Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/07cdcf-8875-4770-8c75-41b745bf53db/1/DXOSjkPgPhkpthG4moFFsYGoGkc.roa
File: DXOSjkPgPhkpthG4moFFsYGoGkc.roa (raw, json)
Hash identifier: gQyxqUbTgcaGBlgj8iHg7FIZqxouBFmZfuivnmKq7Js=
Subject key identifier: 0D:73:92:8E:43:E0:3E:19:29:B6:11:B8:9A:81:45:B1:81:A8:1A:47
Certificate issuer: /CN=49378660f5f01923946c35d94be5ccd7d2b71051
Certificate serial: 0191EA49C527E6755DCB57C57309FAEF00CA
Authority key identifier: 49:37:86:60:F5:F0:19:23:94:6C:35:D9:4B:E5:CC:D7:D2:B7:10:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/STeGYPXwGSOUbDXZS-XM19K3EFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/07cdcf-8875-4770-8c75-41b745bf53db/1/DXOSjkPgPhkpthG4moFFsYGoGkc.roa
Signing time: Fri 13 Sep 2024 07:29:48 +0000
ROA not before: Fri 13 Sep 2024 07:29:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203593
IP address blocks: 157.97.163.0/24 maxlen: 24
185.129.252.0/24 maxlen: 24
185.129.253.0/24 maxlen: 24
185.129.254.0/24 maxlen: 24
185.129.255.0/24 maxlen: 24
193.254.202.0/24 maxlen: 24
193.254.203.0/24 maxlen: 24
213.244.32.0/24 maxlen: 24
213.244.33.0/24 maxlen: 24
213.244.34.0/24 maxlen: 24
213.244.35.0/24 maxlen: 24
213.244.36.0/24 maxlen: 24
213.244.37.0/24 maxlen: 24
213.244.38.0/24 maxlen: 24
213.244.40.0/24 maxlen: 24
213.244.41.0/24 maxlen: 24
213.244.42.0/24 maxlen: 24
2a06:d680::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/07cdcf-8875-4770-8c75-41b745bf53db/1/STeGYPXwGSOUbDXZS-XM19K3EFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/07cdcf-8875-4770-8c75-41b745bf53db/1/STeGYPXwGSOUbDXZS-XM19K3EFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/STeGYPXwGSOUbDXZS-XM19K3EFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:ea:49:c5:27:e6:75:5d:cb:57:c5:73:09:fa:ef:00:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49378660f5f01923946c35d94be5ccd7d2b71051
Validity
Not Before: Sep 13 07:29:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0d73928e43e03e1929b611b89a8145b181a81a47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:8b:2a:57:84:f2:9c:4c:5e:a0:49:3e:91:3a:
0f:be:35:21:9b:26:bc:0a:3b:5c:24:9f:b2:ce:58:
9f:80:be:a8:af:93:7c:7e:c9:0b:f8:85:07:53:c6:
d1:fd:dc:a3:3c:06:39:dd:7a:39:13:a3:ed:62:0d:
f2:60:f6:21:a4:25:12:79:f5:fb:34:80:15:c1:39:
36:a4:ca:26:05:bd:11:ce:8f:5d:6a:9e:e6:fe:bb:
52:4b:fc:4d:50:d9:3e:7e:27:c5:4d:75:d7:13:ac:
cc:2b:16:c2:59:75:ee:93:57:a6:0f:c9:ee:0d:a7:
e0:cd:21:72:d2:47:9c:61:9c:92:6c:54:94:bf:f6:
5e:99:99:90:93:52:24:13:5f:48:e3:f4:6e:5f:cc:
75:29:c8:c1:53:c1:90:93:1e:33:fa:e6:24:e6:1b:
6f:00:da:66:53:3a:6f:83:f0:e3:5b:08:b2:63:f6:
44:49:91:f2:a0:53:25:fd:63:7f:88:f4:43:55:00:
60:2f:fb:cf:7d:90:f4:4e:5c:59:5d:5c:ad:bb:23:
90:69:36:a0:e1:32:ce:b3:45:e6:a9:8f:2a:ba:f5:
b1:8d:53:ff:c5:c7:1b:79:82:48:c1:50:6c:2d:79:
72:eb:f6:70:85:e9:b0:ea:5b:8b:ef:e8:d0:2f:61:
e7:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:73:92:8E:43:E0:3E:19:29:B6:11:B8:9A:81:45:B1:81:A8:1A:47
X509v3 Authority Key Identifier:
keyid:49:37:86:60:F5:F0:19:23:94:6C:35:D9:4B:E5:CC:D7:D2:B7:10:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/STeGYPXwGSOUbDXZS-XM19K3EFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/07cdcf-8875-4770-8c75-41b745bf53db/1/DXOSjkPgPhkpthG4moFFsYGoGkc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/07cdcf-8875-4770-8c75-41b745bf53db/1/STeGYPXwGSOUbDXZS-XM19K3EFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.97.163.0/24
185.129.252.0/22
193.254.202.0/23
213.244.32.0-213.244.38.255
213.244.40.0-213.244.42.255
IPv6:
2a06:d680::/29
Signature Algorithm: sha256WithRSAEncryption
0a:af:99:f4:80:7d:e9:68:37:e4:a9:29:e9:7f:11:47:8d:7d:
dc:f7:32:ae:48:31:fb:d7:35:83:43:e2:51:97:92:fc:b9:95:
32:d6:69:6f:68:ae:09:71:24:7a:99:17:51:ca:05:96:eb:74:
53:c8:90:3d:e3:8a:a2:fe:02:6d:08:a6:b9:52:54:a7:4e:f3:
30:de:80:b1:8b:80:f9:6a:6b:a3:b1:c3:2c:f4:39:6f:78:55:
56:11:c8:99:7d:64:a7:21:8b:8a:d9:8c:66:c5:4e:1d:7d:e3:
38:3f:82:2f:c9:bd:b3:d6:49:c3:a9:72:c6:d0:cb:e7:1e:3f:
09:6e:ca:37:e8:11:f3:43:02:75:1e:d4:d3:68:86:66:7f:ea:
38:58:e0:6d:db:36:a2:9c:86:12:6e:a5:6c:12:60:1e:7f:2c:
be:77:41:b9:9b:7b:0b:48:48:9b:9d:57:b5:d5:6e:ec:c8:c9:
7b:ec:9e:e0:5a:ab:82:1f:e9:f7:f8:db:17:31:30:16:68:cb:
57:84:ba:d3:46:ba:a6:e7:d1:fa:48:e9:6f:9e:86:55:f1:ed:
04:cd:f9:b9:4f:52:10:1f:76:6c:11:85:2e:36:4e:7d:7a:67:
81:05:ba:b3:e1:2e:52:9e:22:ba:2f:34:ce:79:d5:a4:45:12:
aa:fa:9c:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:13:43 2024 by rpki-client on console-fra.rpki-client.org