Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/1OXDrnKBaQKAtdtYIsVIxZDJJhs.roa
File: 1OXDrnKBaQKAtdtYIsVIxZDJJhs.roa (raw, json)
Hash identifier: 6M3hKsb/SQxfZym82J66oBqdUaT6NRsCJ344/lNmn2A=
Subject key identifier: D4:E5:C3:AE:72:81:69:02:80:B5:DB:58:22:C5:48:C5:90:C9:26:1B
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 018D829A6F15CEDAA5BB57C1A25EE0A47747
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/1OXDrnKBaQKAtdtYIsVIxZDJJhs.roa
Signing time: Wed 07 Feb 2024 08:06:15 +0000
ROA not before: Wed 07 Feb 2024 08:06:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204168
IP address blocks: 92.52.204.0/22 maxlen: 24
185.38.124.0/22 maxlen: 24
185.93.64.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:82:9a:6f:15:ce:da:a5:bb:57:c1:a2:5e:e0:a4:77:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Feb 7 08:06:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d4e5c3ae7281690280b5db5822c548c590c9261b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:1a:f3:6d:64:b6:bd:48:09:43:92:c4:fc:18:
0d:26:c0:88:23:7e:0a:59:25:b6:72:e9:ef:c2:6c:
f4:3b:b4:51:d7:27:e1:53:7d:a3:1d:fe:e8:6e:f4:
2b:46:44:4a:94:88:c5:fb:63:36:d5:4a:ed:39:0e:
a1:ca:41:b4:42:cf:29:98:f1:0b:c0:a7:5f:95:60:
85:af:5d:3c:29:40:51:98:15:9b:f2:56:8d:15:1c:
b0:c5:8e:01:b6:3e:c8:ed:fc:fe:8b:13:1c:91:75:
31:92:33:81:c5:52:91:1a:0d:08:a3:f6:04:a5:6d:
d8:92:ab:1b:eb:d4:9a:ac:7c:ed:aa:e6:38:4e:50:
b9:d7:8e:ee:5a:0c:63:7f:3e:ae:f1:83:4d:d9:46:
52:64:11:72:83:59:40:a9:5a:d2:a4:c2:87:a7:27:
41:cb:e3:e0:3d:e2:72:5f:da:a2:b9:09:e9:b4:fc:
64:0b:99:d0:3a:60:c5:df:51:a6:21:1b:04:22:68:
06:bd:0e:27:2e:8c:6e:14:60:f3:b9:cf:22:60:6c:
63:ed:45:dc:23:08:73:2f:65:14:b4:2a:dd:3f:33:
92:91:61:08:8c:ad:b1:7f:3e:3e:df:00:bc:fb:e9:
87:75:43:1e:0a:68:9a:65:c9:5d:a2:f3:15:66:1d:
4e:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:E5:C3:AE:72:81:69:02:80:B5:DB:58:22:C5:48:C5:90:C9:26:1B
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/1OXDrnKBaQKAtdtYIsVIxZDJJhs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.52.204.0/22
185.38.124.0/22
185.93.64.0/22
Signature Algorithm: sha256WithRSAEncryption
be:99:c3:56:0e:fd:fd:b4:b6:fc:49:9c:3b:56:b7:5f:6c:06:
18:f1:90:99:86:ec:5f:d6:09:37:1d:3b:72:af:8f:46:0f:ae:
d1:28:ad:42:e0:95:81:91:72:96:fc:fd:58:bb:98:45:22:b6:
0e:a3:ef:a5:a1:76:6e:0a:f0:1a:54:05:14:78:1e:40:24:68:
33:0d:1a:30:a5:69:57:81:f5:1c:2b:6e:07:25:06:65:b1:c4:
fb:84:dd:0c:44:53:cc:aa:0b:7c:de:dc:d1:38:b5:3c:a9:42:
a9:1b:bb:a6:af:72:8a:9c:ce:94:23:fd:07:d2:ca:dc:f2:ec:
8d:10:f0:57:bf:41:6c:8d:dd:10:af:1f:1a:16:03:8a:c1:be:
7e:6e:89:4a:6a:74:7e:29:10:b7:a3:0f:e1:68:8e:34:07:15:
05:e7:b0:4c:4d:c9:8d:d7:43:c4:8e:f1:e0:8c:cc:53:22:f3:
47:e3:01:4f:3d:6a:9a:00:0b:20:85:6e:68:2a:20:cf:ef:15:
80:6b:de:ef:62:e0:8f:57:ad:2f:ae:39:33:21:8f:9c:57:92:
c7:df:f3:31:de:49:f1:a0:de:11:d8:2b:d3:ea:f5:87:90:f8:
ad:9e:e0:83:c2:52:74:50:d1:0d:74:65:e3:c3:d2:59:b0:cb:
44:94:60:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:24:50 2024 by rpki-client on console-fra.rpki-client.org