Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/b130b5-5fcc-4196-9075-5eff73e89fbb/1/emIJn7-Ygwm-_0Kox4XTsgqgOdM.roa
File: emIJn7-Ygwm-_0Kox4XTsgqgOdM.roa (raw, json)
Hash identifier: aIkSVD+4gpG9yXfbKv0eE9RW7uW2wG3Y11bG1wxK5+I=
Subject key identifier: 7A:62:09:9F:BF:98:83:09:BE:FF:42:A8:C7:85:D3:B2:0A:A0:39:D3
Certificate issuer: /CN=c8e50ca17134837a50d3063d43d443385abe6f49
Certificate serial: 018CC56E38695F1A9E018D945051988E915F
Authority key identifier: C8:E5:0C:A1:71:34:83:7A:50:D3:06:3D:43:D4:43:38:5A:BE:6F:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yOUMoXE0g3pQ0wY9Q9RDOFq-b0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/b130b5-5fcc-4196-9075-5eff73e89fbb/1/emIJn7-Ygwm-_0Kox4XTsgqgOdM.roa
Signing time: Mon 01 Jan 2024 14:29:43 +0000
ROA not before: Mon 01 Jan 2024 14:29:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 27630
IP address blocks: 193.28.106.0/24 maxlen: 24
193.28.57.0/24 maxlen: 24
193.28.60.0/24 maxlen: 24
193.28.93.0/24 maxlen: 24
2a10:3680::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/b130b5-5fcc-4196-9075-5eff73e89fbb/1/yOUMoXE0g3pQ0wY9Q9RDOFq-b0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/b130b5-5fcc-4196-9075-5eff73e89fbb/1/yOUMoXE0g3pQ0wY9Q9RDOFq-b0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/yOUMoXE0g3pQ0wY9Q9RDOFq-b0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 May 2024 05:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:38:69:5f:1a:9e:01:8d:94:50:51:98:8e:91:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8e50ca17134837a50d3063d43d443385abe6f49
Validity
Not Before: Jan 1 14:29:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7a62099fbf988309beff42a8c785d3b20aa039d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:0d:e8:dc:10:bb:8a:b3:90:df:b8:22:42:9e:
12:16:07:12:2e:78:3c:e7:2e:e6:1b:3a:54:e2:af:
ac:46:29:42:05:28:8e:e7:8c:39:d5:a2:87:83:72:
b7:37:76:33:33:83:de:92:50:09:4b:31:78:79:d3:
45:0a:d8:5a:d8:e2:de:95:98:34:09:26:dc:ce:5f:
03:55:92:49:5a:94:61:1d:5a:4b:0d:ad:4f:54:f1:
68:f4:e4:51:15:c5:3c:68:44:ee:db:1b:ed:be:a0:
27:f5:89:6f:fb:c8:8d:17:ab:e7:a5:e1:5e:17:67:
57:76:ca:c5:b3:22:cf:67:f9:2d:9e:5f:a2:a0:7d:
9e:05:15:6a:b0:be:45:83:b8:2e:70:b3:85:f7:18:
f0:4e:38:09:a1:5c:7c:46:0a:ef:10:3f:a1:66:7f:
3b:17:8b:65:94:82:6d:cf:74:22:d7:00:27:aa:16:
72:bb:81:28:38:50:9c:b3:a1:ca:d7:66:7c:ea:ab:
d1:ed:e3:82:04:01:09:fa:20:f2:79:0c:1d:11:03:
ea:a0:c9:3b:d5:f7:e7:88:fb:85:56:f0:00:3a:55:
b7:0f:c4:ee:70:97:b6:7c:c0:a5:02:fd:26:c6:e4:
e5:6d:ba:7a:c9:c7:fd:59:58:96:1a:46:75:9a:d7:
ab:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:62:09:9F:BF:98:83:09:BE:FF:42:A8:C7:85:D3:B2:0A:A0:39:D3
X509v3 Authority Key Identifier:
keyid:C8:E5:0C:A1:71:34:83:7A:50:D3:06:3D:43:D4:43:38:5A:BE:6F:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yOUMoXE0g3pQ0wY9Q9RDOFq-b0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/b130b5-5fcc-4196-9075-5eff73e89fbb/1/emIJn7-Ygwm-_0Kox4XTsgqgOdM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/b130b5-5fcc-4196-9075-5eff73e89fbb/1/yOUMoXE0g3pQ0wY9Q9RDOFq-b0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.28.57.0/24
193.28.60.0/24
193.28.93.0/24
193.28.106.0/24
IPv6:
2a10:3680::/29
Signature Algorithm: sha256WithRSAEncryption
95:b9:ce:75:10:62:3a:92:5a:d2:bb:76:1d:08:29:fa:25:5f:
7b:51:70:3c:64:d2:ce:37:0e:60:ba:9d:3e:1c:f1:37:80:a0:
47:ae:17:21:b6:21:e4:9e:4b:2a:47:fe:5c:b0:fc:7b:d4:b8:
ca:0e:d5:dc:ed:19:a6:8d:fb:a9:81:9f:4b:2c:2b:74:e7:58:
72:8e:e9:a5:5e:c3:a7:09:24:e5:29:f0:49:8b:83:12:1a:88:
4a:82:cd:f5:21:d0:95:4b:22:02:8c:46:e5:d6:18:3e:5d:6d:
a7:47:97:d4:e3:09:97:59:7a:ed:1b:c4:2c:82:5e:13:f0:5a:
c1:70:13:de:5b:0d:bf:86:be:9a:60:42:d1:c3:9f:a6:ab:6e:
5e:cc:20:a5:b7:70:72:3a:a2:1b:e7:11:35:b3:12:61:7c:a0:
9b:86:fb:38:4b:ae:b9:1f:63:9e:1a:46:16:6c:8a:c1:4c:2c:
88:3e:5c:cf:8e:6c:1f:58:2e:2f:dd:11:9d:29:6e:79:ad:bf:
aa:6b:b9:b7:85:fa:37:00:8b:ab:f0:3a:41:89:e5:76:73:ee:
1d:bc:24:36:b4:e4:45:b4:b2:ca:7a:1d:8b:c9:fc:f8:f3:c0:
d8:f8:11:60:6c:bb:61:c3:3e:4b:88:4d:7d:7c:2f:3e:aa:e3:
33:c1:bf:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 25 09:11:31 2024 by rpki-client on console-fra.rpki-client.org