Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/fe34d4-59b8-4324-ad27-85069125d3bf/1/dahiCnCrxv0WcJ8Q1BUNr34PuWU.roa
File: dahiCnCrxv0WcJ8Q1BUNr34PuWU.roa (raw, json)
Hash identifier: j5uDjD+E+qTWUepsUdcnl554IdFe9TenqcIwkz37z7c=
Subject key identifier: 75:A8:62:0A:70:AB:C6:FD:16:70:9F:10:D4:15:0D:AF:7E:0F:B9:65
Certificate issuer: /CN=33f650c0a0f16515a72dea601ce9ca2d4c164993
Certificate serial: 0190A9D280AB44CD2F4F2C61B0560356069C
Authority key identifier: 33:F6:50:C0:A0:F1:65:15:A7:2D:EA:60:1C:E9:CA:2D:4C:16:49:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M_ZQwKDxZRWnLepgHOnKLUwWSZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/fe34d4-59b8-4324-ad27-85069125d3bf/1/dahiCnCrxv0WcJ8Q1BUNr34PuWU.roa
Signing time: Sat 13 Jul 2024 02:01:03 +0000
ROA not before: Sat 13 Jul 2024 02:01:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48943
IP address blocks: 94.136.0.0/19 maxlen: 24
185.36.16.0/22 maxlen: 24
185.202.148.0/23 maxlen: 24
185.202.150.0/24 maxlen: 24
2a02:ab8::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/fe34d4-59b8-4324-ad27-85069125d3bf/1/M_ZQwKDxZRWnLepgHOnKLUwWSZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/fe34d4-59b8-4324-ad27-85069125d3bf/1/M_ZQwKDxZRWnLepgHOnKLUwWSZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/M_ZQwKDxZRWnLepgHOnKLUwWSZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 05:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:a9:d2:80:ab:44:cd:2f:4f:2c:61:b0:56:03:56:06:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33f650c0a0f16515a72dea601ce9ca2d4c164993
Validity
Not Before: Jul 13 02:01:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=75a8620a70abc6fd16709f10d4150daf7e0fb965
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:2d:eb:34:27:c6:92:db:b5:e9:64:29:6b:ea:
75:0a:14:c0:87:cf:3d:f4:6a:14:9c:65:04:fa:43:
14:1e:ad:fb:a4:25:c2:9c:e0:ee:a8:c2:46:75:86:
c6:5f:c2:e0:c7:cf:43:18:e9:dc:b6:d8:b8:5b:01:
f9:8a:ff:6f:1d:bf:38:34:ef:fd:88:fe:1e:5f:53:
5f:8f:43:6a:e2:d5:9e:39:b7:a1:e2:13:eb:fa:a5:
77:2e:d5:f0:c8:e8:7e:7a:2b:6e:a6:9f:ad:6f:e6:
c7:58:3f:08:16:40:2e:36:4b:2b:e1:92:97:bc:03:
a2:1a:57:1a:a4:00:b4:6c:58:e2:0c:a1:87:48:0b:
56:ca:00:6c:8f:28:3d:60:40:75:30:70:2c:bb:fd:
56:17:75:dd:e8:d0:23:ab:d9:db:dd:11:ac:96:44:
5c:79:83:41:66:63:cb:5b:04:75:95:c0:07:58:81:
6b:22:95:d1:2a:ae:e6:d2:fa:03:a5:93:91:04:74:
0c:dc:3c:75:35:08:94:99:f3:3d:d5:24:3c:11:42:
35:bb:95:df:d8:6f:14:fb:61:2b:55:f7:dc:1a:58:
37:d9:65:01:25:f2:2f:f3:d9:0a:d9:c6:be:5f:f6:
33:2b:02:cd:c0:29:2f:c0:6d:b6:a2:14:ad:27:a3:
7c:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:A8:62:0A:70:AB:C6:FD:16:70:9F:10:D4:15:0D:AF:7E:0F:B9:65
X509v3 Authority Key Identifier:
keyid:33:F6:50:C0:A0:F1:65:15:A7:2D:EA:60:1C:E9:CA:2D:4C:16:49:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M_ZQwKDxZRWnLepgHOnKLUwWSZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/fe34d4-59b8-4324-ad27-85069125d3bf/1/dahiCnCrxv0WcJ8Q1BUNr34PuWU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/fe34d4-59b8-4324-ad27-85069125d3bf/1/M_ZQwKDxZRWnLepgHOnKLUwWSZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.136.0.0/19
185.36.16.0/22
185.202.148.0-185.202.150.255
IPv6:
2a02:ab8::/29
Signature Algorithm: sha256WithRSAEncryption
96:ff:ee:8b:dd:cc:14:ce:a1:54:9a:af:26:21:00:dc:50:15:
99:4c:e0:06:7a:3b:da:fa:79:77:2b:90:9d:bd:62:9b:d3:0e:
a0:e6:4e:78:a1:70:f8:3a:ed:0e:99:dd:b1:09:11:8f:0f:01:
7e:a5:6f:df:5f:b2:6e:da:77:a3:2a:ed:50:e7:15:61:73:76:
8a:f5:b4:93:1d:4f:0d:38:9d:bb:0b:4d:37:65:e3:cf:ab:b7:
06:1f:7f:e7:da:99:00:4f:44:2a:fd:06:92:47:e3:ec:2f:07:
27:fd:78:8f:c5:f3:af:9f:9b:77:e1:74:f3:63:35:0d:a9:d3:
0e:85:dc:71:90:3a:69:7e:98:f7:ae:41:98:b5:f3:65:44:0c:
4a:33:68:9b:4e:eb:88:03:b2:aa:04:a4:be:40:ba:f0:60:23:
67:b3:2f:27:0e:ef:24:52:1e:a3:06:92:4b:c8:e8:f9:e7:fd:
92:2a:f5:25:68:af:c6:d6:52:5b:6f:5a:93:3c:13:bb:89:61:
b8:66:97:30:97:f0:dd:57:79:f9:5d:b4:77:dc:a5:1a:bd:52:
e2:cd:0d:cc:79:90:68:10:3b:3d:25:ca:85:95:bb:7b:35:78:
f3:75:ed:66:9c:f9:d1:49:59:24:b8:8d:c3:ca:26:67:d7:cb:
80:81:97:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:14:02 2024 by rpki-client on console-fra.rpki-client.org