Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/2k20UwlSo2-o4WrPTAYrapa0yD4.roa
File: 2k20UwlSo2-o4WrPTAYrapa0yD4.roa (raw, json)
Hash identifier: xFPfywNL4ivKD2moGEzi3TawhxrB/M2Gecg1lFaS3jA=
Subject key identifier: DA:4D:B4:53:09:52:A3:6F:A8:E1:6A:CF:4C:06:2B:6A:96:B4:C8:3E
Certificate issuer: /CN=84f824d32df1a5113d82101345d785a38addbde5
Certificate serial: 0190CA2582AB17C0DA3F73722F75A4C4DDD2
Authority key identifier: 84:F8:24:D3:2D:F1:A5:11:3D:82:10:13:45:D7:85:A3:8A:DD:BD:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hPgk0y3xpRE9ghATRdeFo4rdveU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/2k20UwlSo2-o4WrPTAYrapa0yD4.roa
Signing time: Fri 19 Jul 2024 08:39:34 +0000
ROA not before: Fri 19 Jul 2024 08:39:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209854
IP address blocks: 46.102.177.0/24 maxlen: 24
46.102.178.0/24 maxlen: 24
77.81.90.0/24 maxlen: 24
77.81.91.0/24 maxlen: 24
86.104.2.0/24 maxlen: 24
86.104.213.0/24 maxlen: 24
86.106.116.0/24 maxlen: 24
89.37.93.0/24 maxlen: 24
89.37.94.0/24 maxlen: 24
89.41.27.0/24 maxlen: 24
89.42.154.0/24 maxlen: 24
93.119.125.0/24 maxlen: 24
176.223.160.0/24 maxlen: 24
188.208.48.0/24 maxlen: 24
188.208.220.0/24 maxlen: 24
188.208.221.0/24 maxlen: 24
188.208.223.0/24 maxlen: 24
188.209.124.0/24 maxlen: 24
188.209.125.0/24 maxlen: 24
193.30.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hPgk0y3xpRE9ghATRdeFo4rdveU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:ca:25:82:ab:17:c0:da:3f:73:72:2f:75:a4:c4:dd:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84f824d32df1a5113d82101345d785a38addbde5
Validity
Not Before: Jul 19 08:39:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=da4db4530952a36fa8e16acf4c062b6a96b4c83e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:6d:b0:8c:2b:5f:10:54:cc:29:dd:9b:1c:51:
60:d8:36:ec:9e:7a:fe:da:24:84:02:12:d0:ee:b9:
77:a3:cf:3c:af:82:77:46:60:ab:71:bb:03:25:30:
28:17:55:2d:e5:d3:c3:24:ec:f2:fc:ef:a1:5c:be:
a0:79:c6:d6:ed:20:17:81:ec:54:af:18:a0:df:a7:
74:cc:50:24:4f:2d:31:46:30:59:0a:07:91:68:88:
59:43:a3:82:b0:e7:f5:02:a6:40:98:91:77:c7:7e:
7c:9c:23:1a:fa:97:eb:86:79:d4:43:4d:6d:49:5c:
6c:d1:46:19:36:15:e3:78:65:d5:c7:a0:fc:99:24:
6f:2c:b4:d1:42:a3:c1:0f:05:30:e8:cb:0c:64:5b:
94:0c:4c:cc:64:0b:31:3b:99:3b:65:47:f9:37:57:
0c:fa:c4:83:bd:21:d3:f4:93:d4:f0:f5:bb:26:b5:
36:44:9e:09:d6:29:00:94:06:5f:64:e8:73:a5:e5:
52:b7:91:bd:49:17:42:c5:60:d5:a0:ab:b4:cc:ce:
b2:7c:c2:8b:52:2b:5f:73:4a:99:88:62:ff:c7:43:
9a:15:53:36:27:4e:a7:45:e8:b1:d5:5b:27:b3:c4:
30:81:fe:1b:f0:02:a4:70:8d:9a:a6:c1:c1:5f:c6:
07:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:4D:B4:53:09:52:A3:6F:A8:E1:6A:CF:4C:06:2B:6A:96:B4:C8:3E
X509v3 Authority Key Identifier:
keyid:84:F8:24:D3:2D:F1:A5:11:3D:82:10:13:45:D7:85:A3:8A:DD:BD:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hPgk0y3xpRE9ghATRdeFo4rdveU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/2k20UwlSo2-o4WrPTAYrapa0yD4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.102.177.0-46.102.178.255
77.81.90.0/23
86.104.2.0/24
86.104.213.0/24
86.106.116.0/24
89.37.93.0-89.37.94.255
89.41.27.0/24
89.42.154.0/24
93.119.125.0/24
176.223.160.0/24
188.208.48.0/24
188.208.220.0/23
188.208.223.0/24
188.209.124.0/23
193.30.255.0/24
Signature Algorithm: sha256WithRSAEncryption
98:60:c6:a3:cd:af:9e:60:8c:ba:e7:fa:0f:f8:70:34:99:9a:
cf:3c:6d:53:4a:ad:2d:5d:48:3c:f0:78:82:7d:e8:51:90:94:
51:27:68:07:60:a3:13:ee:12:e9:ab:40:13:8b:86:60:33:08:
84:05:d0:77:63:0e:c1:14:a5:cb:2f:ed:59:d7:63:4f:d8:f8:
15:ae:e1:c1:dd:e8:11:5f:06:1a:ea:c7:ed:0c:cd:dd:67:b1:
ce:82:65:4c:89:33:17:8d:51:8e:11:44:71:59:c8:15:14:6d:
8b:2a:1c:3d:86:1a:77:ad:bc:11:77:65:2a:1b:10:4e:0c:dd:
71:b2:7f:97:de:4c:dd:b8:14:92:f4:a8:84:6e:de:96:d4:ea:
68:e3:0c:7c:97:6a:5c:52:5d:79:8f:90:4d:43:a2:c4:c8:6a:
4d:bd:fc:fb:7c:58:f5:11:59:68:90:53:2a:8b:06:ea:87:bf:
f6:e9:a6:f4:15:8c:98:57:6d:34:54:e2:24:e8:ab:29:f4:a6:
50:55:65:da:7f:53:a7:2c:a8:72:70:48:e1:de:03:eb:1c:a3:
90:a5:7a:36:6f:17:8d:a4:d3:cc:ce:42:ee:96:9d:fd:da:25:
66:c0:9e:ba:80:4d:44:da:c9:a8:9e:de:a1:1a:e0:5b:fa:7b:
f8:cc:7c:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:05:52 2024 by rpki-client on console-fra.rpki-client.org