Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/dcc86a-5f51-4d12-963d-f27c628b8353/1/PpMV2NRq8diKMR2vyaq8wJSFAdQ.roa
File: PpMV2NRq8diKMR2vyaq8wJSFAdQ.roa (raw, json)
Hash identifier: v26IZaYYt6aME4lczK864c0DupytZe8Gei0BV/bV2uU=
Subject key identifier: 3E:93:15:D8:D4:6A:F1:D8:8A:31:1D:AF:C9:AA:BC:C0:94:85:01:D4
Certificate issuer: /CN=05eb8cbbaaf25a71bf2fcab6e11057ebf91f01e3
Certificate serial: 018CC64B01D6BE41DB44B8945C05F2B8F058
Authority key identifier: 05:EB:8C:BB:AA:F2:5A:71:BF:2F:CA:B6:E1:10:57:EB:F9:1F:01:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BeuMu6ryWnG_L8q24RBX6_kfAeM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/dcc86a-5f51-4d12-963d-f27c628b8353/1/PpMV2NRq8diKMR2vyaq8wJSFAdQ.roa
Signing time: Mon 01 Jan 2024 18:30:53 +0000
ROA not before: Mon 01 Jan 2024 18:30:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3301
IP address blocks: 193.241.244.0/23 maxlen: 23
193.241.252.0/23 maxlen: 24
193.241.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/dcc86a-5f51-4d12-963d-f27c628b8353/1/BeuMu6ryWnG_L8q24RBX6_kfAeM.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/dcc86a-5f51-4d12-963d-f27c628b8353/1/BeuMu6ryWnG_L8q24RBX6_kfAeM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BeuMu6ryWnG_L8q24RBX6_kfAeM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:01:d6:be:41:db:44:b8:94:5c:05:f2:b8:f0:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05eb8cbbaaf25a71bf2fcab6e11057ebf91f01e3
Validity
Not Before: Jan 1 18:30:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3e9315d8d46af1d88a311dafc9aabcc0948501d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c1:84:c1:01:f7:37:1b:54:10:3d:be:01:a5:
71:aa:1b:a7:18:31:ba:1a:29:da:93:85:ed:84:af:
0c:f0:bd:13:b5:05:67:e0:09:ea:4b:b6:5a:13:5d:
93:98:13:b5:8e:fd:46:e5:7b:4a:42:a6:32:4d:53:
57:25:2e:af:ba:58:65:2b:da:df:54:5d:28:e6:a1:
2b:99:39:7e:e0:bb:bd:c4:64:6b:3c:d3:69:9f:41:
bc:8d:b0:ca:df:9b:b9:d2:22:7f:00:ad:21:56:a3:
20:52:a9:39:59:e5:6c:3b:3b:7b:c3:cc:e0:bd:ff:
ca:7b:ad:75:bb:17:5d:9d:8d:eb:6b:c5:f8:a9:a9:
62:a7:01:33:69:53:80:be:f0:48:22:60:e1:92:1d:
01:1f:be:d0:71:3b:a6:f6:ab:3f:46:50:91:43:df:
ba:59:b6:31:12:fd:94:5d:ee:4b:41:4a:bc:dd:fa:
82:c8:29:38:f3:2d:6b:43:30:ad:04:f7:6d:6f:0e:
cf:3a:15:47:0a:f7:09:08:4e:b0:f5:d4:f0:b4:95:
f4:93:59:2a:57:59:67:2c:76:5b:a3:fb:24:3a:19:
4e:aa:67:a0:c6:34:f5:e2:51:c7:63:6f:0e:db:39:
94:8f:da:99:c6:65:7f:6c:bf:64:b8:a0:fa:5e:2a:
a9:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:93:15:D8:D4:6A:F1:D8:8A:31:1D:AF:C9:AA:BC:C0:94:85:01:D4
X509v3 Authority Key Identifier:
keyid:05:EB:8C:BB:AA:F2:5A:71:BF:2F:CA:B6:E1:10:57:EB:F9:1F:01:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BeuMu6ryWnG_L8q24RBX6_kfAeM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/dcc86a-5f51-4d12-963d-f27c628b8353/1/PpMV2NRq8diKMR2vyaq8wJSFAdQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/dcc86a-5f51-4d12-963d-f27c628b8353/1/BeuMu6ryWnG_L8q24RBX6_kfAeM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.241.212.0/24
193.241.244.0/23
193.241.252.0/23
Signature Algorithm: sha256WithRSAEncryption
07:15:1d:47:a2:fa:4f:ee:7e:76:b9:73:c7:4b:a4:87:2e:80:
d1:ae:85:3d:24:4c:7d:51:4d:43:6e:9a:3a:31:5e:28:82:8a:
7b:00:60:ef:1a:8f:48:3f:f3:01:f5:09:eb:23:9a:5d:cb:1f:
02:0a:5e:4c:18:e9:d5:23:83:d3:f9:7f:50:e2:fe:4f:15:35:
38:92:b6:72:e5:74:49:6b:76:20:c7:65:d0:42:7e:ee:e6:19:
94:55:94:cc:18:73:b5:99:e8:e3:f8:3f:50:5e:2b:c8:8f:77:
ad:c8:30:bd:1e:f5:04:12:1d:2f:b1:38:c1:0b:17:92:24:42:
2a:fe:24:24:44:2a:04:10:94:28:07:7f:43:45:2f:f1:3e:af:
19:48:53:8d:e4:59:c6:e9:73:18:af:5e:ae:0c:e4:3b:0a:83:
22:d0:42:71:3a:d5:73:59:d5:d6:df:72:0f:64:ee:2e:68:b3:
a8:9a:0e:f9:03:b1:ad:64:01:01:07:41:45:21:32:31:c1:92:
12:a5:12:ea:4c:92:f5:0b:1b:da:21:14:fc:d6:82:c6:ff:74:
a1:aa:f8:f7:66:b0:ea:72:79:70:3c:62:c2:20:0b:6e:55:57:
f1:cf:00:a6:b4:19:46:c4:25:9a:1c:bd:cd:0f:40:76:5c:f6:
c8:35:45:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:14:23 2024 by rpki-client on console-fra.rpki-client.org