Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/c383cb-33ea-43cf-8e2e-14d07bd1889c/1/a4SYCZXc0fOwtOlZX_P8E4WFovA.roa
File: a4SYCZXc0fOwtOlZX_P8E4WFovA.roa (raw, json)
Hash identifier: j9RPzDfPAD2CIv2M11Dj0/R5LHWs8sIHztR4LwsDuOY=
Subject key identifier: 6B:84:98:09:95:DC:D1:F3:B0:B4:E9:59:5F:F3:FC:13:85:85:A2:F0
Certificate issuer: /CN=07733fc63b8f1880e5c0af6b4643d1e32181d7a5
Certificate serial: 018CC7933AC206E7E7C9792C04DC8463DD6C
Authority key identifier: 07:73:3F:C6:3B:8F:18:80:E5:C0:AF:6B:46:43:D1:E3:21:81:D7:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B3M_xjuPGIDlwK9rRkPR4yGB16U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/c383cb-33ea-43cf-8e2e-14d07bd1889c/1/a4SYCZXc0fOwtOlZX_P8E4WFovA.roa
Signing time: Tue 02 Jan 2024 00:29:23 +0000
ROA not before: Tue 02 Jan 2024 00:29:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 28932
IP address blocks: 195.238.162.0/24 maxlen: 32
195.238.163.0/24 maxlen: 32
195.238.160.0/24 maxlen: 32
195.238.161.0/24 maxlen: 32
194.113.177.0/24 maxlen: 32
194.113.176.0/24 maxlen: 32
194.113.178.0/24 maxlen: 32
194.113.179.0/24 maxlen: 32
195.22.136.0/24 maxlen: 32
195.22.137.0/24 maxlen: 32
195.49.156.0/24 maxlen: 32
195.49.159.0/24 maxlen: 32
195.49.157.0/24 maxlen: 32
195.49.158.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/c383cb-33ea-43cf-8e2e-14d07bd1889c/1/B3M_xjuPGIDlwK9rRkPR4yGB16U.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/c383cb-33ea-43cf-8e2e-14d07bd1889c/1/B3M_xjuPGIDlwK9rRkPR4yGB16U.mft
rsync://rpki.ripe.net/repository/DEFAULT/B3M_xjuPGIDlwK9rRkPR4yGB16U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 May 2024 19:45:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:93:3a:c2:06:e7:e7:c9:79:2c:04:dc:84:63:dd:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07733fc63b8f1880e5c0af6b4643d1e32181d7a5
Validity
Not Before: Jan 2 00:29:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6b84980995dcd1f3b0b4e9595ff3fc138585a2f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:68:c6:de:8a:0d:af:70:a8:d4:5d:6c:0c:02:
81:1c:f6:77:a8:af:37:51:86:ff:67:ee:04:25:23:
c6:d1:99:d6:34:d1:87:cf:09:5f:44:59:7a:9a:8c:
70:74:a1:ba:b1:fd:61:1f:e0:56:41:8a:be:a7:86:
7a:72:16:b1:da:0c:93:a6:ff:8b:e8:46:23:b8:60:
c3:c5:10:08:a4:95:a3:3e:ed:16:ab:91:c1:f0:0d:
ff:34:7c:5d:48:d5:4c:f4:ed:69:4b:78:62:ec:69:
6d:2d:80:25:50:bc:cc:c6:6e:55:85:70:30:c9:ef:
01:7d:9a:9d:6e:2c:54:47:6a:51:54:f0:44:a6:e1:
6d:2c:0a:a2:ef:c3:fa:49:c7:ab:28:a7:1e:c3:41:
b0:eb:45:ab:43:e4:f9:b6:9f:23:6c:6d:1f:29:1c:
4c:28:c4:51:4d:f9:d3:29:da:bc:b4:b3:04:a6:b3:
ba:85:2d:f0:fd:db:60:36:1a:da:24:c4:4b:27:a2:
f7:e3:bd:ac:10:a3:0c:86:c4:07:f4:ab:d5:52:17:
b2:c6:35:4e:65:9d:54:ea:55:b4:30:30:1e:f6:15:
66:d4:47:34:0e:62:a5:75:8c:91:c1:f1:20:2c:97:
68:d5:7c:d4:92:fb:15:fd:bd:e5:89:7a:2f:69:3c:
a8:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:84:98:09:95:DC:D1:F3:B0:B4:E9:59:5F:F3:FC:13:85:85:A2:F0
X509v3 Authority Key Identifier:
keyid:07:73:3F:C6:3B:8F:18:80:E5:C0:AF:6B:46:43:D1:E3:21:81:D7:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B3M_xjuPGIDlwK9rRkPR4yGB16U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/c383cb-33ea-43cf-8e2e-14d07bd1889c/1/a4SYCZXc0fOwtOlZX_P8E4WFovA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/c383cb-33ea-43cf-8e2e-14d07bd1889c/1/B3M_xjuPGIDlwK9rRkPR4yGB16U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.113.176.0/22
195.22.136.0/23
195.49.156.0/22
195.238.160.0/22
Signature Algorithm: sha256WithRSAEncryption
25:f2:b5:1f:7e:d0:45:e1:a9:cb:d5:ef:c6:45:d8:5f:f4:9b:
60:0d:97:b0:e4:15:3e:df:a0:46:63:0b:02:0b:eb:98:3d:ac:
26:64:67:08:eb:ae:8b:c1:09:66:c1:82:df:a6:1c:f3:fc:33:
a7:3e:11:ee:99:22:98:14:41:db:3d:72:31:dc:2d:ef:49:8e:
83:2f:9b:3b:4a:4e:09:95:97:f7:3f:ae:61:ea:0b:5e:ea:7c:
1d:c2:f2:12:2a:07:32:9d:b8:0c:a9:61:b8:01:71:6e:63:97:
fc:f8:a8:91:c7:bb:94:bf:db:82:51:82:ce:a1:2b:ed:6b:9d:
f7:de:c1:04:96:68:00:42:fb:3b:a5:74:b3:e8:47:03:26:3c:
b5:c3:49:c6:40:21:1a:aa:7e:14:46:1a:ce:24:e1:84:ae:dc:
a9:d2:6c:44:23:2c:b5:26:0d:7a:bd:bf:94:4d:2f:1f:61:90:
21:c2:ae:35:00:dd:76:05:4c:b7:d4:2d:2a:49:08:a8:c5:34:
c7:df:a1:9a:d6:34:54:60:56:5e:49:ec:3b:9e:3d:cc:db:b5:
13:0f:65:95:8a:04:73:58:7b:9e:8d:be:ba:22:3b:20:87:01:
c6:8d:fa:d0:cb:2f:28:bf:29:62:aa:5b:a1:24:ce:5a:4e:2b:
67:1e:46:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 28 03:10:11 2024 by rpki-client on console-ams.rpki-client.org