Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/ccd96e-133e-45b7-88b7-e2ae055eced1/1/DBG0FcBdEcKPSQWg_dv-JwzUdWc.roa
File: DBG0FcBdEcKPSQWg_dv-JwzUdWc.roa (raw, json)
Hash identifier: GYpYb4MuiIolWyIZ1AL8Hg8axHOja2zbVnVWR09+cEI=
Subject key identifier: 0C:11:B4:15:C0:5D:11:C2:8F:49:05:A0:FD:DB:FE:27:0C:D4:75:67
Certificate issuer: /CN=2df8779a3c82f00fc14435ee7d8d0b8d6dd8204e
Certificate serial: 018CC26D456490E99762F2AF64BEE0E40A0B
Authority key identifier: 2D:F8:77:9A:3C:82:F0:0F:C1:44:35:EE:7D:8D:0B:8D:6D:D8:20:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lfh3mjyC8A_BRDXufY0LjW3YIE4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/ccd96e-133e-45b7-88b7-e2ae055eced1/1/DBG0FcBdEcKPSQWg_dv-JwzUdWc.roa
Signing time: Mon 01 Jan 2024 00:29:50 +0000
ROA not before: Mon 01 Jan 2024 00:29:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48095
IP address blocks: 188.65.16.0/22 maxlen: 22
87.101.80.0/22 maxlen: 22
77.247.112.0/23 maxlen: 23
77.247.114.0/23 maxlen: 23
193.9.152.0/22 maxlen: 22
185.158.70.0/23 maxlen: 23
185.158.68.0/23 maxlen: 23
31.40.226.0/23 maxlen: 23
31.40.224.0/23 maxlen: 23
185.222.132.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/ccd96e-133e-45b7-88b7-e2ae055eced1/1/Lfh3mjyC8A_BRDXufY0LjW3YIE4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/ccd96e-133e-45b7-88b7-e2ae055eced1/1/Lfh3mjyC8A_BRDXufY0LjW3YIE4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lfh3mjyC8A_BRDXufY0LjW3YIE4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 07:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:45:64:90:e9:97:62:f2:af:64:be:e0:e4:0a:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2df8779a3c82f00fc14435ee7d8d0b8d6dd8204e
Validity
Not Before: Jan 1 00:29:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0c11b415c05d11c28f4905a0fddbfe270cd47567
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:cf:fb:17:b5:dd:26:b0:8f:52:3d:a6:76:ef:
88:b0:e5:54:aa:2a:02:54:4c:fb:5b:0b:95:62:d6:
9b:93:c9:16:46:b1:2f:5d:d0:53:9f:f8:4a:77:4a:
e6:1e:76:a3:9b:a0:5f:96:75:aa:10:fd:76:77:01:
e1:4d:71:12:e9:a3:41:71:6c:28:c4:9c:fa:fc:74:
c3:57:19:1f:72:4f:08:81:ed:b6:81:db:0e:82:43:
12:56:cf:62:5f:c7:80:9f:5d:36:b8:b3:31:8a:41:
65:27:86:64:70:dd:1c:82:5b:bd:e1:7f:d6:00:d1:
86:aa:dd:83:c8:bd:6a:a8:68:9a:9c:15:cb:6c:1b:
5a:2e:9f:f9:ee:4a:a4:1c:cc:71:a6:9f:0e:50:4c:
bf:e1:95:98:8b:fe:24:32:1a:82:3d:8c:7e:0c:6d:
fd:87:7c:5e:89:a2:fe:fe:6a:14:e6:a2:6b:42:57:
c0:63:da:dc:56:8f:62:9c:36:63:60:f6:02:66:47:
93:60:4d:49:c7:61:42:01:c2:f5:ff:48:a9:0f:0a:
47:f3:c7:a6:e4:5c:2b:ca:b5:d2:0d:70:65:8c:5b:
7c:d9:d2:85:8d:6a:2b:bc:da:92:e4:78:65:ea:99:
c8:de:43:16:15:e0:5e:ff:bc:42:0e:91:60:f0:a0:
1c:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:11:B4:15:C0:5D:11:C2:8F:49:05:A0:FD:DB:FE:27:0C:D4:75:67
X509v3 Authority Key Identifier:
keyid:2D:F8:77:9A:3C:82:F0:0F:C1:44:35:EE:7D:8D:0B:8D:6D:D8:20:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lfh3mjyC8A_BRDXufY0LjW3YIE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/ccd96e-133e-45b7-88b7-e2ae055eced1/1/DBG0FcBdEcKPSQWg_dv-JwzUdWc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/ccd96e-133e-45b7-88b7-e2ae055eced1/1/Lfh3mjyC8A_BRDXufY0LjW3YIE4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.40.224.0/22
77.247.112.0/22
87.101.80.0/22
185.158.68.0/22
185.222.132.0/22
188.65.16.0/22
193.9.152.0/22
Signature Algorithm: sha256WithRSAEncryption
df:a1:06:61:84:a1:f5:d3:a2:76:bd:2e:8d:94:0b:94:eb:4f:
6c:68:5e:63:7d:11:7d:29:dc:12:60:be:0e:d3:f5:d9:4b:12:
05:6c:81:93:9d:67:ae:55:f2:7d:f5:a0:e7:cd:ba:a3:58:b6:
b3:e4:db:8d:3c:fc:2d:f5:08:4a:4b:bc:a1:cc:bd:16:69:50:
5e:98:64:75:2c:a1:18:af:24:cc:8f:b3:53:44:54:dd:2f:24:
17:5e:94:d7:5f:a0:e1:44:b5:9c:35:28:47:f2:36:6c:60:69:
b8:02:b5:c1:47:0b:18:9d:ad:1d:1b:df:8c:3d:34:31:b6:4f:
e6:a6:23:a6:43:34:90:68:f7:16:8b:62:bc:ef:38:27:89:d8:
68:0f:fa:4b:35:d1:d9:ab:23:51:b0:a5:3e:aa:ee:43:49:9d:
9f:2a:5c:f0:6d:4b:ed:28:07:e4:0c:a1:07:8e:9e:0d:55:ca:
10:f9:3c:3d:cc:7f:a2:bd:22:01:55:48:e9:f0:45:0f:ce:02:
33:e8:0e:43:2b:d7:58:16:64:d3:11:07:c3:43:b0:4c:97:d9:
00:d5:fa:bc:36:d0:ea:d1:1a:26:af:b3:12:c1:d4:dd:e0:ca:
5f:08:71:41:1c:e8:77:63:1c:0d:b7:bb:5a:97:0c:21:63:6f:
9b:5f:77:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:42:34 2024 by rpki-client on console-ams.rpki-client.org