Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/e4b00c-a929-48d4-b7d8-7688731bed9d/1/oKnRWjz2yMYPZbr3mX-T50yAbQ0.roa
File: oKnRWjz2yMYPZbr3mX-T50yAbQ0.roa (raw, json)
Hash identifier: GllpquUEth97YunfIWL8a49YXnK6LE5huBM73xu/osw=
Subject key identifier: A0:A9:D1:5A:3C:F6:C8:C6:0F:65:BA:F7:99:7F:93:E7:4C:80:6D:0D
Certificate issuer: /CN=36482f2efefb927a3caffea1d91f2417f3d2e7d7
Certificate serial: 018CC49348E44B61DA2CF7D491F4D3627AAC
Authority key identifier: 36:48:2F:2E:FE:FB:92:7A:3C:AF:FE:A1:D9:1F:24:17:F3:D2:E7:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NkgvLv77kno8r_6h2R8kF_PS59c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/e4b00c-a929-48d4-b7d8-7688731bed9d/1/oKnRWjz2yMYPZbr3mX-T50yAbQ0.roa
Signing time: Mon 01 Jan 2024 10:30:35 +0000
ROA not before: Mon 01 Jan 2024 10:30:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51871
IP address blocks: 185.239.22.0/24 maxlen: 24
185.239.21.0/24 maxlen: 24
185.239.20.0/24 maxlen: 24
185.239.20.0/22 maxlen: 22
185.239.23.0/24 maxlen: 24
193.34.31.0/24 maxlen: 24
193.34.30.0/24 maxlen: 24
193.34.29.0/24 maxlen: 24
193.34.28.0/22 maxlen: 22
193.34.28.0/24 maxlen: 24
2a13:9141::/32 maxlen: 32
2a13:9142::/32 maxlen: 32
2a13:9140::/29 maxlen: 29
2a13:9140::/32 maxlen: 32
2001:67c:21b0::/48 maxlen: 48
2a13:9143::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/e4b00c-a929-48d4-b7d8-7688731bed9d/1/NkgvLv77kno8r_6h2R8kF_PS59c.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/e4b00c-a929-48d4-b7d8-7688731bed9d/1/NkgvLv77kno8r_6h2R8kF_PS59c.mft
rsync://rpki.ripe.net/repository/DEFAULT/NkgvLv77kno8r_6h2R8kF_PS59c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 07:02:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:48:e4:4b:61:da:2c:f7:d4:91:f4:d3:62:7a:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36482f2efefb927a3caffea1d91f2417f3d2e7d7
Validity
Not Before: Jan 1 10:30:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a0a9d15a3cf6c8c60f65baf7997f93e74c806d0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:96:68:ec:cb:d0:60:17:67:9f:d4:ca:d1:9e:
3f:e6:2a:04:e7:ad:7c:ea:7f:6f:15:7c:42:3a:de:
20:e8:5f:80:7a:01:96:d9:60:df:15:f3:9f:de:5d:
b4:41:3f:db:f7:57:9e:03:e3:35:42:db:72:a2:a5:
9c:75:25:a9:e6:b9:3c:d3:d4:a0:65:ff:dd:9e:10:
5a:9b:17:6f:df:a2:a8:43:7b:7e:69:ae:9d:d8:1d:
02:6a:1f:4a:05:df:50:89:97:21:98:c6:b3:12:60:
f5:57:80:83:d2:6a:7f:9c:7d:ca:16:33:4e:3b:94:
7b:2b:ac:83:56:b4:b1:d5:cb:0a:5b:02:ee:2b:20:
75:d0:d3:f0:ca:0a:d3:cf:89:40:e0:44:b9:8e:e5:
3d:7a:20:0b:64:d1:b1:9c:ee:f7:1f:0a:aa:b3:1a:
34:a0:de:63:14:33:91:8f:95:a0:2e:69:7f:e0:69:
f6:69:78:e8:00:74:98:57:1e:f4:16:af:37:2c:e3:
b6:54:4a:6d:ea:14:94:94:ed:20:0a:84:2a:cc:c2:
19:c6:b7:29:dd:45:aa:93:59:44:f6:29:4b:7f:2d:
69:34:c9:2f:34:f7:ca:52:0e:54:a6:04:15:ed:a9:
f1:7f:3e:af:bd:dc:a7:79:51:8e:a7:e8:d0:34:e7:
da:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:A9:D1:5A:3C:F6:C8:C6:0F:65:BA:F7:99:7F:93:E7:4C:80:6D:0D
X509v3 Authority Key Identifier:
keyid:36:48:2F:2E:FE:FB:92:7A:3C:AF:FE:A1:D9:1F:24:17:F3:D2:E7:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NkgvLv77kno8r_6h2R8kF_PS59c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/e4b00c-a929-48d4-b7d8-7688731bed9d/1/oKnRWjz2yMYPZbr3mX-T50yAbQ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/e4b00c-a929-48d4-b7d8-7688731bed9d/1/NkgvLv77kno8r_6h2R8kF_PS59c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.239.20.0/22
193.34.28.0/22
IPv6:
2001:67c:21b0::/48
2a13:9140::/29
Signature Algorithm: sha256WithRSAEncryption
68:82:e2:0d:2e:f7:6c:49:3a:3d:c7:02:b7:31:11:0d:8f:dc:
91:4c:96:6d:fb:0d:52:98:c6:ad:45:4e:a2:94:d9:25:53:c9:
86:da:48:b3:62:73:cc:47:1d:c5:dd:4e:0a:bb:23:f0:8c:7c:
69:87:e4:bb:39:65:ff:fb:a3:e7:d7:63:65:d9:ff:78:ad:fb:
0a:de:b8:58:ff:d3:f4:d0:95:52:cc:93:2c:ca:3a:10:11:4c:
54:3c:5d:dc:2a:36:2d:ac:59:f1:c6:82:2d:fd:13:37:9d:b5:
c2:92:77:16:fa:41:a9:6f:5e:dc:d6:b6:1e:38:29:2e:33:45:
4f:23:1b:10:43:ce:c6:45:2f:f9:fe:1f:df:01:2a:fb:6f:9e:
30:60:ae:b6:c5:81:3a:18:d5:f8:51:12:3e:df:66:52:e8:aa:
75:6e:af:72:3f:a0:7a:53:74:e6:8f:40:39:87:82:a0:dc:b0:
a4:61:9b:b7:20:e3:4c:d4:95:f7:9f:79:f1:f0:eb:b8:3e:92:
f4:41:04:40:96:d9:1c:d0:0c:93:39:ed:4e:5b:92:bd:92:5e:
c0:da:94:4e:be:50:2e:0d:d1:bf:e1:d6:4a:14:76:7e:e5:4e:
ca:26:fa:6b:93:0d:b3:e1:28:b3:9f:00:94:de:60:f5:29:26:
60:79:7e:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 12:34:48 2024 by rpki-client on console-fra.rpki-client.org