Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/sxbatb0Udc9WRm0mnACV_mLx3Lc.roa
File: sxbatb0Udc9WRm0mnACV_mLx3Lc.roa (raw, json)
Hash identifier: HyzVOeGuHQw3Vkj7x1JIMToCoEmSdYxPtNAtUjcb7D0=
Subject key identifier: B3:16:DA:B5:BD:14:75:CF:56:46:6D:26:9C:00:95:FE:62:F1:DC:B7
Certificate issuer: /CN=2ef957aba2ef00352850e202464c71d33ca81448
Certificate serial: 018CC4930872E00783869B57852BB7E88EFB
Authority key identifier: 2E:F9:57:AB:A2:EF:00:35:28:50:E2:02:46:4C:71:D3:3C:A8:14:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LvlXq6LvADUoUOICRkxx0zyoFEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/sxbatb0Udc9WRm0mnACV_mLx3Lc.roa
Signing time: Mon 01 Jan 2024 10:30:19 +0000
ROA not before: Mon 01 Jan 2024 10:30:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2471
IP address blocks: 193.54.56.0/24 maxlen: 24
195.83.189.0/24 maxlen: 24
194.254.98.0/24 maxlen: 24
193.51.134.0/24 maxlen: 24
193.51.135.0/24 maxlen: 24
195.221.172.0/24 maxlen: 24
195.221.169.0/24 maxlen: 24
194.199.94.0/24 maxlen: 24
194.199.93.0/24 maxlen: 24
194.199.96.0/24 maxlen: 24
194.57.236.0/24 maxlen: 24
194.57.237.0/24 maxlen: 24
193.52.35.0/24 maxlen: 24
194.254.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/LvlXq6LvADUoUOICRkxx0zyoFEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 07:02:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:08:72:e0:07:83:86:9b:57:85:2b:b7:e8:8e:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ef957aba2ef00352850e202464c71d33ca81448
Validity
Not Before: Jan 1 10:30:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b316dab5bd1475cf56466d269c0095fe62f1dcb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:61:4a:47:85:4c:db:5a:72:37:d3:f6:b7:58:
49:71:33:30:67:de:5f:9e:1f:1f:39:4f:20:f5:8b:
32:77:56:41:c5:10:b1:e5:aa:99:88:20:f6:8b:20:
ae:5e:84:80:cf:95:07:c9:ce:d8:9e:7d:2c:70:50:
75:0c:ad:9a:8f:e1:6a:14:3a:fe:3f:0d:4f:c2:e7:
ae:a0:ee:3c:3a:e0:4c:fa:68:0f:5a:32:99:e0:5f:
40:21:fe:f4:e9:38:1a:0b:dd:3e:d1:ba:16:62:da:
fd:de:a3:ca:c0:13:cd:0c:61:6c:30:4d:22:c5:f8:
70:56:0a:05:ae:53:28:d7:5c:ea:23:70:42:65:f4:
b6:68:50:67:15:41:81:6c:e2:e1:13:1f:cf:42:18:
30:b9:1d:9c:0f:82:e9:e9:d2:3c:45:b4:5e:54:17:
b7:65:57:08:0d:a9:4f:71:cb:79:c8:dd:50:36:73:
ec:84:e8:9e:22:db:ee:a5:ba:8d:4c:2f:11:c1:b9:
c4:20:98:9a:07:18:bf:50:3e:34:be:0e:38:ed:72:
ae:f2:25:01:e3:70:32:76:89:c2:99:c3:a4:13:00:
cf:fe:47:d9:41:c8:94:fa:d9:1c:ec:0d:ac:cd:ac:
e5:ba:a6:46:cc:86:27:e0:76:4c:8c:ea:02:62:5e:
5a:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:16:DA:B5:BD:14:75:CF:56:46:6D:26:9C:00:95:FE:62:F1:DC:B7
X509v3 Authority Key Identifier:
keyid:2E:F9:57:AB:A2:EF:00:35:28:50:E2:02:46:4C:71:D3:3C:A8:14:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LvlXq6LvADUoUOICRkxx0zyoFEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/sxbatb0Udc9WRm0mnACV_mLx3Lc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.51.134.0/23
193.52.35.0/24
193.54.56.0/24
194.57.236.0/23
194.199.93.0-194.199.94.255
194.199.96.0/24
194.254.98.0/24
194.254.197.0/24
195.83.189.0/24
195.221.169.0/24
195.221.172.0/24
Signature Algorithm: sha256WithRSAEncryption
40:59:45:02:fc:d1:e1:59:18:7b:85:a1:e5:ff:2e:c5:a5:d5:
f6:56:f1:9f:df:55:b0:2d:20:83:3d:8f:25:24:1a:fe:0b:3b:
fa:73:94:5b:71:20:32:c0:0d:e7:56:4b:30:c8:5b:b9:08:dd:
7b:28:e0:8e:16:36:48:04:f0:47:d8:be:0e:92:eb:93:03:cd:
30:ec:82:27:ff:67:26:35:36:87:1d:3a:26:a7:3a:eb:7e:1a:
8d:16:b0:58:09:aa:dc:a9:98:3c:d9:2a:c1:1c:42:94:02:ba:
c7:b5:76:7a:2e:df:9d:ab:61:2b:aa:fe:79:2d:29:dd:18:c6:
70:93:e5:38:9c:b4:d6:3b:6e:93:be:6e:ed:ea:74:b1:49:7c:
1b:14:fd:71:39:e7:6f:26:ee:85:c2:1e:09:2e:c5:cf:d2:51:
6e:2c:28:aa:73:c8:22:35:a7:3e:a1:fb:b8:9f:76:d3:0a:4c:
4a:ad:ed:d7:42:bb:56:2f:62:7e:b2:a9:36:9e:1a:0d:c5:0a:
e9:40:a7:33:ef:aa:d1:6c:27:ea:36:83:c3:e9:3e:78:c4:bc:
00:79:b5:45:3a:61:88:b6:81:87:64:4f:0b:c0:51:f3:46:8f:
90:00:e1:66:0e:dc:e4:62:de:7f:31:09:8b:91:f6:81:d2:cf:
03:4f:8e:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:51:58 2024 by rpki-client on console-ams.rpki-client.org