Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/906768-cdeb-40d2-b2a2-63cd3c861d8e/1/4yLdBO8cpBuGuWHJINUNCLgh8Ag.roa
File: 4yLdBO8cpBuGuWHJINUNCLgh8Ag.roa (raw, json)
Hash identifier: Sdlh7uXTCyVvrVJMrLPCqUEMx5i2F7T4NaNg/nnQO6E=
Subject key identifier: E3:22:DD:04:EF:1C:A4:1B:86:B9:61:C9:20:D5:0D:08:B8:21:F0:08
Certificate issuer: /CN=0cb5d3e8ddcf524c20c32387ed3103d4cbf2a56a
Certificate serial: 018CCA2A327A22866D287EE1A343A6B13139
Authority key identifier: 0C:B5:D3:E8:DD:CF:52:4C:20:C3:23:87:ED:31:03:D4:CB:F2:A5:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DLXT6N3PUkwgwyOH7TED1MvypWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/906768-cdeb-40d2-b2a2-63cd3c861d8e/1/4yLdBO8cpBuGuWHJINUNCLgh8Ag.roa
Signing time: Tue 02 Jan 2024 12:33:32 +0000
ROA not before: Tue 02 Jan 2024 12:33:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3308
IP address blocks: 213.150.32.0/19 maxlen: 19
194.19.192.0/19 maxlen: 19
217.74.128.0/19 maxlen: 19
213.173.224.0/19 maxlen: 19
212.97.192.0/18 maxlen: 18
85.235.224.0/19 maxlen: 19
194.19.128.0/18 maxlen: 18
62.198.0.0/15 maxlen: 15
194.255.0.0/16 maxlen: 16
62.44.128.0/18 maxlen: 18
185.223.12.0/22 maxlen: 22
195.184.96.0/19 maxlen: 19
89.233.0.0/18 maxlen: 18
89.233.0.0/24 maxlen: 24
2a01:3a0::/32 maxlen: 32
2a01:3a0::/48 maxlen: 48
2a01:3a0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/906768-cdeb-40d2-b2a2-63cd3c861d8e/1/DLXT6N3PUkwgwyOH7TED1MvypWo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/906768-cdeb-40d2-b2a2-63cd3c861d8e/1/DLXT6N3PUkwgwyOH7TED1MvypWo.mft
rsync://rpki.ripe.net/repository/DEFAULT/DLXT6N3PUkwgwyOH7TED1MvypWo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Dec 2024 18:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:32:7a:22:86:6d:28:7e:e1:a3:43:a6:b1:31:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cb5d3e8ddcf524c20c32387ed3103d4cbf2a56a
Validity
Not Before: Jan 2 12:33:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e322dd04ef1ca41b86b961c920d50d08b821f008
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:3b:e5:fc:9b:5c:77:8c:25:0e:85:2e:96:6e:
1d:25:39:9a:1e:b2:ab:69:c9:7a:d4:37:3e:48:04:
5a:86:8e:27:81:0a:19:5c:3a:fc:d7:c9:e3:61:4c:
c3:44:df:c6:8c:30:dc:f2:52:df:e6:ef:7d:dc:48:
15:17:ce:62:9f:20:77:53:97:a1:e4:d8:95:c7:df:
09:46:57:f0:05:1e:45:8f:16:d0:c4:07:aa:a3:a0:
9c:11:af:7f:4a:67:52:ac:8b:29:95:f0:b3:03:49:
62:c4:a8:b2:d4:4d:a6:91:63:d7:0c:bc:e4:38:98:
71:6f:74:cd:2b:58:1e:06:6a:45:a5:33:34:75:e3:
62:48:b4:14:27:ef:11:69:16:08:16:fa:46:29:b7:
53:af:5e:cc:49:bf:76:c0:9c:2b:88:70:1e:70:c9:
5b:c4:16:b9:6c:48:45:91:e6:da:a3:53:da:cf:28:
a9:cb:9b:f7:7d:e4:58:f0:ab:b5:d6:86:86:8e:d1:
41:2d:4d:a3:06:e6:2b:1c:a7:08:a6:b7:d0:2d:45:
e7:3f:d6:9d:92:b7:a8:25:69:e8:2b:9c:ca:a6:cd:
76:86:97:88:91:b9:71:7e:45:65:e4:52:c5:bb:a5:
93:a4:81:c9:8a:b8:ba:e1:f1:70:46:5e:85:84:c6:
7b:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:22:DD:04:EF:1C:A4:1B:86:B9:61:C9:20:D5:0D:08:B8:21:F0:08
X509v3 Authority Key Identifier:
keyid:0C:B5:D3:E8:DD:CF:52:4C:20:C3:23:87:ED:31:03:D4:CB:F2:A5:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DLXT6N3PUkwgwyOH7TED1MvypWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/906768-cdeb-40d2-b2a2-63cd3c861d8e/1/4yLdBO8cpBuGuWHJINUNCLgh8Ag.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/906768-cdeb-40d2-b2a2-63cd3c861d8e/1/DLXT6N3PUkwgwyOH7TED1MvypWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.44.128.0/18
62.198.0.0/15
85.235.224.0/19
89.233.0.0/18
185.223.12.0/22
194.19.128.0-194.19.223.255
194.255.0.0/16
195.184.96.0/19
212.97.192.0/18
213.150.32.0/19
213.173.224.0/19
217.74.128.0/19
IPv6:
2a01:3a0::/29
Signature Algorithm: sha256WithRSAEncryption
69:25:0d:c9:a7:74:3b:5a:29:06:b2:ae:b4:67:1d:1c:4e:d9:
66:9e:02:71:13:1c:b9:49:3e:56:0c:b0:70:86:10:37:7d:92:
a1:35:02:8c:75:9b:c8:b0:4d:44:bb:8e:bc:51:13:a2:c8:14:
d2:49:74:3e:b2:3f:d2:e7:ef:ae:bc:19:02:c9:c0:e3:85:50:
8a:45:d5:08:8e:ea:89:b2:e3:93:a3:4e:a0:c8:3e:52:24:1b:
c2:48:17:68:1c:20:40:54:fd:88:a4:04:ce:cf:25:b9:f0:65:
81:15:03:c6:5b:9a:35:a0:21:b9:fd:ca:f7:93:e0:6f:88:01:
74:ff:11:41:0d:14:3d:ad:10:d9:72:00:3f:b6:82:84:22:fc:
b9:49:c3:75:7e:e5:28:a9:8f:c1:ad:40:b7:41:32:31:d9:d9:
84:a9:50:d8:b5:88:b6:0c:4e:38:ba:4f:7d:c3:c2:27:a4:b2:
e8:7b:aa:36:67:2c:a1:43:ef:93:4d:1c:18:69:21:1d:a0:15:
ea:1e:1a:95:0b:5b:14:ea:9f:5d:03:df:94:76:d4:a5:8c:45:
b4:13:ad:39:5f:77:cd:6c:45:03:eb:4a:33:b1:b2:11:8f:94:
2b:4b:cb:e3:0c:f8:e5:67:37:4b:66:5a:fb:f9:e4:2c:fe:7a:
8c:8a:1d:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 23:54:52 2024 by rpki-client on console-fra.rpki-client.org