Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/cc8bfa-2b13-4674-a984-a5fdb570fe9a/1/ND7ELQRcfjhY4m13zhjVX7-HK2A.roa
File: ND7ELQRcfjhY4m13zhjVX7-HK2A.roa (raw, json)
Hash identifier: DNq0YViAtTotD/I2KnxdTjDVH8BkUCSyF9Qdr30nBNY=
Subject key identifier: 34:3E:C4:2D:04:5C:7E:38:58:E2:6D:77:CE:18:D5:5F:BF:87:2B:60
Certificate issuer: /CN=0620eadb2e1562b4e2e4f480772c36887a777f24
Certificate serial: 018CC26D11751F7E297B7CD9DD6929A26A69
Authority key identifier: 06:20:EA:DB:2E:15:62:B4:E2:E4:F4:80:77:2C:36:88:7A:77:7F:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BiDq2y4VYrTi5PSAdyw2iHp3fyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/cc8bfa-2b13-4674-a984-a5fdb570fe9a/1/ND7ELQRcfjhY4m13zhjVX7-HK2A.roa
Signing time: Mon 01 Jan 2024 00:29:36 +0000
ROA not before: Mon 01 Jan 2024 00:29:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201364
IP address blocks: 217.195.195.0/24 maxlen: 24
217.195.197.0/24 maxlen: 24
80.93.220.0/24 maxlen: 24
2a05:3040::/32 maxlen: 32
2a05:3046::/32 maxlen: 32
2a05:3045::/32 maxlen: 32
2a05:3042::/32 maxlen: 32
2a05:3041::/32 maxlen: 32
2a05:3040::/29 maxlen: 29
2a05:3043::/32 maxlen: 32
2a05:3044::/32 maxlen: 32
2a05:3047::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/cc8bfa-2b13-4674-a984-a5fdb570fe9a/1/BiDq2y4VYrTi5PSAdyw2iHp3fyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/cc8bfa-2b13-4674-a984-a5fdb570fe9a/1/BiDq2y4VYrTi5PSAdyw2iHp3fyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/BiDq2y4VYrTi5PSAdyw2iHp3fyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 07:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:11:75:1f:7e:29:7b:7c:d9:dd:69:29:a2:6a:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0620eadb2e1562b4e2e4f480772c36887a777f24
Validity
Not Before: Jan 1 00:29:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=343ec42d045c7e3858e26d77ce18d55fbf872b60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:98:52:0f:17:7c:47:d1:ac:19:38:6c:49:ef:
f7:55:ca:43:9a:c0:9f:a0:9b:84:67:b9:7a:bd:7a:
e2:6a:ad:90:f6:11:b3:25:68:6a:73:e5:d2:e6:2d:
a4:aa:7c:6a:c9:22:1f:44:be:75:16:c6:60:ae:20:
22:ef:e9:e1:b1:99:25:46:cf:09:8c:bb:a5:23:1f:
4d:17:bc:0e:67:72:22:f6:82:fc:2a:19:a4:12:06:
05:0e:04:be:54:8e:2e:9b:1d:ef:5e:2d:2e:35:d8:
7a:c1:0f:dd:8a:1c:15:5f:b5:9c:e2:f2:ac:9f:f4:
1f:6b:80:20:a4:7f:99:2f:b0:4d:76:ed:29:a6:ca:
f7:ea:be:aa:e0:30:16:79:68:f1:2d:1e:a0:76:98:
a9:2e:25:f9:3e:26:ee:6a:19:29:ef:8e:ba:90:8b:
82:38:b4:ca:9a:df:07:e6:a2:97:b7:68:d9:0b:8d:
e2:c0:35:c6:43:26:b6:34:e7:b2:8f:59:fa:8f:94:
a7:c1:b7:57:7d:5f:7c:25:b1:a9:fe:ef:38:5c:96:
c2:15:b5:52:1d:a6:60:80:52:11:0b:33:0b:28:76:
2e:03:b7:b7:d2:ba:10:d8:79:49:1c:d7:ab:0f:af:
b2:04:a7:d6:8a:c2:be:cf:6a:70:83:45:7d:3c:37:
01:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:3E:C4:2D:04:5C:7E:38:58:E2:6D:77:CE:18:D5:5F:BF:87:2B:60
X509v3 Authority Key Identifier:
keyid:06:20:EA:DB:2E:15:62:B4:E2:E4:F4:80:77:2C:36:88:7A:77:7F:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BiDq2y4VYrTi5PSAdyw2iHp3fyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/cc8bfa-2b13-4674-a984-a5fdb570fe9a/1/ND7ELQRcfjhY4m13zhjVX7-HK2A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/cc8bfa-2b13-4674-a984-a5fdb570fe9a/1/BiDq2y4VYrTi5PSAdyw2iHp3fyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.93.220.0/24
217.195.195.0/24
217.195.197.0/24
IPv6:
2a05:3040::/29
Signature Algorithm: sha256WithRSAEncryption
be:97:6a:8a:b1:fc:84:2d:01:28:74:67:88:6e:a2:b8:55:2e:
36:d0:6a:e3:65:96:40:e9:ce:88:14:17:63:23:90:2f:93:63:
dd:04:36:e8:3b:f2:1c:71:da:d3:ae:14:2f:eb:68:85:e4:71:
49:c9:f8:57:3d:ef:9e:e2:0d:ea:c3:8e:07:ac:ad:f1:c7:8c:
b7:f1:ea:c3:9f:49:b9:fa:8a:a5:92:cc:fd:4a:9a:6e:a5:3d:
8f:35:13:bf:70:1c:8c:72:f9:59:88:c1:8f:f1:d5:b6:72:4c:
c0:ee:81:2c:28:77:a3:fd:9c:f9:1a:1f:d7:de:ae:17:a7:28:
c1:4e:25:44:93:65:02:6a:b4:42:25:6f:7b:fb:d7:af:89:e0:
ee:fe:95:55:94:49:97:5b:7d:8d:81:15:7f:d8:76:e1:10:e9:
9c:d6:42:75:cc:0c:3b:2b:6d:52:9e:9c:3f:dc:f0:04:94:b2:
51:7e:81:b2:5f:53:7a:8e:3f:7f:ba:9f:18:2b:f3:4b:28:4e:
82:7b:8f:17:8f:ca:4b:47:97:d0:12:bb:bb:dd:80:55:30:92:
b5:f8:bc:cd:7b:69:11:00:52:1e:a5:c9:88:25:f0:29:b8:f7:
9d:a7:f7:97:83:d6:b5:82:97:5f:91:ff:42:57:ac:cc:58:c6:
f1:3a:86:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:59:55 2024 by rpki-client on console-ams.rpki-client.org