Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/KII2mAJmZYnNrCgFWPFiP7VTzd4.roa
File: KII2mAJmZYnNrCgFWPFiP7VTzd4.roa (raw, json)
Hash identifier: C7JhqxNZBECP0+vZklB6PsBp3bsittbFhvmP8+Ejg4M=
Subject key identifier: 28:82:36:98:02:66:65:89:CD:AC:28:05:58:F1:62:3F:B5:53:CD:DE
Certificate issuer: /CN=ebec9030c70a3d4192d59c28dcc8d547694340b3
Certificate serial: 018CC49249D9D7102C8FE16D791C824846E8
Authority key identifier: EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/KII2mAJmZYnNrCgFWPFiP7VTzd4.roa
Signing time: Mon 01 Jan 2024 10:29:30 +0000
ROA not before: Mon 01 Jan 2024 10:29:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8808
IP address blocks: 80.95.21.0/24 maxlen: 24
93.175.244.0/24 maxlen: 24
93.175.245.0/24 maxlen: 24
93.152.234.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.mft
rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 16:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:92:49:d9:d7:10:2c:8f:e1:6d:79:1c:82:48:46:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebec9030c70a3d4192d59c28dcc8d547694340b3
Validity
Not Before: Jan 1 10:29:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2882369802666589cdac280558f1623fb553cdde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f8:70:2a:9c:bf:66:e1:a9:b7:23:25:84:d2:
23:c8:da:f4:d9:d5:ba:5a:d6:7a:ed:cd:e6:cb:fd:
19:17:75:33:64:01:2d:22:32:95:76:e3:19:e7:55:
6a:d0:8c:ef:a8:c2:0f:9f:82:79:e6:9e:bf:93:85:
6f:1f:f8:67:93:03:f4:12:2c:4f:cc:ae:39:7a:b5:
17:78:b6:5e:39:78:d7:d9:49:43:0d:2a:11:cf:bf:
3a:38:d0:c5:69:c3:8a:69:70:f1:71:36:71:4b:bd:
86:e7:fe:5b:cf:ef:f8:62:87:83:fc:c8:03:bd:ab:
00:f1:34:ce:22:46:f6:d2:a2:2f:4f:1e:c8:1f:49:
ae:81:cf:5c:af:82:93:13:3f:c9:d2:55:43:b9:6d:
72:60:24:cf:6f:25:79:56:1c:d2:7d:06:9a:77:fb:
31:b6:21:c1:8d:05:a4:01:cc:75:b5:20:7b:4b:d4:
c4:d7:36:1d:af:1d:b1:89:8a:b3:17:8c:cc:a1:d7:
16:a0:97:fc:49:83:ab:99:a3:22:40:b6:4d:12:76:
ae:ff:59:89:72:26:cf:87:b6:2e:51:e1:f8:cc:ba:
c0:9b:7f:b4:6f:a9:43:3d:3e:c2:b0:5e:1d:2d:ce:
b7:bc:3a:1c:14:a6:f9:7a:20:c2:c9:03:f1:cd:91:
d6:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:82:36:98:02:66:65:89:CD:AC:28:05:58:F1:62:3F:B5:53:CD:DE
X509v3 Authority Key Identifier:
keyid:EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/KII2mAJmZYnNrCgFWPFiP7VTzd4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.95.21.0/24
93.152.234.0/23
93.175.244.0/23
Signature Algorithm: sha256WithRSAEncryption
6f:0c:c7:46:a6:66:bb:87:1d:4b:1a:e4:f4:97:c7:be:cc:3e:
9a:a7:df:b8:a7:3d:1a:c7:db:21:7e:6e:a6:45:2a:5c:dd:5c:
1f:9f:3f:db:08:96:f4:7f:ce:40:7a:ed:38:e9:c2:2c:72:2e:
b4:ed:ba:3e:b8:ca:1b:f5:7e:3f:94:d9:b9:e1:59:1c:29:16:
23:7f:3a:86:c5:76:6a:f5:25:fb:fe:8a:be:ad:90:09:6c:b0:
76:fe:dd:1e:45:b1:5b:07:27:a4:4f:75:92:16:a7:a2:f9:9f:
b9:3a:01:9f:9c:10:a3:e9:83:f7:9a:65:4d:4c:19:7b:f9:e5:
e3:f8:6c:24:ce:c1:2f:c9:cb:a3:2a:d2:b8:9b:59:6f:0e:09:
38:07:0f:6d:16:26:9a:1b:af:c4:d6:53:56:30:b7:db:24:03:
15:98:d0:bc:8e:e6:4d:10:d0:26:62:9d:fb:f0:0e:e6:c7:aa:
01:55:64:f0:15:c1:fe:d8:b7:65:d6:c4:03:ab:a2:ad:6b:1d:
53:f9:51:62:da:36:44:97:92:e8:80:db:cd:65:1c:4d:2a:dc:
4d:f5:0f:05:6d:3d:10:3f:cb:91:73:01:c1:49:32:1b:13:f3:
c5:34:6d:32:a6:89:13:f0:85:27:51:5b:29:3d:8d:20:43:b1:
75:82:f0:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 19:20:31 2024 by rpki-client on console-fra.rpki-client.org