Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/mo2U1pC5MQVS-1ZIErEx49Y3BQw.roa
File: mo2U1pC5MQVS-1ZIErEx49Y3BQw.roa (raw, json)
Hash identifier: 86qeGsYIBORDOpcpaapvgbKp6TXABlL18HyvUOyZD9c=
Subject key identifier: 9A:8D:94:D6:90:B9:31:05:52:FB:56:48:12:B1:31:E3:D6:37:05:0C
Certificate issuer: /CN=aedaeea9117a1d5ccc320222955a09faa0798fd9
Certificate serial: 018CC64B2149B34093CD195819D9FD21E2FA
Authority key identifier: AE:DA:EE:A9:11:7A:1D:5C:CC:32:02:22:95:5A:09:FA:A0:79:8F:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rtruqRF6HVzMMgIilVoJ-qB5j9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/mo2U1pC5MQVS-1ZIErEx49Y3BQw.roa
Signing time: Mon 01 Jan 2024 18:31:01 +0000
ROA not before: Mon 01 Jan 2024 18:31:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 30282
IP address blocks: 77.242.204.0/22 maxlen: 22
31.186.224.0/24 maxlen: 24
31.186.230.0/24 maxlen: 24
31.186.240.0/23 maxlen: 23
31.186.246.0/23 maxlen: 23
31.186.242.0/23 maxlen: 23
31.186.252.0/22 maxlen: 22
95.172.78.0/23 maxlen: 23
95.172.90.0/23 maxlen: 23
95.172.88.0/23 maxlen: 23
2a02:b50:4000::/34 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/rtruqRF6HVzMMgIilVoJ-qB5j9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/rtruqRF6HVzMMgIilVoJ-qB5j9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/rtruqRF6HVzMMgIilVoJ-qB5j9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 01:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:21:49:b3:40:93:cd:19:58:19:d9:fd:21:e2:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aedaeea9117a1d5ccc320222955a09faa0798fd9
Validity
Not Before: Jan 1 18:31:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9a8d94d690b9310552fb564812b131e3d637050c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:81:f4:9a:07:88:2d:f1:64:f8:30:c9:75:9f:
5f:bc:2a:fd:9a:90:4e:61:49:8f:e4:bb:76:28:09:
ec:c7:38:61:10:af:16:c7:24:0f:22:57:2c:19:6e:
66:3e:59:86:8d:62:c9:0f:71:c5:3e:84:4d:ad:33:
b7:7e:b3:33:dd:65:f0:9b:4d:e6:25:d6:ea:c7:d5:
77:7a:f6:dc:c3:95:f6:4c:e7:5b:a7:99:58:7c:0b:
45:52:f8:56:ac:7b:0a:1b:67:c3:58:21:8d:e4:8b:
36:04:d9:24:b0:f3:b8:dc:d1:6f:5e:cd:fe:1a:73:
98:0b:17:2f:42:46:d8:de:bd:ee:39:a5:c1:97:1b:
3d:0c:08:7b:a3:57:49:d0:ba:0a:24:86:05:24:5f:
d6:19:67:0a:78:3b:c8:f3:8b:53:f3:1e:37:77:45:
f8:1f:e2:47:93:1a:76:c4:1b:f1:94:16:b0:2b:60:
75:49:3f:f2:9d:81:52:d7:1d:21:6a:e8:f2:d4:0c:
04:f1:c0:e9:7a:99:aa:14:a8:59:c0:b6:9a:f5:7f:
63:2d:77:4b:00:da:3b:b9:70:99:c7:1d:42:d1:13:
6d:06:0b:21:95:b9:40:a8:57:9b:e0:93:34:12:6c:
a4:0b:62:46:64:d6:98:d4:6d:2c:f8:0a:ab:47:8a:
e4:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:8D:94:D6:90:B9:31:05:52:FB:56:48:12:B1:31:E3:D6:37:05:0C
X509v3 Authority Key Identifier:
keyid:AE:DA:EE:A9:11:7A:1D:5C:CC:32:02:22:95:5A:09:FA:A0:79:8F:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rtruqRF6HVzMMgIilVoJ-qB5j9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/mo2U1pC5MQVS-1ZIErEx49Y3BQw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/rtruqRF6HVzMMgIilVoJ-qB5j9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.186.224.0/24
31.186.230.0/24
31.186.240.0/22
31.186.246.0/23
31.186.252.0/22
77.242.204.0/22
95.172.78.0/23
95.172.88.0/22
IPv6:
2a02:b50:4000::/34
Signature Algorithm: sha256WithRSAEncryption
42:f4:51:7d:ea:ac:81:4f:ba:ea:31:f1:2d:18:e1:4a:2f:5a:
01:6c:25:fe:c1:73:e7:1a:6b:c1:00:9e:91:6e:d6:04:dd:64:
f5:80:54:53:6f:43:2e:b2:ee:1e:74:d5:a3:66:08:05:b2:20:
af:2e:4a:34:98:43:f1:85:93:69:89:eb:17:8a:70:d4:27:dc:
be:ed:e7:2c:b2:74:af:b6:b7:91:0d:7d:b2:f3:24:40:92:4e:
03:59:e5:06:f2:84:45:55:ef:1e:5e:22:85:2c:c9:77:a9:16:
fc:fa:b9:97:94:55:c8:4a:ed:bd:8f:21:f0:5e:f4:2e:72:7d:
57:bd:7c:52:82:df:b1:fd:eb:7a:d8:04:4e:99:e1:08:76:f0:
be:ea:bb:ca:c5:d8:96:13:7b:d3:be:45:f6:34:fa:de:d9:42:
fd:75:b7:48:b4:a7:aa:0f:51:13:f8:69:39:87:3a:eb:bf:38:
5a:74:7d:11:05:0f:61:a9:16:60:72:f8:a0:01:6a:7f:10:02:
c9:02:8d:80:d1:de:ed:d0:0d:49:f9:a4:13:22:fc:5f:b7:2a:
4d:fa:3b:93:c8:6c:a2:39:ae:f0:59:8f:c2:ea:36:8b:a2:82:
35:41:67:01:b0:80:9d:d9:2e:f9:ab:42:fa:c1:fa:11:88:5e:
42:12:b2:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 10:06:29 2024 by rpki-client on console-fra.rpki-client.org