.240.0/24 maxlen: 24
193.32.240.0/22 maxlen: 24
193.32.242.0/24 maxlen: 24
193.32.243.0/24 maxlen: 24
193.32.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/4f2367-73f3-4816-bea8-a045ff8e2ac0/1/nM47EZfQz5URVAVypY_TctzAdIk.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/4f2367-73f3-4816-bea8-a045ff8e2ac0/1/nM47EZfQz5URVAVypY_TctzAdIk.mft
rsync://rpki.ripe.net/repository/DEFAULT/nM47EZfQz5URVAVypY_TctzAdIk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:11:d2:76:08:90:c2:9e:8c:87:aa:88:ac:0c:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cce3b1197d0cf9511540572a58fd372dcc07489
Validity
Not Before: Jan 2 04:29:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ff6c2f4ef2bd9bc1dee4be18a131d5d17a4b2141
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:0e:81:93:5c:c2:58:07:a4:00:20:71:98:d5:
25:8a:e5:28:64:4c:e1:43:11:07:b5:cd:12:32:06:
20:61:1b:56:cf:25:2f:25:3f:b7:41:61:e2:b1:8e:
38:f1:b6:81:cb:79:a5:f9:a2:12:0c:46:7d:d1:8a:
52:51:69:1c:41:ad:f8:dc:4e:3e:a1:f5:e2:b8:ed:
45:91:98:e2:1e:0d:47:e9:29:19:75:13:cf:fb:51:
c2:e3:d4:4f:cd:c5:71:18:35:e9:fd:a4:55:93:cd:
e6:a0:94:52:cd:80:ce:32:7d:47:b8:9b:a9:f2:19:
db:04:63:31:82:fc:a4:94:a7:c3:9f:c6:d2:8d:5b:
9d:a1:8b:a4:52:76:e8:39:9c:82:45:ae:05:21:22:
83:e4:16:34:76:45:fb:29:27:7d:ee:c2:ed:dc:d8:
64:ec:3c:cb:db:04:fd:9b:64:96:87:33:21:c8:79:
43:c0:41:e6:7c:39:77:2c:1d:1b:1d:66:ce:01:a6:
b8:99:e4:47:68:d5:bb:d6:bd:25:c9:4a:66:bc:ba:
ca:0e:1f:c9:1a:e3:40:97:05:60:75:1c:1a:6c:c3:
9e:2f:19:36:f8:cc:b9:80:7e:69:7e:e9:8b:33:c4:
04:14:d3:fe:a3:ef:c0:f7:1d:f8:f4:ed:34:82:74:
88:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:6C:2F:4E:F2:BD:9B:C1:DE:E4:BE:18:A1:31:D5:D1:7A:4B:21:41
X509v3 Authority Key Identifier:
keyid:9C:CE:3B:11:97:D0:CF:95:11:54:05:72:A5:8F:D3:72:DC:C0:74:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nM47EZfQz5URVAVypY_TctzAdIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/4f2367-73f3-4816-bea8-a045ff8e2ac0/1/_2wvTvK9m8He5L4YoTHV0XpLIUE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/4f2367-73f3-4816-bea8-a045ff8e2ac0/1/nM47EZfQz5URVAVypY_TctzAdIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.32.240.0/22
Signature Algorithm: sha256WithRSAEncryption
05:d3:d7:df:47:93:d9:0e:b5:fe:0b:cb:53:11:55:01:b1:24:
6b:a6:8c:c0:a3:8c:6b:5a:ff:09:8a:25:43:92:aa:09:a2:a5:
9d:43:38:6e:be:6c:40:4d:78:ec:6f:57:f4:ca:ac:dd:9c:a3:
ca:2b:61:ee:6b:2f:a9:ef:7b:0a:1b:f8:15:4f:e1:f0:99:06:
42:17:63:49:af:b1:ee:a4:24:61:19:61:ad:0e:07:94:63:0e:
e5:f6:b5:ad:9e:1b:56:54:d6:ae:00:33:f8:0e:95:b8:31:51:
dc:0d:b4:af:2b:a2:18:f9:83:e9:c4:c6:b1:da:16:59:c8:70:
cf:55:fd:5c:54:2f:62:04:cd:98:f3:89:30:41:90:50:0d:1f:
2b:4f:e7:e7:c0:e4:a0:1d:f5:b2:9f:5c:82:55:95:96:ed:28:
c7:a0:90:05:cd:60:58:9c:e4:19:64:4b:f6:fa:86:81:05:b6:
cf:18:be:f1:92:06:86:52:f7:d6:f7:80:e8:57:1f:e4:b0:92:
bc:af:90:b9:10:a3:d0:fc:7d:5d:96:b6:87:0e:42:61:6b:b9:
e7:20:2f:47:30:41:74:39:61:67:6f:96:d1:8a:43:5e:a2:c7:
71:b1:79:9e:bd:a7:25:15:f3:40:88:ce:6f:8d:6c:fc:a2:a9:
ee:c8:c9:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 03:26:14 2024 by rpki-client on console-ams.rpki-client.org