Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/cf4946-f5c2-45aa-9a41-f44299865a28/1/N2cjWXf0CdYfvJOtYAQk28D4CuI.roa
File: N2cjWXf0CdYfvJOtYAQk28D4CuI.roa (raw, json)
Hash identifier: HPo4Onnn7Fu9SI5Gmc892qDizr8YiG4fltka3naTo4Y=
Subject key identifier: 37:67:23:59:77:F4:09:D6:1F:BC:93:AD:60:04:24:DB:C0:F8:0A:E2
Certificate issuer: /CN=9280fdc9e7a86430c8e28f5e349e317fbb8a1ca9
Certificate serial: 018CC348EE001D5B6A0A7CD6B1493F00F04B
Authority key identifier: 92:80:FD:C9:E7:A8:64:30:C8:E2:8F:5E:34:9E:31:7F:BB:8A:1C:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/koD9yeeoZDDI4o9eNJ4xf7uKHKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/cf4946-f5c2-45aa-9a41-f44299865a28/1/N2cjWXf0CdYfvJOtYAQk28D4CuI.roa
Signing time: Mon 01 Jan 2024 04:29:45 +0000
ROA not before: Mon 01 Jan 2024 04:29:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206993
IP address blocks: 185.169.172.0/24 maxlen: 24
185.169.174.0/24 maxlen: 24
185.169.175.0/24 maxlen: 24
185.169.173.0/24 maxlen: 24
193.160.37.0/24 maxlen: 24
193.160.34.0/24 maxlen: 24
193.160.38.0/24 maxlen: 24
193.160.35.0/24 maxlen: 24
193.160.36.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/cf4946-f5c2-45aa-9a41-f44299865a28/1/koD9yeeoZDDI4o9eNJ4xf7uKHKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/cf4946-f5c2-45aa-9a41-f44299865a28/1/koD9yeeoZDDI4o9eNJ4xf7uKHKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/koD9yeeoZDDI4o9eNJ4xf7uKHKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:ee:00:1d:5b:6a:0a:7c:d6:b1:49:3f:00:f0:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9280fdc9e7a86430c8e28f5e349e317fbb8a1ca9
Validity
Not Before: Jan 1 04:29:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3767235977f409d61fbc93ad600424dbc0f80ae2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:34:83:67:1a:98:87:c5:65:e4:7d:d3:34:5c:
b3:b7:14:df:8c:da:8b:19:ba:45:99:43:bf:80:45:
cb:e6:3a:8d:b6:a3:f5:b7:26:2c:4b:64:53:eb:31:
67:49:15:09:31:f4:b3:90:1a:6e:ab:f4:b8:8a:1d:
22:7e:67:90:b1:25:06:a7:48:ed:51:f3:ad:80:63:
b5:1b:7b:1d:7c:34:95:65:1d:ba:37:4a:a5:df:a0:
f6:80:af:ce:52:53:86:90:c2:8c:ef:cf:fa:b9:7f:
ad:5d:2f:20:33:5a:18:dd:fa:9d:3e:25:43:cb:e1:
93:48:05:50:7c:2d:3d:6f:5c:c8:d8:27:a3:a4:e7:
08:43:a9:21:7d:7d:f5:f0:c8:1f:e2:e4:20:68:d8:
7e:e6:8b:d9:94:a7:7e:ea:16:49:c1:15:da:04:89:
d1:1e:db:1e:a0:65:7b:72:f1:4c:f6:82:91:05:fe:
2b:c5:74:87:c7:9c:cc:e1:2e:cf:aa:e7:06:09:71:
8d:ae:a8:91:4a:24:76:95:71:a6:2c:c5:13:9b:3e:
02:65:23:0c:9a:91:53:c3:cf:a5:c8:68:69:dd:04:
84:2a:2a:94:ec:39:15:f0:71:aa:c1:76:83:85:76:
7e:fc:40:1d:78:4f:31:b3:18:a7:f7:87:e4:eb:b3:
5a:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:67:23:59:77:F4:09:D6:1F:BC:93:AD:60:04:24:DB:C0:F8:0A:E2
X509v3 Authority Key Identifier:
keyid:92:80:FD:C9:E7:A8:64:30:C8:E2:8F:5E:34:9E:31:7F:BB:8A:1C:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/koD9yeeoZDDI4o9eNJ4xf7uKHKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/cf4946-f5c2-45aa-9a41-f44299865a28/1/N2cjWXf0CdYfvJOtYAQk28D4CuI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/cf4946-f5c2-45aa-9a41-f44299865a28/1/koD9yeeoZDDI4o9eNJ4xf7uKHKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.169.172.0/22
193.160.34.0-193.160.38.255
Signature Algorithm: sha256WithRSAEncryption
d4:1e:33:01:ee:5b:2e:94:25:51:5f:fe:b8:d1:cf:04:0c:f2:
2e:32:cd:c0:a6:18:d7:87:2c:03:e9:2e:02:7b:4b:ba:11:f4:
b3:cd:b3:0a:5b:d7:a3:41:94:b8:bf:f3:60:69:5c:ee:47:4f:
e4:09:6e:c6:b4:bb:56:8f:3e:26:98:63:55:e1:57:49:1a:c8:
54:a4:ba:5f:6c:64:de:a3:f1:fc:e2:fc:b6:ef:99:35:08:14:
e6:ec:1f:ec:29:b8:a4:e1:c0:3a:28:56:24:e7:e1:53:49:b0:
2b:98:cb:db:a0:90:84:8e:e7:4f:cc:34:d5:07:7d:e6:51:58:
6c:a2:1b:9c:c4:d0:ea:31:0d:5f:81:6a:37:08:a2:7c:b5:f0:
7c:af:f4:46:00:fb:8d:8c:c9:1f:04:36:c5:4f:0d:f1:b4:09:
1c:83:76:9c:e7:ed:27:09:0d:6c:23:a9:0e:ae:30:ea:bb:d7:
df:f3:07:ee:85:d9:7e:10:a3:2b:9e:71:b6:d6:c2:98:33:44:
72:17:81:90:2a:44:81:d1:e4:c5:c5:cd:6a:8d:5e:a7:2c:e3:
a9:35:2a:d9:13:b0:07:1e:be:3e:7b:dd:f5:bc:a1:93:0a:fa:
ae:dc:b2:34:e3:77:01:f0:9d:26:c0:74:c5:fa:52:50:bd:cc:
50:81:d3:11
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jun 7 23:41:32 2024 by rpki-client on console-fra.rpki-client.org