Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/t2XSkowOtsa8Vl9zK6u9hLrF5-k.roa
File: t2XSkowOtsa8Vl9zK6u9hLrF5-k.roa (raw, json)
Hash identifier: GSgf174wkCqKq3liaX0z2GrdAcC/OFWE18CAH6cAsCQ=
Subject key identifier: B7:65:D2:92:8C:0E:B6:C6:BC:56:5F:73:2B:AB:BD:84:BA:C5:E7:E9
Certificate issuer: /CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Certificate serial: 018CCA2A8DB58C08C2D3B7B8A38CAD39ABCF
Authority key identifier: 05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/t2XSkowOtsa8Vl9zK6u9hLrF5-k.roa
Signing time: Tue 02 Jan 2024 12:33:55 +0000
ROA not before: Tue 02 Jan 2024 12:33:55 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3356
IP address blocks: 83.245.70.0/24 maxlen: 24
83.245.69.0/24 maxlen: 24
83.245.80.0/20 maxlen: 20
80.253.124.0/24 maxlen: 24
89.167.152.0/22 maxlen: 22
89.167.146.0/24 maxlen: 24
89.167.166.0/24 maxlen: 24
83.245.32.0/22 maxlen: 22
213.228.229.0/24 maxlen: 24
213.228.243.0/24 maxlen: 24
213.228.253.0/24 maxlen: 24
80.253.104.0/24 maxlen: 24
80.253.115.0/24 maxlen: 24
89.167.144.0/24 maxlen: 24
213.228.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:8d:b5:8c:08:c2:d3:b7:b8:a3:8c:ad:39:ab:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Validity
Not Before: Jan 2 12:33:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b765d2928c0eb6c6bc565f732babbd84bac5e7e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:c7:1e:ef:5d:f1:48:ac:01:15:b1:e8:5e:0a:
61:bb:d7:c0:ad:d9:1c:77:97:c8:bd:e5:24:73:ad:
d8:04:36:eb:7a:bc:48:9c:99:67:1d:d5:89:b9:e2:
b5:69:dc:12:4f:3a:f9:87:12:0a:1a:35:0b:0c:dd:
f9:43:9c:f6:e1:24:ff:29:12:63:f2:41:03:50:7e:
87:9f:a2:f9:81:69:fb:83:29:45:4e:67:91:22:5a:
a2:2b:ca:33:9a:3f:80:97:6b:e0:9a:6a:43:80:44:
df:05:a4:6c:78:61:cd:42:6e:8a:d7:b3:b3:a1:30:
0f:e6:35:e9:3f:6e:14:a0:2d:2a:c5:83:e4:25:29:
fb:d6:a7:2b:a1:0d:2d:e7:2e:62:48:e3:77:fe:9e:
9c:92:6e:01:6e:82:3c:f7:2d:03:a9:f8:91:77:ab:
34:62:a6:c9:61:3e:6d:5d:6c:9e:41:98:d9:5b:26:
2b:a0:7e:d1:17:a7:23:ae:34:6e:01:ac:0e:e2:e8:
38:c1:25:38:d6:e4:b3:bf:42:1f:73:42:49:ac:6a:
b5:a5:ff:ae:7d:2b:6f:98:51:ab:70:92:e5:6a:9d:
c7:24:a5:97:30:48:7d:c7:0b:a8:3d:09:c5:2e:9b:
87:a4:95:7f:a7:3d:f9:e9:2b:5e:33:6b:07:25:0f:
3a:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:65:D2:92:8C:0E:B6:C6:BC:56:5F:73:2B:AB:BD:84:BA:C5:E7:E9
X509v3 Authority Key Identifier:
keyid:05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/t2XSkowOtsa8Vl9zK6u9hLrF5-k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.253.104.0/24
80.253.115.0/24
80.253.124.0/24
83.245.32.0/22
83.245.69.0-83.245.70.255
83.245.80.0/20
89.167.144.0/24
89.167.146.0/24
89.167.152.0/22
89.167.166.0/24
213.228.204.0/24
213.228.229.0/24
213.228.243.0/24
213.228.253.0/24
Signature Algorithm: sha256WithRSAEncryption
11:b6:6c:11:2a:b5:22:60:f6:90:a9:08:16:08:69:93:22:a8:
45:b9:95:d9:3d:bb:fb:15:e7:56:da:4a:70:0b:83:15:12:3d:
03:52:49:2f:71:4c:80:b0:d9:34:4c:2b:8f:da:90:92:e6:5e:
4d:09:a2:fd:af:e6:26:d0:0d:94:4e:0b:e2:01:65:ab:22:2d:
15:01:68:18:58:63:51:37:93:28:a9:47:07:04:9c:ea:85:6f:
ee:d3:bf:71:91:e5:eb:f6:df:14:a5:2a:07:8f:73:ad:d1:76:
0a:d7:04:54:77:20:5e:13:4a:64:70:2e:2f:a0:10:7e:63:32:
48:da:3c:f4:e2:24:98:cf:eb:98:e5:fd:a0:ef:50:09:33:ce:
31:3f:b7:d5:6c:a7:c4:f6:80:38:b5:24:e2:f0:81:ab:d3:0a:
fb:08:00:97:b0:35:03:a7:0f:ff:5f:92:b1:ac:92:69:e6:03:
bf:f0:23:78:32:2c:67:c5:64:13:53:e6:91:63:26:ba:1e:29:
5d:cd:74:42:d1:c2:2b:cf:78:8f:41:aa:d0:34:45:f8:52:9f:
b7:44:41:69:c5:c9:f6:9c:0b:2d:e5:dd:7d:b2:af:45:06:1d:
48:f8:b4:59:08:71:a6:6c:57:b7:07:81:6d:ad:4a:39:60:62:
9c:40:82:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 18:32:33 2024 by rpki-client on console-ams.rpki-client.org