Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/GgQsIs2X4jy_mWcV8hRXXPuRX_w.roa
File: GgQsIs2X4jy_mWcV8hRXXPuRX_w.roa (raw, json)
Hash identifier: 6T6xIROgbi+b8XC+4EEJJIPICJxGus4uRH04Wdh50zo=
Subject key identifier: 1A:04:2C:22:CD:97:E2:3C:BF:99:67:15:F2:14:57:5C:FB:91:5F:FC
Certificate issuer: /CN=f0ff2c6229af763a99f5349a32510df4a4526143
Certificate serial: 018CC94D3515AB931BFD5D65747148D75E46
Authority key identifier: F0:FF:2C:62:29:AF:76:3A:99:F5:34:9A:32:51:0D:F4:A4:52:61:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8P8sYimvdjqZ9TSaMlEN9KRSYUM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/GgQsIs2X4jy_mWcV8hRXXPuRX_w.roa
Signing time: Tue 02 Jan 2024 08:32:09 +0000
ROA not before: Tue 02 Jan 2024 08:32:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29286
IP address blocks: 193.92.8.0/24 maxlen: 24
193.92.8.0/22 maxlen: 22
193.92.10.0/24 maxlen: 24
193.92.9.0/24 maxlen: 24
193.92.11.0/24 maxlen: 24
213.16.192.0/20 maxlen: 20
194.219.218.0/23 maxlen: 24
185.4.88.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.mft
rsync://rpki.ripe.net/repository/DEFAULT/8P8sYimvdjqZ9TSaMlEN9KRSYUM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 20:58:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:35:15:ab:93:1b:fd:5d:65:74:71:48:d7:5e:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0ff2c6229af763a99f5349a32510df4a4526143
Validity
Not Before: Jan 2 08:32:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1a042c22cd97e23cbf996715f214575cfb915ffc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:4b:4f:bc:a6:d6:d5:d1:6a:3c:df:8e:23:10:
1e:79:e2:f7:3d:13:36:4e:51:a1:9f:89:49:fe:3b:
47:69:45:23:a5:d4:51:a9:d5:15:e1:11:75:73:c3:
b2:e2:70:b0:33:94:32:09:cd:5a:99:45:01:28:b9:
b0:b9:68:a7:a2:b6:9c:42:8d:bf:f8:6a:bb:a2:63:
70:84:46:4a:69:c8:af:04:a9:02:64:5d:25:82:cb:
63:39:3f:90:f4:17:c0:5f:f0:9b:e1:73:44:65:a8:
8b:32:5d:55:2b:56:1b:00:78:ed:c6:b6:41:f6:f2:
0c:6a:92:7a:6d:fe:01:50:e3:9b:aa:94:37:c9:c5:
d8:34:54:84:5f:3f:c3:26:07:e7:ca:fc:1c:52:4e:
84:5f:e0:c1:26:8c:5e:7c:c7:51:24:71:c4:d6:70:
e5:28:8f:67:27:14:e0:40:c3:73:1b:cd:b0:a4:a1:
04:b9:a8:b9:da:d9:58:55:2a:0c:a3:12:8b:e0:ad:
f7:60:57:4f:90:5d:01:2a:d0:f9:47:da:d4:79:8c:
5d:a8:dd:12:c7:bb:52:76:94:39:10:d0:85:86:58:
29:64:70:d1:9a:83:65:8a:cf:34:c6:d8:a4:c6:92:
93:dd:3e:73:41:59:0d:e6:24:7c:c8:6b:b8:13:9d:
14:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:04:2C:22:CD:97:E2:3C:BF:99:67:15:F2:14:57:5C:FB:91:5F:FC
X509v3 Authority Key Identifier:
keyid:F0:FF:2C:62:29:AF:76:3A:99:F5:34:9A:32:51:0D:F4:A4:52:61:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8P8sYimvdjqZ9TSaMlEN9KRSYUM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/GgQsIs2X4jy_mWcV8hRXXPuRX_w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.4.88.0/22
193.92.8.0/22
194.219.218.0/23
213.16.192.0/20
Signature Algorithm: sha256WithRSAEncryption
2e:57:6b:d7:06:80:b6:72:b8:60:ba:4b:c6:c9:b4:23:8c:8a:
5d:e4:f1:57:01:01:fc:cf:7c:22:d6:c7:1e:19:09:da:4e:11:
08:eb:42:0b:ad:dd:fa:af:8e:14:68:41:d1:2f:0d:8c:5b:67:
91:99:1d:76:7b:ab:3d:be:c8:9e:f5:17:af:23:59:8d:d8:2a:
56:e0:c5:36:d6:43:1b:7f:49:b9:2c:0f:2f:ba:43:ed:a3:86:
d0:e6:18:26:45:b4:c8:f8:41:70:d5:8f:ef:02:44:81:53:75:
a4:12:73:ec:b7:2f:ac:18:76:af:eb:5e:87:f5:ee:df:70:a5:
2c:b0:18:44:9f:b4:ec:1b:00:a0:7f:38:13:39:6f:f2:c2:61:
a6:78:5e:39:e3:91:61:c3:2c:9d:de:c7:8a:f2:09:54:06:61:
12:b6:af:03:ed:7b:a3:4e:14:9d:e0:f2:af:6c:1f:e7:0f:74:
64:a2:0e:2d:2d:ca:c9:82:2e:37:28:36:71:51:0c:a6:0a:8d:
49:4b:74:e2:78:21:1d:27:03:c6:dd:cd:bd:3f:9e:01:ad:c2:
bf:55:9c:b0:17:1f:10:69:ae:a3:e7:d2:f2:11:84:9c:f4:e3:
a9:97:7b:00:c0:09:e4:f7:15:5b:45:20:9a:fc:86:3d:dd:f2:
fc:00:cc:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 03:53:07 2024 by rpki-client on console-fra.rpki-client.org