Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/5260d0-1855-4f30-b8ef-7c998079a6a9/1/2DtCATn9areBWehCstsaQ6tJmok.roa
File: 2DtCATn9areBWehCstsaQ6tJmok.roa (raw, json)
Hash identifier: ZlgdKIX1YksCIzF4pp21gt/fcGTxPVQJ49kR2TG29Ro=
Subject key identifier: D8:3B:42:01:39:FD:6A:B7:81:59:E8:42:B2:DB:1A:43:AB:49:9A:89
Certificate issuer: /CN=5cfe3881f3c44774f51cc75ee7e6f91c5565a606
Certificate serial: 01935045783F6F7AB9BC96112AEE8EA113E4
Authority key identifier: 5C:FE:38:81:F3:C4:47:74:F5:1C:C7:5E:E7:E6:F9:1C:55:65:A6:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XP44gfPER3T1HMde5-b5HFVlpgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/5260d0-1855-4f30-b8ef-7c998079a6a9/1/2DtCATn9areBWehCstsaQ6tJmok.roa
Signing time: Thu 21 Nov 2024 19:49:10 +0000
ROA not before: Thu 21 Nov 2024 19:49:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61162
IP address blocks: 185.133.68.0/22 maxlen: 24
193.104.32.0/24 maxlen: 24
2a05:2440::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/5260d0-1855-4f30-b8ef-7c998079a6a9/1/XP44gfPER3T1HMde5-b5HFVlpgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/5260d0-1855-4f30-b8ef-7c998079a6a9/1/XP44gfPER3T1HMde5-b5HFVlpgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/XP44gfPER3T1HMde5-b5HFVlpgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:50:45:78:3f:6f:7a:b9:bc:96:11:2a:ee:8e:a1:13:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cfe3881f3c44774f51cc75ee7e6f91c5565a606
Validity
Not Before: Nov 21 19:49:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d83b420139fd6ab78159e842b2db1a43ab499a89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:9b:1e:3e:cb:cf:e2:35:9c:b9:1b:8a:29:ca:
24:16:46:ca:0f:98:f1:a2:8a:20:d8:ad:95:ca:29:
ea:b1:6a:66:c7:07:4d:dc:c6:24:f8:fe:8d:06:cc:
2d:9d:ea:1a:6b:61:88:46:6c:6e:3e:91:28:05:77:
a5:a6:15:0d:2c:33:cf:62:3e:09:88:7d:d0:bc:ad:
39:a7:5b:a1:44:9f:e9:c3:25:e1:21:68:61:4b:2a:
25:f3:84:d0:db:88:57:95:35:e9:8d:0e:ac:0a:4c:
01:62:56:bf:e7:0a:29:d8:ea:b4:ea:f5:e2:48:43:
3c:83:71:93:8b:b2:52:9e:c8:90:8e:a2:a7:f9:03:
8f:eb:c4:88:7b:98:d2:80:f6:64:91:28:59:17:74:
b8:a2:64:37:23:90:1d:f1:b9:36:3a:0c:e1:31:dd:
ec:43:3f:1c:98:48:18:40:47:ea:20:ed:9e:18:36:
66:13:20:96:b1:c2:88:8a:72:44:63:a8:52:68:8b:
c8:27:11:8a:c4:39:0f:70:1e:bf:d7:30:76:f9:39:
e0:23:c6:f3:69:fa:5b:44:98:c2:f9:78:d0:ee:df:
ff:7f:e8:91:9c:b8:d0:21:dc:64:32:d8:04:34:96:
9c:23:1d:f2:1b:f8:57:a6:02:68:f9:fa:36:9f:bf:
0e:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:3B:42:01:39:FD:6A:B7:81:59:E8:42:B2:DB:1A:43:AB:49:9A:89
X509v3 Authority Key Identifier:
keyid:5C:FE:38:81:F3:C4:47:74:F5:1C:C7:5E:E7:E6:F9:1C:55:65:A6:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XP44gfPER3T1HMde5-b5HFVlpgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/5260d0-1855-4f30-b8ef-7c998079a6a9/1/2DtCATn9areBWehCstsaQ6tJmok.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/5260d0-1855-4f30-b8ef-7c998079a6a9/1/XP44gfPER3T1HMde5-b5HFVlpgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.133.68.0/22
193.104.32.0/24
IPv6:
2a05:2440::/29
Signature Algorithm: sha256WithRSAEncryption
b3:3c:57:c6:39:72:d6:b5:d5:9c:84:52:a2:be:ba:1d:88:13:
43:e7:f2:b6:8a:b4:15:dc:83:96:7f:4d:80:69:de:28:19:2c:
6d:88:aa:f9:ba:2f:16:ce:f4:f9:21:c8:41:d6:f4:81:db:f5:
07:ae:dc:3e:9b:9c:e5:5b:9c:c1:77:84:b5:b9:2c:c8:10:02:
ce:df:f0:d6:f3:a7:07:19:3d:ea:37:30:12:26:39:7b:69:07:
e3:e9:86:a6:db:5c:37:b3:ac:37:c6:32:8f:f3:db:fc:b2:4d:
4d:b6:eb:26:e4:a7:f5:22:e9:dd:81:ce:2f:35:a2:57:b4:a4:
d1:87:67:8f:45:ea:ec:88:35:3c:5f:97:b0:0e:36:56:e8:14:
3c:09:70:47:e0:8d:1f:db:e5:06:99:48:6e:3b:45:6a:d7:81:
57:15:30:d2:86:a0:be:42:71:92:93:82:f1:e7:66:8b:f8:63:
dd:83:80:4e:fb:aa:a1:a3:96:34:e0:fc:96:3d:6f:2c:d1:ad:
4a:20:dd:d7:9f:38:ec:42:73:07:9d:38:a5:91:f3:31:b3:87:
f2:38:58:ac:eb:1b:a8:77:3e:a0:8d:77:2d:a2:f5:68:e9:7d:
96:90:21:a9:a2:94:e5:90:b3:9f:91:c1:32:eb:33:79:32:54:
09:87:da:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:06:19 2024 by rpki-client on console-ams.rpki-client.org