Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/c0dCRAWkwFRmaZnF7pMKsvkULIE.roa
File: c0dCRAWkwFRmaZnF7pMKsvkULIE.roa (raw, json)
Hash identifier: ZTQjk/pvLzkqs0zMP+J58UoKurFE5ljtPairfDbL/D4=
Subject key identifier: 73:47:42:44:05:A4:C0:54:66:69:99:C5:EE:93:0A:B2:F9:14:2C:81
Certificate issuer: /CN=ab54fe831b6a719f42e6c8486fd03b550be761fb
Certificate serial: 018CC94CA25FD1974506A1C740F197F1A50E
Authority key identifier: AB:54:FE:83:1B:6A:71:9F:42:E6:C8:48:6F:D0:3B:55:0B:E7:61:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q1T-gxtqcZ9C5shIb9A7VQvnYfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/c0dCRAWkwFRmaZnF7pMKsvkULIE.roa
Signing time: Tue 02 Jan 2024 08:31:31 +0000
ROA not before: Tue 02 Jan 2024 08:31:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212462
IP address blocks: 109.234.80.0/24 maxlen: 24
185.33.67.0/24 maxlen: 24
185.33.66.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/q1T-gxtqcZ9C5shIb9A7VQvnYfs.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/q1T-gxtqcZ9C5shIb9A7VQvnYfs.mft
rsync://rpki.ripe.net/repository/DEFAULT/q1T-gxtqcZ9C5shIb9A7VQvnYfs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 11:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4c:a2:5f:d1:97:45:06:a1:c7:40:f1:97:f1:a5:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab54fe831b6a719f42e6c8486fd03b550be761fb
Validity
Not Before: Jan 2 08:31:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7347424405a4c054666999c5ee930ab2f9142c81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:16:a3:7d:52:26:cb:be:bd:9d:ec:3c:75:34:
a2:72:14:b4:63:d6:9e:e7:96:b4:e9:16:40:51:f1:
32:ab:6f:6d:2b:a8:b9:e7:e6:29:09:cb:3f:e0:35:
1c:5a:03:e3:90:e9:92:eb:07:31:db:cb:1a:4b:e7:
e7:f6:6a:84:4d:d9:8b:5c:ff:19:4f:97:58:5b:6d:
f3:5d:fb:43:b8:9a:59:cf:71:8d:07:17:b4:70:1e:
58:7e:96:f9:a8:3d:41:ea:d6:81:d2:87:ec:fd:9f:
49:be:ee:91:a1:c8:a7:c5:98:0f:14:66:b5:3f:30:
7c:e8:02:d7:c1:f2:8a:a4:86:1f:61:05:10:6b:8b:
94:2c:69:b4:9b:35:6c:7a:f5:8c:73:e0:ff:51:7d:
3e:0c:13:b4:8a:60:ab:08:fc:4c:94:8e:67:b5:4b:
d0:cc:2e:22:c4:89:c6:c5:15:10:7f:86:12:ce:61:
be:f4:3d:40:03:40:50:92:dd:8d:bf:19:f1:68:95:
6b:76:72:6b:be:51:d8:ae:1b:43:bf:0d:2a:3e:2f:
ce:4b:bf:74:01:34:f9:8a:c2:79:e9:f3:a4:80:62:
3b:f5:e0:06:73:df:72:b4:c3:54:cf:4e:b1:84:e3:
5f:d6:21:04:34:a4:40:4a:79:c8:d6:91:47:db:c0:
1b:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:47:42:44:05:A4:C0:54:66:69:99:C5:EE:93:0A:B2:F9:14:2C:81
X509v3 Authority Key Identifier:
keyid:AB:54:FE:83:1B:6A:71:9F:42:E6:C8:48:6F:D0:3B:55:0B:E7:61:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q1T-gxtqcZ9C5shIb9A7VQvnYfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/c0dCRAWkwFRmaZnF7pMKsvkULIE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/q1T-gxtqcZ9C5shIb9A7VQvnYfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.234.80.0/24
185.33.66.0/23
Signature Algorithm: sha256WithRSAEncryption
54:8d:8e:25:84:49:63:0d:58:e0:dd:7d:3c:1b:58:bc:2b:93:
12:43:9f:af:fc:33:f4:00:bf:21:45:d0:ff:f9:79:7a:24:d5:
b4:11:dc:d5:7d:83:14:01:23:e9:3b:f4:18:9f:95:e9:1d:ae:
af:45:aa:ba:53:29:35:27:4a:f1:6a:9e:f0:ce:67:d5:ef:dc:
bd:42:9d:53:f7:d6:0b:2e:80:23:0b:9a:7f:71:35:12:01:69:
8d:d5:f5:30:af:f4:24:b6:68:86:be:22:4b:29:1c:c4:57:82:
58:8c:ab:15:66:56:bb:41:0f:80:3e:4b:dd:20:55:58:67:e4:
34:d3:64:9b:3e:4f:1d:fe:f4:e6:3d:9f:1a:42:5a:db:63:30:
3e:04:ee:8e:b1:d9:87:f8:09:e7:fe:03:41:72:2f:88:35:9b:
19:60:90:3c:ef:c3:07:4a:81:49:0a:83:f4:79:3f:9d:98:38:
7d:47:97:f5:b4:d9:81:8b:fa:b6:0c:30:6e:2c:92:f3:e9:5e:
bc:1a:43:46:cc:34:09:8d:77:07:51:10:e3:46:56:46:a7:48:
aa:1f:ae:58:5d:53:a8:df:aa:b6:32:53:b3:ba:57:7c:5e:3e:
85:77:b7:b2:ad:b3:61:dc:76:be:b7:ba:9d:cc:9d:68:85:84:
1d:f6:b8:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 16:08:47 2024 by rpki-client on console-fra.rpki-client.org