Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/M9fLJNPxdFy9gk7L0uBraRV2p7w.roa
File: M9fLJNPxdFy9gk7L0uBraRV2p7w.roa (raw, json)
Hash identifier: U4S6Bnr07HQ0HigUdzRskkza9s5/6j39lFR6hUMpRBA=
Subject key identifier: 33:D7:CB:24:D3:F1:74:5C:BD:82:4E:CB:D2:E0:6B:69:15:76:A7:BC
Certificate issuer: /CN=f0ff2c6229af763a99f5349a32510df4a4526143
Certificate serial: 018CC94D344FD71BECFBA9307D08E73F1810
Authority key identifier: F0:FF:2C:62:29:AF:76:3A:99:F5:34:9A:32:51:0D:F4:A4:52:61:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8P8sYimvdjqZ9TSaMlEN9KRSYUM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/M9fLJNPxdFy9gk7L0uBraRV2p7w.roa
Signing time: Tue 02 Jan 2024 08:32:09 +0000
ROA not before: Tue 02 Jan 2024 08:32:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7155
IP address blocks: 193.92.8.0/22 maxlen: 24
213.16.192.0/20 maxlen: 24
194.219.218.0/23 maxlen: 24
185.4.88.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.mft
rsync://rpki.ripe.net/repository/DEFAULT/8P8sYimvdjqZ9TSaMlEN9KRSYUM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 13 May 2024 19:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:34:4f:d7:1b:ec:fb:a9:30:7d:08:e7:3f:18:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0ff2c6229af763a99f5349a32510df4a4526143
Validity
Not Before: Jan 2 08:32:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=33d7cb24d3f1745cbd824ecbd2e06b691576a7bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:fd:3e:15:65:8e:95:52:bd:ad:72:19:92:4b:
89:ae:af:30:ed:06:33:fe:e4:cd:87:28:33:db:57:
9f:d5:0e:52:3b:28:cd:fa:cb:c2:31:7a:af:e8:be:
01:ab:d3:fd:55:c6:1a:1c:23:34:1a:9b:a5:5b:8d:
12:19:fa:a4:db:f6:e8:63:0d:ca:f9:51:ea:c4:d7:
89:b2:88:c5:fe:72:95:47:17:23:8b:cc:90:55:76:
08:3c:25:cd:3d:95:4c:6f:12:05:53:6f:36:14:d0:
f9:b2:48:07:47:da:b8:17:d1:33:10:a1:f1:fc:af:
64:b5:d1:92:cb:49:af:8e:9a:67:93:ca:f2:cd:15:
9c:59:2c:45:d5:3b:c1:b0:a9:dc:55:03:e5:ad:ac:
13:3e:ae:67:60:8b:f1:ec:c4:46:3a:25:2a:37:d2:
aa:8c:35:43:17:18:b0:c5:3e:77:ab:07:75:52:0a:
54:bf:d9:87:50:7b:2b:db:65:30:5e:b7:01:dc:35:
ea:09:61:8c:be:cd:b7:6b:84:3f:5a:f3:fb:e6:a4:
3a:f2:36:a5:f4:7a:27:98:87:c7:14:46:34:56:db:
cd:a4:8b:6a:5b:14:f9:18:3b:b7:d9:89:7b:b4:b4:
02:3c:e3:ab:b9:b7:d9:80:fb:fb:fc:91:e7:76:9e:
9e:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:D7:CB:24:D3:F1:74:5C:BD:82:4E:CB:D2:E0:6B:69:15:76:A7:BC
X509v3 Authority Key Identifier:
keyid:F0:FF:2C:62:29:AF:76:3A:99:F5:34:9A:32:51:0D:F4:A4:52:61:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8P8sYimvdjqZ9TSaMlEN9KRSYUM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/M9fLJNPxdFy9gk7L0uBraRV2p7w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.4.88.0/22
193.92.8.0/22
194.219.218.0/23
213.16.192.0/20
Signature Algorithm: sha256WithRSAEncryption
2b:bb:3b:54:82:8a:d7:09:ec:67:08:a6:39:32:70:88:49:13:
a4:70:a9:74:05:33:23:9b:1e:56:69:fd:83:b4:6d:cb:af:b0:
5c:fd:c1:cf:6c:88:94:8e:86:da:c3:f9:21:44:52:e1:93:7e:
1c:9b:2f:a6:f4:4b:d8:7b:17:1a:3a:de:21:eb:a6:9b:3b:a7:
a4:ef:43:de:89:1e:57:c1:ba:78:7e:19:05:41:86:47:77:f9:
39:b0:1f:ec:29:7e:c1:8b:8d:ec:85:b3:a3:f7:64:ab:fb:a2:
a4:bd:4f:49:9f:a4:6c:4b:ce:f5:ea:47:8c:91:d4:e6:35:d3:
6c:e7:88:ae:f0:79:c7:6d:1e:22:0a:f5:f5:72:45:a0:f8:a4:
9e:ec:92:43:f5:5d:d3:fd:e5:df:e9:84:77:3d:1b:36:bf:a7:
71:e9:78:ef:5a:86:6c:7d:9f:ba:90:65:34:11:00:c2:a5:7b:
bb:fd:0a:5e:de:f3:0b:39:a5:3e:11:d1:5b:75:29:d0:24:61:
19:18:d8:9d:8d:19:54:60:bf:18:3d:a2:14:c0:5a:98:24:09:
a5:5e:08:f7:91:c2:a7:41:e9:13:26:40:95:fd:fd:3a:1d:56:
35:d4:91:c9:02:80:3c:d8:f7:e0:f5:7e:0c:8d:a2:a7:38:ff:
29:06:06:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 13 01:07:55 2024 by rpki-client on console-fra.rpki-client.org