Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/2slcKZ-6HwShr1lM-YjiIe0DxNg.roa
File: 2slcKZ-6HwShr1lM-YjiIe0DxNg.roa (raw, json)
Hash identifier: Na9MMw69XXVqPz2PjaaouQbIYbPcRl3bLA1s2qPdLYk=
Subject key identifier: DA:C9:5C:29:9F:BA:1F:04:A1:AF:59:4C:F9:88:E2:21:ED:03:C4:D8
Certificate issuer: /CN=b0b5a80a7106e0a4b8545c8150bb72c699fcc9a0
Certificate serial: 018CC8DF20EA51134CC22C9EAA77E5F94B06
Authority key identifier: B0:B5:A8:0A:71:06:E0:A4:B8:54:5C:81:50:BB:72:C6:99:FC:C9:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sLWoCnEG4KS4VFyBULtyxpn8yaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/2slcKZ-6HwShr1lM-YjiIe0DxNg.roa
Signing time: Tue 02 Jan 2024 06:31:55 +0000
ROA not before: Tue 02 Jan 2024 06:31:55 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210538
IP address blocks: 193.164.4.0/24 maxlen: 24
193.164.7.0/24 maxlen: 24
193.164.6.0/24 maxlen: 24
93.177.102.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/sLWoCnEG4KS4VFyBULtyxpn8yaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/sLWoCnEG4KS4VFyBULtyxpn8yaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/sLWoCnEG4KS4VFyBULtyxpn8yaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 May 2024 22:35:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:20:ea:51:13:4c:c2:2c:9e:aa:77:e5:f9:4b:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0b5a80a7106e0a4b8545c8150bb72c699fcc9a0
Validity
Not Before: Jan 2 06:31:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dac95c299fba1f04a1af594cf988e221ed03c4d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:db:f9:8c:2e:ce:8a:d1:10:74:28:5a:07:6f:
5e:b4:d6:bf:fd:55:98:49:90:20:a0:9f:a8:55:9d:
30:c4:d6:61:eb:2c:6b:fe:9f:fb:50:8c:5a:1b:42:
ef:a0:b7:37:57:91:bb:85:7e:7a:81:e9:81:5b:2c:
a9:15:3a:90:38:5a:e7:03:af:c3:c2:b9:48:ec:8b:
20:98:47:ce:8b:1f:92:68:14:33:20:e2:79:82:03:
71:35:df:5d:b1:13:ec:6f:1c:bb:87:ae:db:65:14:
74:c8:8b:5a:99:b8:f9:24:97:a7:07:4d:f7:c6:c9:
e0:ec:a9:36:50:bb:16:e8:22:54:ff:98:37:a4:d4:
9e:f4:67:e4:2b:1c:c8:85:44:2f:a6:43:1a:74:d5:
14:ae:ca:ca:cf:4d:17:f6:7c:c1:c1:e0:dd:14:fe:
f2:82:da:bd:a7:a6:38:39:bd:b7:3c:75:29:f7:0b:
b5:ca:05:c7:88:b3:b6:4e:f5:d5:6f:e4:7c:2c:9d:
83:da:10:47:ff:65:c3:a2:85:40:e4:04:23:e5:2e:
31:37:c2:d3:b4:c2:1b:e0:0c:45:f9:37:d3:f3:53:
5e:46:f2:34:69:4a:0a:0e:38:a4:35:c6:07:31:a6:
7f:a2:ef:e2:f0:6f:72:77:47:0b:ad:ec:6e:35:e3:
d1:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:C9:5C:29:9F:BA:1F:04:A1:AF:59:4C:F9:88:E2:21:ED:03:C4:D8
X509v3 Authority Key Identifier:
keyid:B0:B5:A8:0A:71:06:E0:A4:B8:54:5C:81:50:BB:72:C6:99:FC:C9:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sLWoCnEG4KS4VFyBULtyxpn8yaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/2slcKZ-6HwShr1lM-YjiIe0DxNg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/sLWoCnEG4KS4VFyBULtyxpn8yaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.177.102.0/24
193.164.4.0/24
193.164.6.0/23
Signature Algorithm: sha256WithRSAEncryption
6e:0a:63:0e:a6:ef:a1:64:0e:39:f7:89:9b:6d:fa:46:e6:9f:
13:5f:7f:cc:38:46:41:03:0f:d0:56:83:58:06:49:af:b2:01:
77:11:76:7c:61:a1:f8:d5:c7:7b:20:cd:d2:19:3e:c4:71:1e:
65:83:d5:91:e6:46:6b:b8:0b:ff:70:3a:17:d5:6c:f6:56:b9:
42:2e:5b:56:2d:8d:61:0d:32:2f:07:28:49:12:d8:ce:dd:f4:
28:04:75:4a:fc:e8:78:20:cc:79:1d:77:89:88:11:c1:b5:5a:
fe:a8:98:11:cb:a7:17:3b:b1:c4:d6:3b:ee:0f:ea:d5:10:c4:
b2:3c:c9:f7:57:23:6a:b3:15:18:f5:5a:e2:d1:8c:01:ec:d3:
5d:9a:29:29:a0:66:67:ae:6d:a6:6d:f3:22:e4:a4:3f:f5:53:
e0:f4:d3:d8:af:27:4f:60:26:d3:ff:b8:21:f0:b4:5e:c3:1d:
cc:a1:f5:bc:b1:4a:90:c6:e6:e8:70:c6:59:00:02:d5:57:89:
38:50:41:84:35:73:4c:11:f3:b1:bc:fd:14:ad:72:3e:96:79:
b8:c8:44:e1:0b:c6:69:fd:bc:d4:e6:42:97:30:ce:3e:a1:93:
75:03:19:d0:c2:02:ef:7c:ea:64:7c:b4:6d:96:76:d0:7a:57:
40:58:1d:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 01:53:46 2024 by rpki-client on console-fra.rpki-client.org