Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/4cae10-37a5-40ef-89d5-5701d01c1e87/1/8kRaQXRDJQ4I7a3f07040S3USZo.roa
File: 8kRaQXRDJQ4I7a3f07040S3USZo.roa (raw, json)
Hash identifier: ErugwSJpUUl8ojXnUH0nJh6es3NqSrCRZZJPPptIdz4=
Subject key identifier: F2:44:5A:41:74:43:25:0E:08:ED:AD:DF:D3:BD:38:D1:2D:D4:49:9A
Certificate issuer: /CN=9f5ff3de10a31bbf5701c0bdb26c6508017da2ca
Certificate serial: 018CCA29BEAACB97AD00D6C63083863807BE
Authority key identifier: 9F:5F:F3:DE:10:A3:1B:BF:57:01:C0:BD:B2:6C:65:08:01:7D:A2:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n1_z3hCjG79XAcC9smxlCAF9oso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/4cae10-37a5-40ef-89d5-5701d01c1e87/1/8kRaQXRDJQ4I7a3f07040S3USZo.roa
Signing time: Tue 02 Jan 2024 12:33:02 +0000
ROA not before: Tue 02 Jan 2024 12:33:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39431
IP address blocks: 176.108.112.0/24 maxlen: 24
176.108.111.0/24 maxlen: 24
176.108.112.0/22 maxlen: 24
176.108.108.0/24 maxlen: 24
176.108.108.0/22 maxlen: 24
176.108.109.0/24 maxlen: 24
176.108.106.0/24 maxlen: 24
176.108.106.0/23 maxlen: 24
176.108.116.0/24 maxlen: 24
176.108.116.0/22 maxlen: 24
176.108.112.0/21 maxlen: 24
176.108.118.0/24 maxlen: 24
176.108.117.0/24 maxlen: 24
176.108.120.0/22 maxlen: 24
176.108.119.0/24 maxlen: 24
193.93.17.0/24 maxlen: 24
193.93.16.0/22 maxlen: 24
193.93.16.0/23 maxlen: 24
193.93.16.0/24 maxlen: 24
193.93.19.0/24 maxlen: 24
193.93.18.0/23 maxlen: 24
193.93.18.0/24 maxlen: 24
176.108.96.0/21 maxlen: 24
176.108.96.0/20 maxlen: 24
176.108.100.0/22 maxlen: 24
176.108.103.0/24 maxlen: 24
176.108.102.0/24 maxlen: 24
176.108.104.0/24 maxlen: 24
176.108.104.0/22 maxlen: 24
176.108.104.0/21 maxlen: 24
2001:678:468::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/4cae10-37a5-40ef-89d5-5701d01c1e87/1/n1_z3hCjG79XAcC9smxlCAF9oso.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/4cae10-37a5-40ef-89d5-5701d01c1e87/1/n1_z3hCjG79XAcC9smxlCAF9oso.mft
rsync://rpki.ripe.net/repository/DEFAULT/n1_z3hCjG79XAcC9smxlCAF9oso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:be:aa:cb:97:ad:00:d6:c6:30:83:86:38:07:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f5ff3de10a31bbf5701c0bdb26c6508017da2ca
Validity
Not Before: Jan 2 12:33:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f2445a417443250e08edaddfd3bd38d12dd4499a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:5e:82:11:09:ad:d8:41:4a:2c:55:21:5e:72:
e6:bb:bc:53:4e:9a:59:90:00:91:9f:fc:a8:e6:80:
7c:8d:dc:d5:99:18:21:fc:4c:68:2e:f4:78:b1:b6:
47:46:62:fc:dd:56:3f:c2:d5:73:1c:07:9a:03:e9:
37:2d:5a:65:bc:4e:68:bc:a8:87:74:45:05:5b:81:
c1:01:a6:22:1c:a6:a2:53:60:cd:62:5b:a9:f6:46:
c3:15:ce:9b:13:67:88:c5:f0:d9:de:89:8f:6e:6b:
2c:5b:7b:a6:79:ea:e5:4c:a3:bf:1a:2c:c1:19:b2:
17:9c:fe:23:c5:cd:47:29:62:36:79:49:8e:8e:19:
b6:d6:fb:cf:50:4f:bd:d1:c6:4a:eb:8b:ed:6f:d2:
be:d7:50:b4:e7:6d:e3:03:3c:5e:fd:49:05:5c:88:
09:50:32:2e:fc:19:6e:49:c4:1d:47:18:05:42:7b:
e0:df:9f:b8:dd:4c:5e:4e:98:c3:ff:50:89:16:46:
2f:71:bb:cb:3e:4e:26:87:1c:38:e8:de:95:c6:79:
67:00:64:cb:c6:84:f9:c0:2a:ae:4b:e3:0d:07:53:
5f:70:12:37:28:3e:23:5d:c9:00:ce:52:c1:49:6a:
c8:f7:14:6e:3f:57:85:d1:66:6e:c1:05:2a:30:72:
4e:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:44:5A:41:74:43:25:0E:08:ED:AD:DF:D3:BD:38:D1:2D:D4:49:9A
X509v3 Authority Key Identifier:
keyid:9F:5F:F3:DE:10:A3:1B:BF:57:01:C0:BD:B2:6C:65:08:01:7D:A2:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n1_z3hCjG79XAcC9smxlCAF9oso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/4cae10-37a5-40ef-89d5-5701d01c1e87/1/8kRaQXRDJQ4I7a3f07040S3USZo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/4cae10-37a5-40ef-89d5-5701d01c1e87/1/n1_z3hCjG79XAcC9smxlCAF9oso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.108.96.0-176.108.123.255
193.93.16.0/22
IPv6:
2001:678:468::/48
Signature Algorithm: sha256WithRSAEncryption
ac:6e:f8:9f:0e:d2:c3:f5:58:e6:bd:c7:c2:ce:e1:13:90:72:
33:27:b4:22:0f:18:c3:cb:d2:c2:c2:9a:75:40:2f:d3:76:dd:
2b:b5:44:2d:20:69:2d:f4:5f:3a:63:62:1f:f4:5b:9c:00:7c:
fd:d7:9b:70:20:3f:41:c0:7b:d0:43:88:c4:b5:5f:27:ff:3b:
30:5c:5d:9b:f7:20:fe:12:ac:89:28:e1:53:3c:85:53:89:5f:
b8:c6:7f:c8:19:8f:14:13:3e:34:cd:bd:1e:6f:80:bb:4e:7e:
18:e8:93:c9:90:ca:56:ae:08:27:ba:6b:de:7b:60:ac:98:cb:
20:11:30:f4:3e:b3:f6:cd:17:13:52:84:a2:3b:50:e8:13:3d:
43:b0:51:51:d8:c9:ac:f8:f5:0d:45:ef:3c:d3:5d:74:98:73:
67:98:c4:63:10:97:a9:75:f1:92:cb:ce:28:b6:83:0e:60:89:
eb:56:87:be:8b:2e:04:43:df:60:ac:f2:4b:c3:cd:c1:14:75:
08:10:37:d8:74:93:36:85:50:d5:38:b2:4d:16:8b:5c:2d:e5:
bf:e2:4e:3c:42:3a:c9:b6:00:5d:68:c3:12:bf:5e:25:93:99:
58:c2:41:44:3f:f0:69:7f:14:8f:e3:62:8e:b9:ca:df:0a:c6:
f4:47:d1:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 22:37:13 2024 by rpki-client on console-ams.rpki-client.org