Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/0YqOA3uOWT2L9KONHLcmfITKvKk.roa
File: 0YqOA3uOWT2L9KONHLcmfITKvKk.roa (raw, json)
Hash identifier: keYmB2eI3TKlHiAh6a2Iw0RIepKMijyZcg66+KUF148=
Subject key identifier: D1:8A:8E:03:7B:8E:59:3D:8B:F4:A3:8D:1C:B7:26:7C:84:CA:BC:A9
Certificate issuer: /CN=b0b5a80a7106e0a4b8545c8150bb72c699fcc9a0
Certificate serial: 018CC8DF2123701EE571423FB39FA8B1C1BC
Authority key identifier: B0:B5:A8:0A:71:06:E0:A4:B8:54:5C:81:50:BB:72:C6:99:FC:C9:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sLWoCnEG4KS4VFyBULtyxpn8yaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/0YqOA3uOWT2L9KONHLcmfITKvKk.roa
Signing time: Tue 02 Jan 2024 06:31:55 +0000
ROA not before: Tue 02 Jan 2024 06:31:55 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212369
IP address blocks: 185.93.68.0/24 maxlen: 24
185.93.69.0/24 maxlen: 24
185.93.70.0/24 maxlen: 24
185.255.93.0/24 maxlen: 24
185.255.94.0/24 maxlen: 24
185.255.95.0/24 maxlen: 24
89.35.52.0/24 maxlen: 24
185.132.126.0/24 maxlen: 24
93.115.10.0/24 maxlen: 24
93.177.101.0/24 maxlen: 24
93.177.102.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/sLWoCnEG4KS4VFyBULtyxpn8yaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/sLWoCnEG4KS4VFyBULtyxpn8yaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/sLWoCnEG4KS4VFyBULtyxpn8yaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 May 2024 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:21:23:70:1e:e5:71:42:3f:b3:9f:a8:b1:c1:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0b5a80a7106e0a4b8545c8150bb72c699fcc9a0
Validity
Not Before: Jan 2 06:31:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d18a8e037b8e593d8bf4a38d1cb7267c84cabca9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:a2:8c:7d:7b:a8:56:bf:17:94:a4:d1:8a:10:
21:7d:3e:bf:fd:64:77:de:dc:ce:3f:11:0b:f2:9e:
b4:97:e1:95:89:e1:33:d8:0d:27:66:82:27:86:2d:
2d:a2:a2:2d:0f:0e:e7:96:d0:61:27:4c:10:59:1c:
a6:b9:e4:c6:50:d3:8c:1f:ee:56:1e:7a:d3:60:a8:
90:2c:fd:0f:7d:b2:69:36:30:b3:07:68:fd:44:53:
65:59:98:b6:18:ac:06:22:94:15:43:e8:53:f0:7a:
bf:8b:90:ca:fc:8f:36:3e:c5:c2:a3:06:a8:be:44:
f3:38:b7:90:32:09:05:39:8a:8f:2c:8a:0d:eb:09:
e7:dd:31:4f:b6:a8:a9:3f:b3:24:88:0b:d4:d5:bd:
61:10:cc:12:73:a5:7d:10:6c:4b:f5:ff:f1:35:5d:
aa:82:88:34:c5:f1:1e:2b:07:e4:28:89:cc:47:90:
10:62:5a:b5:0a:7f:9d:69:e2:93:52:b4:ce:b3:d0:
2b:0e:9e:d6:c8:8e:ef:4d:41:cc:0d:44:2f:e8:0c:
8d:b5:a3:30:be:7d:17:e8:af:6b:cc:7f:1d:93:80:
bd:33:77:34:24:48:6f:b8:f0:f3:db:4d:2f:30:f5:
51:05:cd:06:81:5e:fc:14:30:58:28:83:9a:76:25:
31:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:8A:8E:03:7B:8E:59:3D:8B:F4:A3:8D:1C:B7:26:7C:84:CA:BC:A9
X509v3 Authority Key Identifier:
keyid:B0:B5:A8:0A:71:06:E0:A4:B8:54:5C:81:50:BB:72:C6:99:FC:C9:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sLWoCnEG4KS4VFyBULtyxpn8yaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/0YqOA3uOWT2L9KONHLcmfITKvKk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/sLWoCnEG4KS4VFyBULtyxpn8yaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.35.52.0/24
93.115.10.0/24
93.177.101.0-93.177.102.255
185.93.68.0-185.93.70.255
185.132.126.0/24
185.255.93.0-185.255.95.255
Signature Algorithm: sha256WithRSAEncryption
5b:d9:81:e7:04:fa:62:dd:8d:c6:b3:2b:56:2c:59:c8:be:48:
81:2a:da:80:78:8f:83:da:9e:5e:57:b9:87:de:9f:15:c9:7e:
10:17:66:07:64:2d:ba:05:04:d4:c2:fd:80:2e:df:b6:de:42:
a6:49:a3:05:f4:6a:85:a6:0d:4f:56:14:9d:8d:f4:a5:b5:5c:
d9:5a:19:49:28:d2:cb:71:59:e1:e1:72:5f:c3:2b:d9:24:32:
b5:79:78:3c:a0:fe:6d:93:81:13:f8:33:a7:44:b8:5e:6d:54:
0e:b6:9c:78:ff:ca:15:6f:ca:26:16:d1:de:da:f2:a8:a8:7e:
74:55:72:b2:49:e8:46:bf:26:1f:e7:3e:80:bd:07:02:13:ad:
94:b2:40:b4:9d:39:7d:55:f9:0b:8f:db:36:6d:f8:55:b1:63:
da:1c:df:53:3b:38:bd:d3:b4:1d:5e:1b:c5:03:c9:13:3b:8f:
5d:c2:1e:f2:e3:e2:1d:40:b0:f1:7f:7f:11:5e:45:f0:ea:fe:
14:ab:41:c6:ef:df:eb:25:ce:6f:e5:63:8c:86:55:af:62:cf:
cf:f7:a8:0d:55:f7:d9:c5:dd:09:ae:e4:40:f0:60:50:5c:3a:
b6:b2:bb:58:f4:51:bc:30:85:33:13:a9:d3:28:d2:5b:ac:25:
6f:37:8e:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 08:10:49 2024 by rpki-client on console-ams.rpki-client.org