Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/243b53-4b94-4244-a8ec-7c549f1ed16c/1/sXUqrjgba_ku3DMajkvAdnx7rHI.roa
File: sXUqrjgba_ku3DMajkvAdnx7rHI.roa (raw, json)
Hash identifier: M8VylxDvFV/hs/lPVuwYYn35JXilVegtIS2syg/FaM4=
Subject key identifier: B1:75:2A:AE:38:1B:6B:F9:2E:DC:33:1A:8E:4B:C0:76:7C:7B:AC:72
Certificate issuer: /CN=bca0ec59564324237420d506b9b498d752ee2168
Certificate serial: 018CC94CC429A11F9A66A1D47417F0BCEF0E
Authority key identifier: BC:A0:EC:59:56:43:24:23:74:20:D5:06:B9:B4:98:D7:52:EE:21:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vKDsWVZDJCN0INUGubSY11LuIWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/243b53-4b94-4244-a8ec-7c549f1ed16c/1/sXUqrjgba_ku3DMajkvAdnx7rHI.roa
Signing time: Tue 02 Jan 2024 08:31:40 +0000
ROA not before: Tue 02 Jan 2024 08:31:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209453
IP address blocks: 213.167.229.0/24 maxlen: 24
213.167.230.0/24 maxlen: 24
217.70.179.0/24 maxlen: 24
217.70.187.0/24 maxlen: 24
2001:4b98:abcb::/48 maxlen: 48
2001:4b98:aaab::/48 maxlen: 48
2001:4b98:aaaa::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/243b53-4b94-4244-a8ec-7c549f1ed16c/1/vKDsWVZDJCN0INUGubSY11LuIWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/243b53-4b94-4244-a8ec-7c549f1ed16c/1/vKDsWVZDJCN0INUGubSY11LuIWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/vKDsWVZDJCN0INUGubSY11LuIWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 16:12:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4c:c4:29:a1:1f:9a:66:a1:d4:74:17:f0:bc:ef:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bca0ec59564324237420d506b9b498d752ee2168
Validity
Not Before: Jan 2 08:31:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b1752aae381b6bf92edc331a8e4bc0767c7bac72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:e4:a2:21:72:79:14:63:5c:b4:3d:a8:48:a0:
a8:12:8d:37:05:97:68:3f:6c:ef:9d:91:43:92:a4:
32:4e:48:01:e3:6d:14:ab:9c:b0:a2:a0:4a:a5:a9:
1e:eb:c0:de:51:b5:8b:9d:fe:85:19:11:23:9f:80:
9c:6f:21:04:7e:dc:c8:46:67:e0:6b:e5:9b:40:b6:
5e:ca:c8:b4:f8:00:8c:45:5c:2c:45:49:1d:5f:00:
a5:5b:22:49:23:78:f9:d7:1f:70:e1:0c:c4:8a:9b:
32:c2:30:2d:27:a8:d8:57:82:1a:88:16:8e:e0:78:
fd:86:e8:12:50:df:67:1a:cb:4d:3d:f4:20:4f:e5:
08:89:0a:f1:e7:1d:a1:83:7b:0a:9b:4d:1e:95:fd:
21:8d:04:6b:07:59:18:fd:54:f7:8c:71:59:b6:2e:
06:f3:3f:82:35:1a:3f:49:e1:e2:e2:46:44:f7:2d:
71:67:33:b4:6e:c1:73:9c:31:45:2b:6c:83:2f:d7:
38:15:f9:f5:4a:ed:23:b9:d6:41:82:1c:c0:47:bb:
b6:11:f1:58:02:8f:bb:65:f4:41:59:ca:88:85:52:
aa:90:94:f8:8f:e5:30:36:d3:6e:b1:34:ba:af:99:
44:2a:92:b7:93:98:f6:b0:af:6f:88:58:f0:15:68:
1f:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:75:2A:AE:38:1B:6B:F9:2E:DC:33:1A:8E:4B:C0:76:7C:7B:AC:72
X509v3 Authority Key Identifier:
keyid:BC:A0:EC:59:56:43:24:23:74:20:D5:06:B9:B4:98:D7:52:EE:21:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vKDsWVZDJCN0INUGubSY11LuIWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/243b53-4b94-4244-a8ec-7c549f1ed16c/1/sXUqrjgba_ku3DMajkvAdnx7rHI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/243b53-4b94-4244-a8ec-7c549f1ed16c/1/vKDsWVZDJCN0INUGubSY11LuIWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.167.229.0-213.167.230.255
217.70.179.0/24
217.70.187.0/24
IPv6:
2001:4b98:aaaa::/47
2001:4b98:abcb::/48
Signature Algorithm: sha256WithRSAEncryption
1b:1b:01:fb:5c:2e:b6:84:c7:0c:ea:50:99:af:2a:45:e3:ad:
6b:16:ff:bc:3a:c1:52:a1:0f:77:d4:3c:73:ae:f0:62:70:77:
68:b6:02:7b:82:a0:cd:27:f0:7e:5b:38:5b:1a:ff:71:3e:e3:
7a:1a:72:49:7f:8e:8e:d4:d8:ad:67:04:b0:b9:cd:3e:e1:c0:
5a:eb:10:00:67:42:3f:d0:01:aa:ae:77:cc:c4:4f:fc:dc:c5:
14:15:a5:28:90:1b:38:24:72:61:2b:fa:aa:8f:c4:ba:10:23:
13:89:84:b4:39:65:ae:7b:95:8b:bf:04:f3:6e:1c:99:f2:a7:
1c:0a:ed:42:fa:1d:ff:e3:71:1d:d9:8d:45:97:f7:b6:35:97:
81:f9:b3:22:d9:02:10:5d:c9:af:7c:49:35:a5:56:ba:ab:51:
40:c8:10:32:aa:69:26:b7:2c:f8:cd:2b:32:f9:7d:64:12:25:
38:ce:7c:57:08:1b:c8:46:fc:57:f7:c0:60:e5:d1:3f:2b:8c:
fa:00:75:6d:d8:a7:2a:43:9e:fd:d3:b6:6f:05:23:cd:bc:41:
78:f3:b8:2c:9c:5f:cc:db:11:3e:ca:ca:62:6e:a4:2a:88:80:
2e:28:4d:97:54:34:32:15:9b:b2:4b:c8:1c:8c:8a:6f:47:62:
3f:46:f2:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 22:32:46 2024 by rpki-client on console-fra.rpki-client.org