Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/25-45slE78mfp_LvApPOpZ-tAUs.roa
File: 25-45slE78mfp_LvApPOpZ-tAUs.roa (raw, json)
Hash identifier: 4Alqubx9Oks5NL9KWX6+svEfzuxkQ7aHvbC1YO+uCt0=
Subject key identifier: DB:9F:B8:E6:C9:44:EF:C9:9F:A7:F2:EF:02:93:CE:A5:9F:AD:01:4B
Certificate issuer: /CN=adac830ccaa74783dd961fab241a228d7cc6f808
Certificate serial: 018CC3B742C43CE2161A66E9DFF2C7A8D31D
Authority key identifier: AD:AC:83:0C:CA:A7:47:83:DD:96:1F:AB:24:1A:22:8D:7C:C6:F8:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rayDDMqnR4Pdlh-rJBoijXzG-Ag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/25-45slE78mfp_LvApPOpZ-tAUs.roa
Signing time: Mon 01 Jan 2024 06:30:16 +0000
ROA not before: Mon 01 Jan 2024 06:30:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15974
IP address blocks: 93.157.208.0/21 maxlen: 32
213.80.128.0/17 maxlen: 32
217.23.64.0/19 maxlen: 32
83.234.164.0/22 maxlen: 32
193.22.6.0/24 maxlen: 32
2a02:e842::/32 maxlen: 128
2a02:e840::/32 maxlen: 128
2a02:e841::/32 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/rayDDMqnR4Pdlh-rJBoijXzG-Ag.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/rayDDMqnR4Pdlh-rJBoijXzG-Ag.mft
rsync://rpki.ripe.net/repository/DEFAULT/rayDDMqnR4Pdlh-rJBoijXzG-Ag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 21:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:42:c4:3c:e2:16:1a:66:e9:df:f2:c7:a8:d3:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adac830ccaa74783dd961fab241a228d7cc6f808
Validity
Not Before: Jan 1 06:30:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=db9fb8e6c944efc99fa7f2ef0293cea59fad014b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:36:85:53:32:e2:4a:a2:82:84:29:43:82:0c:
12:5a:12:f5:a4:e3:a7:cf:3d:e6:e3:d1:c4:e5:44:
10:21:7c:6a:5b:84:22:8c:7d:70:6a:48:81:8d:c4:
34:64:7c:0a:75:44:15:84:fa:94:75:1d:1e:32:f7:
9b:88:9f:45:a0:2f:b1:95:53:e4:04:22:73:88:ee:
47:ec:b7:94:38:b7:fe:f9:9c:64:f9:78:56:2a:4f:
81:7d:02:8c:f1:1f:f6:53:19:c0:cf:7a:6d:05:3c:
09:1e:8f:05:d2:25:88:33:90:b5:e1:cc:86:d4:74:
e8:f2:63:88:05:3f:c0:f2:b6:7a:b8:40:e8:2e:37:
2c:74:a7:f0:e3:8c:7b:04:11:85:0f:0e:f6:13:d7:
5b:44:17:45:2a:26:b5:9f:99:29:ca:f5:47:7e:5c:
dc:16:3f:af:7f:cf:f8:8f:70:22:89:24:3b:71:03:
f3:ce:6c:1e:db:ce:54:82:39:71:5f:18:7a:4b:44:
a5:de:68:f0:2e:fd:a8:60:e8:28:3f:42:4f:c2:b8:
47:da:34:5a:0f:0e:fe:4a:0b:ad:e1:0f:69:ab:c1:
a7:d9:fa:41:7f:a6:e9:66:a5:d3:4b:e3:6e:48:e8:
e7:5b:18:ae:8c:1c:5f:38:8d:64:a6:44:bc:cc:45:
cd:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:9F:B8:E6:C9:44:EF:C9:9F:A7:F2:EF:02:93:CE:A5:9F:AD:01:4B
X509v3 Authority Key Identifier:
keyid:AD:AC:83:0C:CA:A7:47:83:DD:96:1F:AB:24:1A:22:8D:7C:C6:F8:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rayDDMqnR4Pdlh-rJBoijXzG-Ag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/25-45slE78mfp_LvApPOpZ-tAUs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/rayDDMqnR4Pdlh-rJBoijXzG-Ag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.234.164.0/22
93.157.208.0/21
193.22.6.0/24
213.80.128.0/17
217.23.64.0/19
IPv6:
2a02:e840::-2a02:e842:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
05:80:4f:8c:13:4d:14:5f:25:64:31:f4:cb:52:52:17:88:31:
3b:28:93:fd:98:a3:5f:8b:29:ba:f0:d8:ae:54:05:8f:9f:a6:
4c:11:0e:b1:79:5b:03:76:3e:18:f3:29:4e:89:7d:38:d3:91:
bb:0b:b0:b7:4f:1a:7e:25:9e:40:a7:ec:21:a4:3b:a8:ba:70:
76:f8:23:0b:33:5f:63:e7:39:77:c8:03:dd:e5:fc:fb:11:c7:
04:96:c9:2c:3b:44:6e:40:3e:c7:78:4b:aa:02:48:27:e0:47:
3b:1a:7e:d2:3a:c0:79:93:40:51:d9:24:4c:e5:53:58:42:9c:
c2:42:59:26:5c:17:8b:f4:c1:15:cf:c4:e9:28:5d:7f:35:33:
1c:5c:bf:09:e8:1c:53:1d:2f:6c:a9:34:32:9a:15:7d:15:58:
77:d3:38:cb:3f:e6:7c:8e:48:c1:ed:9f:bd:1a:fb:0e:b7:f5:
bd:21:f4:b9:64:42:f3:90:a8:d8:af:0d:6f:3d:27:f0:fa:ca:
61:d0:c8:00:00:d1:ef:07:41:6a:48:20:c2:c9:99:89:78:6a:
cb:4b:52:14:d5:7a:26:be:b2:25:e7:44:14:e5:61:13:e4:c5:
64:ef:15:25:be:f1:3e:1e:0b:24:10:05:5a:e6:d6:6d:01:71:
86:68:08:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 05:26:43 2024 by rpki-client on console-fra.rpki-client.org