Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/1-oU2cRv9bmiFAfvoACmSWFFnNkQ.roa
File: 1-oU2cRv9bmiFAfvoACmSWFFnNkQ.roa (raw, json)
Hash identifier: /mef5mRy3dsegbx8AJ1MgannYfQmOt1C9G7hggMerTc=
Subject key identifier: FA:85:36:71:1B:FD:6E:68:85:01:FB:E8:00:29:92:58:51:67:36:44
Certificate issuer: /CN=04a2ae2cd094333018c41daafb474c6cfa80d07d
Certificate serial: 018CCA2A5C8436C3C2D666A903E08341A779
Authority key identifier: 04:A2:AE:2C:D0:94:33:30:18:C4:1D:AA:FB:47:4C:6C:FA:80:D0:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BKKuLNCUMzAYxB2q-0dMbPqA0H0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/1-oU2cRv9bmiFAfvoACmSWFFnNkQ.roa
Signing time: Tue 02 Jan 2024 12:33:42 +0000
ROA not before: Tue 02 Jan 2024 12:33:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43451
IP address blocks: 31.24.176.0/21 maxlen: 22
81.92.248.0/21 maxlen: 22
93.174.176.0/21 maxlen: 22
188.121.160.0/19 maxlen: 20
78.41.168.0/21 maxlen: 22
185.213.144.0/22 maxlen: 23
185.22.212.0/22 maxlen: 23
185.134.212.0/22 maxlen: 22
2a03:a200::/32 maxlen: 32
2001:67c:2670::/48 maxlen: 48
2a0b:f100::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/BKKuLNCUMzAYxB2q-0dMbPqA0H0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/BKKuLNCUMzAYxB2q-0dMbPqA0H0.mft
rsync://rpki.ripe.net/repository/DEFAULT/BKKuLNCUMzAYxB2q-0dMbPqA0H0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:03:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:5c:84:36:c3:c2:d6:66:a9:03:e0:83:41:a7:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04a2ae2cd094333018c41daafb474c6cfa80d07d
Validity
Not Before: Jan 2 12:33:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fa8536711bfd6e688501fbe80029925851673644
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ea:34:e9:74:7d:ff:44:90:b9:76:3b:07:c4:
4b:98:f9:ef:14:de:c8:96:5d:9a:0c:91:81:26:b8:
13:f9:54:b5:ba:0c:5c:d4:91:97:e5:99:7d:66:01:
32:c9:94:ec:10:32:fa:46:c3:47:53:80:d2:5a:48:
f9:32:27:fa:c1:cb:61:78:99:d5:36:14:27:ca:14:
11:5e:d2:8d:8a:f3:ad:d4:38:7a:25:d5:51:7a:09:
d0:9d:57:56:1d:0a:ce:6b:cb:66:a0:6d:ac:04:d4:
ff:81:8f:72:dc:de:e5:93:db:45:c1:3e:f9:9e:c9:
1c:d2:6c:2b:90:b1:5c:dc:39:91:9c:f7:d2:f9:64:
fd:f9:f9:03:40:28:2d:17:3d:c8:39:e2:7c:95:45:
42:7f:9c:57:a9:4d:2f:d6:ea:56:d3:b8:31:25:42:
96:bf:bb:48:90:fc:10:35:21:59:09:01:47:ca:28:
b8:b3:67:1d:12:7a:85:2b:94:99:42:4f:1e:5d:c7:
3a:1b:42:92:92:46:b8:a4:78:c5:d8:96:53:ee:34:
4f:b1:ad:95:a4:ae:cf:3b:3f:c7:65:39:9c:7d:eb:
46:77:6e:ab:dd:f8:62:3a:8e:21:6b:c8:b4:70:44:
08:10:b9:60:14:a5:39:70:75:e2:1a:a8:83:33:21:
20:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:85:36:71:1B:FD:6E:68:85:01:FB:E8:00:29:92:58:51:67:36:44
X509v3 Authority Key Identifier:
keyid:04:A2:AE:2C:D0:94:33:30:18:C4:1D:AA:FB:47:4C:6C:FA:80:D0:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKKuLNCUMzAYxB2q-0dMbPqA0H0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/1-oU2cRv9bmiFAfvoACmSWFFnNkQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/BKKuLNCUMzAYxB2q-0dMbPqA0H0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.24.176.0/21
78.41.168.0/21
81.92.248.0/21
93.174.176.0/21
185.22.212.0/22
185.134.212.0/22
185.213.144.0/22
188.121.160.0/19
IPv6:
2001:67c:2670::/48
2a03:a200::/32
2a0b:f100::/29
Signature Algorithm: sha256WithRSAEncryption
56:f9:f3:14:f7:c3:f3:d6:ee:12:87:d6:e1:1a:67:39:3d:45:
ae:8f:91:07:54:ef:36:2a:92:e7:c3:37:d7:48:e3:56:9e:dd:
e9:22:70:d9:e3:6b:b5:8a:a4:2b:ef:2c:07:dd:d6:80:96:49:
34:32:b1:8a:c1:92:83:70:94:c6:37:6e:0a:3c:45:d7:89:e4:
10:28:2f:8d:0c:80:28:e5:66:99:16:73:2d:12:ff:78:4b:0b:
b2:65:77:1b:db:dc:10:21:f0:a7:31:2f:a9:b2:c6:51:62:2e:
3f:13:43:65:10:f6:30:bd:76:cf:d5:32:1e:f7:a4:80:f0:9f:
15:bb:7d:f2:31:91:95:a0:af:18:ba:92:4f:43:4b:3e:6b:df:
9a:75:d9:5a:70:5a:f2:01:cd:93:15:b5:2a:0b:3b:25:f5:66:
03:1a:79:1e:7f:ef:d7:dd:db:f0:9b:91:7f:4e:ed:fe:5c:9e:
42:3c:6c:a1:4d:91:48:67:fb:43:5b:24:36:94:db:01:f9:b6:
03:2d:45:1d:72:e2:55:87:2b:41:3b:7d:e9:2b:8a:0a:04:84:
11:41:4d:c5:80:45:aa:35:44:cf:a6:eb:8d:bd:a0:02:82:a5:
59:b6:9f:25:4c:a4:95:56:e1:6b:02:4e:01:2e:2d:b0:ef:47:
ab:ef:cb:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:08:42 2024 by rpki-client on console-fra.rpki-client.org