Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/2SaZxTxHSGpQeHRpGfO5sgi9CLY.roa
File: 2SaZxTxHSGpQeHRpGfO5sgi9CLY.roa (raw, json)
Hash identifier: 6K3b4Ro/mwA4/I7sEhcPPr37mKDsHbczdIRwB5HDwvA=
Subject key identifier: D9:26:99:C5:3C:47:48:6A:50:78:74:69:19:F3:B9:B2:08:BD:08:B6
Certificate issuer: /CN=b0b5a80a7106e0a4b8545c8150bb72c699fcc9a0
Certificate serial: 018CC8DF1DC044A7E481019EC32D9A4DED63
Authority key identifier: B0:B5:A8:0A:71:06:E0:A4:B8:54:5C:81:50:BB:72:C6:99:FC:C9:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sLWoCnEG4KS4VFyBULtyxpn8yaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/2SaZxTxHSGpQeHRpGfO5sgi9CLY.roa
Signing time: Tue 02 Jan 2024 06:31:54 +0000
ROA not before: Tue 02 Jan 2024 06:31:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43260
IP address blocks: 193.164.4.0/24 maxlen: 24
185.93.70.0/24 maxlen: 24
185.93.68.0/24 maxlen: 24
193.164.6.0/24 maxlen: 24
193.164.7.0/24 maxlen: 24
93.177.102.0/24 maxlen: 24
2a05:f7c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/sLWoCnEG4KS4VFyBULtyxpn8yaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/sLWoCnEG4KS4VFyBULtyxpn8yaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/sLWoCnEG4KS4VFyBULtyxpn8yaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:1d:c0:44:a7:e4:81:01:9e:c3:2d:9a:4d:ed:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0b5a80a7106e0a4b8545c8150bb72c699fcc9a0
Validity
Not Before: Jan 2 06:31:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d92699c53c47486a5078746919f3b9b208bd08b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:7d:e1:c4:d4:7b:89:1e:6f:7a:98:43:b9:0f:
77:f9:c6:86:e5:ae:d4:af:9a:46:33:d4:73:68:e0:
21:fd:a2:e1:2d:9f:bd:f6:01:57:f0:51:dc:cf:f9:
4d:00:e2:f3:be:e8:61:97:6c:ac:90:42:ab:ee:25:
af:29:f6:43:6d:b9:90:32:15:0c:20:cf:29:03:eb:
e7:60:ca:c7:60:f0:8c:cd:10:6e:d5:47:cc:d6:76:
8a:c1:4b:0e:a6:53:41:20:f1:c9:2d:3c:b0:2a:49:
26:35:28:0b:5d:e4:df:96:fe:56:2d:88:66:e7:8b:
84:f9:a9:0e:6b:fd:ef:ef:d2:7a:81:4a:4a:26:21:
e1:69:b3:89:ef:f7:86:00:b2:9d:7e:eb:49:ee:d1:
cb:e6:26:34:f6:7e:4e:b1:46:a3:1a:33:07:c7:59:
48:af:47:0a:4c:9e:dc:50:e4:dd:4a:33:3c:b9:bb:
c8:63:b6:b4:b3:90:ee:81:8b:21:f9:64:0f:d8:9f:
cc:dd:d9:d4:c1:de:07:b4:04:a5:fd:d9:4c:f8:b6:
4b:06:49:a0:8f:a1:35:8a:21:aa:fe:fd:b3:18:f9:
00:e2:95:4f:28:97:20:9a:97:03:ca:01:aa:03:30:
64:ef:4f:e7:01:9f:e2:60:f5:80:b0:7b:04:a6:cb:
c8:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:26:99:C5:3C:47:48:6A:50:78:74:69:19:F3:B9:B2:08:BD:08:B6
X509v3 Authority Key Identifier:
keyid:B0:B5:A8:0A:71:06:E0:A4:B8:54:5C:81:50:BB:72:C6:99:FC:C9:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sLWoCnEG4KS4VFyBULtyxpn8yaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/2SaZxTxHSGpQeHRpGfO5sgi9CLY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/sLWoCnEG4KS4VFyBULtyxpn8yaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.177.102.0/24
185.93.68.0/24
185.93.70.0/24
193.164.4.0/24
193.164.6.0/23
IPv6:
2a05:f7c0::/29
Signature Algorithm: sha256WithRSAEncryption
72:00:e1:5d:40:e5:ff:f9:2a:3a:2a:13:64:08:80:48:b8:66:
7c:54:7b:32:04:6a:87:41:b1:4c:09:a7:4a:ec:ca:66:36:ea:
be:6b:19:c2:e6:27:3a:ad:ef:1f:b1:4a:cb:af:8a:6c:e0:e9:
02:d0:cd:4c:ca:1b:aa:bc:36:a2:ae:37:46:94:7e:15:36:ac:
9c:f2:60:3b:2b:05:2a:34:a9:47:57:22:80:d9:cb:95:19:b3:
bd:e3:71:1c:1b:4f:a0:ca:50:a3:0e:db:a2:9d:db:9e:a3:06:
76:be:36:eb:e7:62:58:d7:c0:c6:05:ba:47:c2:d4:a0:72:09:
f0:72:48:66:09:c9:aa:22:cd:20:2d:a7:1f:9b:b2:b7:bc:d9:
0f:94:9f:c0:8c:7d:85:38:e2:38:37:34:aa:a3:a8:ad:4e:3f:
11:28:3a:85:9d:96:3d:e8:eb:d8:a1:82:21:5e:4d:06:9f:9e:
d0:14:6e:e1:0e:e3:fa:cc:53:cb:ed:32:05:fc:d9:e5:bb:bd:
10:ef:d2:69:eb:2f:8f:09:b8:dc:a6:8c:a6:70:8b:51:ce:a2:
a4:76:7b:cf:15:f7:cd:f4:e7:73:f5:8a:7e:71:f9:fb:45:be:
f1:ee:eb:72:bb:69:41:22:82:7c:40:b5:5a:65:4d:ab:1d:ad:
c5:b2:bc:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:18:20 2024 by rpki-client on console-ams.rpki-client.org