Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/yXCEzQhMrAdgnUXOFM_IrzLe9-I.roa
File: yXCEzQhMrAdgnUXOFM_IrzLe9-I.roa (raw, json)
Hash identifier: YEBEg4hk/xLVwdZWmSIadn6TP9VAiKS+6HZQgBzBdkE=
Subject key identifier: C9:70:84:CD:08:4C:AC:07:60:9D:45:CE:14:CF:C8:AF:32:DE:F7:E2
Certificate issuer: /CN=52a5c90ca928313bc70d2683bb0f64d632b273a1
Certificate serial: 018CC8DFB1E1945D8C17B42A9D92D06243F4
Authority key identifier: 52:A5:C9:0C:A9:28:31:3B:C7:0D:26:83:BB:0F:64:D6:32:B2:73:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UqXJDKkoMTvHDSaDuw9k1jKyc6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/yXCEzQhMrAdgnUXOFM_IrzLe9-I.roa
Signing time: Tue 02 Jan 2024 06:32:32 +0000
ROA not before: Tue 02 Jan 2024 06:32:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20902
IP address blocks: 80.88.64.0/20 maxlen: 24
194.0.184.0/24 maxlen: 24
46.229.0.0/20 maxlen: 24
109.239.160.0/20 maxlen: 24
80.73.96.0/19 maxlen: 24
80.73.96.0/20 maxlen: 24
80.73.112.0/21 maxlen: 24
2001:67c:2088::/48 maxlen: 48
2a00:1230::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/UqXJDKkoMTvHDSaDuw9k1jKyc6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/UqXJDKkoMTvHDSaDuw9k1jKyc6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/UqXJDKkoMTvHDSaDuw9k1jKyc6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 04:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:b1:e1:94:5d:8c:17:b4:2a:9d:92:d0:62:43:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52a5c90ca928313bc70d2683bb0f64d632b273a1
Validity
Not Before: Jan 2 06:32:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c97084cd084cac07609d45ce14cfc8af32def7e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:02:5f:3f:5b:57:3c:b9:db:76:ea:fc:8e:96:
de:90:b9:41:d5:56:e7:91:82:2b:f8:65:2a:16:10:
b7:65:06:a8:91:26:59:2d:b1:a5:1e:63:b1:d7:f6:
24:de:30:00:b2:c9:20:85:e5:e8:db:d1:4a:27:61:
27:73:e1:a7:33:eb:66:5a:c0:5b:54:1f:a6:2f:68:
37:fb:a0:80:da:fc:a4:b1:8c:3a:98:88:30:7f:05:
c7:50:d9:ee:a8:11:cf:65:e9:a6:c5:db:14:8d:b0:
01:62:75:bb:78:ee:68:c6:59:da:9c:a5:70:76:54:
8b:98:c8:80:39:4e:8b:d4:74:1b:54:5e:40:bf:ed:
d5:c5:f0:99:cc:de:c3:e0:7d:67:94:e4:06:67:61:
8a:63:46:9c:46:28:93:fa:f6:a8:94:75:75:45:95:
e7:f6:f2:e5:2f:ed:c3:63:0f:1c:15:14:ed:a0:55:
13:a5:66:c2:ef:7a:ee:f3:a8:ee:92:ec:99:59:b2:
09:83:2f:b3:c5:00:c8:fd:43:b8:6c:71:04:b9:70:
8d:74:fe:21:3c:04:7d:9a:2f:0c:56:9b:8b:6e:5d:
c3:16:b3:a0:45:fe:8a:9d:40:cb:25:d2:4f:05:71:
f5:65:8a:dd:26:c7:da:13:50:ff:fa:ab:d3:7e:20:
9e:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:70:84:CD:08:4C:AC:07:60:9D:45:CE:14:CF:C8:AF:32:DE:F7:E2
X509v3 Authority Key Identifier:
keyid:52:A5:C9:0C:A9:28:31:3B:C7:0D:26:83:BB:0F:64:D6:32:B2:73:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UqXJDKkoMTvHDSaDuw9k1jKyc6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/yXCEzQhMrAdgnUXOFM_IrzLe9-I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/UqXJDKkoMTvHDSaDuw9k1jKyc6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.229.0.0/20
80.73.96.0/19
80.88.64.0/20
109.239.160.0/20
194.0.184.0/24
IPv6:
2001:67c:2088::/48
2a00:1230::/29
Signature Algorithm: sha256WithRSAEncryption
1f:cd:c3:49:f6:90:85:39:8f:a4:fa:19:72:31:f3:8d:0d:85:
5d:3f:e5:2b:a5:92:03:7b:5c:7f:f6:00:42:ec:3d:6a:62:84:
e4:ab:b8:23:b9:b7:01:73:e1:9f:fc:aa:9a:44:fe:bb:bd:94:
c0:25:44:89:00:b1:ff:43:43:45:4a:ec:3d:ca:58:25:de:28:
ca:bf:5f:a3:8e:f0:7e:0e:cb:f7:f0:86:07:94:30:f7:b0:8a:
2e:1d:7a:c5:e3:b9:0d:a0:2f:5f:26:bd:ed:d8:da:fa:96:a3:
b1:bb:05:0d:4f:60:76:00:e9:d4:81:09:3a:35:8c:cc:82:fe:
0a:7a:60:ef:78:4f:e5:7d:75:6f:7e:d8:15:0d:e0:a2:82:ab:
64:8b:80:35:43:9d:ee:d0:c2:4d:46:da:ff:f2:78:7d:87:c5:
c3:d4:e5:92:43:1d:31:13:3d:3c:4e:25:20:04:46:e1:8b:8b:
ef:7d:d8:8d:c7:01:ce:40:4f:37:58:2e:a4:0b:dd:9f:2d:fa:
0e:60:ba:fe:31:b1:d3:54:11:94:cf:7e:7d:10:ec:9b:ed:05:
81:fb:be:75:6a:da:76:97:44:23:3f:30:3e:75:3f:5d:62:68:
72:fa:f3:5b:5a:52:06:38:ca:67:6c:8f:06:d8:df:1f:e1:21:
29:56:bf:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:02:30 2024 by rpki-client on console-fra.rpki-client.org