Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/60d02f-1163-4666-9be9-7dfbbae0368e/1/Ao2K_-2RGJVtsQg-bbYKkimmJCs.roa
File: Ao2K_-2RGJVtsQg-bbYKkimmJCs.roa (raw, json)
Hash identifier: F23ynz7MVNcUDvYPNEHsY9d05FBG0Q/NWv7kT/tjIYk=
Subject key identifier: 02:8D:8A:FF:ED:91:18:95:6D:B1:08:3E:6D:B6:0A:92:29:A6:24:2B
Certificate issuer: /CN=c53b29170b56a84241f4b84fd4daff0836d503c6
Certificate serial: 018CC9BC149899311CABC06669B331A317FA
Authority key identifier: C5:3B:29:17:0B:56:A8:42:41:F4:B8:4F:D4:DA:FF:08:36:D5:03:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/60d02f-1163-4666-9be9-7dfbbae0368e/1/Ao2K_-2RGJVtsQg-bbYKkimmJCs.roa
Signing time: Tue 02 Jan 2024 10:33:15 +0000
ROA not before: Tue 02 Jan 2024 10:33:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201228
IP address blocks: 193.29.10.0/23 maxlen: 24
193.29.20.0/23 maxlen: 24
2a0f:a580::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/60d02f-1163-4666-9be9-7dfbbae0368e/1/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/60d02f-1163-4666-9be9-7dfbbae0368e/1/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 13:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:14:98:99:31:1c:ab:c0:66:69:b3:31:a3:17:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c53b29170b56a84241f4b84fd4daff0836d503c6
Validity
Not Before: Jan 2 10:33:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=028d8affed9118956db1083e6db60a9229a6242b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:a4:eb:10:fd:af:cc:31:5d:85:08:fe:ec:27:
d9:1a:54:3c:ba:c0:fb:12:40:fb:a7:57:e5:6e:35:
e8:52:72:e9:43:2b:fe:8b:b1:ef:57:e3:e5:b8:be:
d7:e9:e5:d3:b5:ae:f5:b7:59:e7:f2:cb:f7:7a:ea:
9e:8b:de:6a:00:6f:e5:72:1e:ba:d0:48:e6:45:7c:
c2:d2:26:4a:32:eb:45:fa:66:48:0d:ec:8d:07:4e:
46:68:7d:a8:5e:1f:b3:0f:dd:f4:6e:10:9a:d4:98:
eb:ac:71:32:1f:95:fc:d0:8e:56:7f:a5:6f:08:17:
ea:11:43:a2:48:df:aa:0b:1e:88:d7:16:2f:65:45:
8f:97:43:0c:6c:11:00:69:ee:f4:ec:75:09:d5:2f:
bc:b9:6f:21:35:83:5c:35:d7:6f:5b:39:fa:63:f8:
0a:e1:8d:77:11:d5:a7:78:c5:0f:68:93:00:37:7f:
14:be:0c:5b:3d:83:d4:e0:40:1d:4b:2c:d4:99:4e:
83:f2:36:15:f6:fb:4f:28:6c:3c:fa:81:4f:40:d4:
48:46:07:a7:35:01:35:26:a4:34:c8:58:6d:c2:55:
a2:26:24:83:19:24:d2:c3:54:2e:9b:ad:6d:3c:a3:
a4:30:0d:1e:38:a8:ab:b8:7e:56:a7:68:ba:52:5c:
4f:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:8D:8A:FF:ED:91:18:95:6D:B1:08:3E:6D:B6:0A:92:29:A6:24:2B
X509v3 Authority Key Identifier:
keyid:C5:3B:29:17:0B:56:A8:42:41:F4:B8:4F:D4:DA:FF:08:36:D5:03:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/60d02f-1163-4666-9be9-7dfbbae0368e/1/Ao2K_-2RGJVtsQg-bbYKkimmJCs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/60d02f-1163-4666-9be9-7dfbbae0368e/1/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.29.10.0/23
193.29.20.0/23
IPv6:
2a0f:a580::/29
Signature Algorithm: sha256WithRSAEncryption
63:19:ba:81:5c:c7:86:15:4f:20:39:f5:66:b3:54:72:5c:ca:
5c:98:52:7a:ba:79:d7:69:a2:d1:57:c8:9d:4c:e7:14:98:b5:
74:bc:fe:83:7e:3a:e0:e3:cf:0c:eb:20:8d:4e:70:7f:b9:5e:
2b:f2:ff:fa:91:2b:d2:95:8d:4c:49:60:49:17:8b:b8:99:f0:
c5:93:3b:b9:0b:ae:ae:d1:8f:db:4b:9a:c8:bd:7c:48:52:ac:
28:06:35:4b:91:2b:68:e7:e5:08:94:d0:f3:ed:14:a3:d9:55:
9f:30:eb:e6:3b:e6:dd:60:4b:11:35:15:71:65:65:30:11:1a:
f2:c8:31:2f:f2:80:46:89:f9:13:51:97:a2:b4:33:73:cc:b8:
13:e4:28:1b:df:d4:8b:33:e1:4f:0c:bc:8c:26:db:ed:b3:90:
6a:3a:58:b0:c1:44:a7:71:20:a4:52:86:78:4f:40:0b:66:11:
77:d1:84:2c:44:4e:be:b6:d9:53:88:8e:f8:91:1e:cb:b0:4d:
6a:d9:bb:5c:d5:69:3c:c0:75:43:c9:f3:9a:6a:70:8e:ea:d8:
cc:69:cf:ed:60:be:13:8f:56:52:e5:64:45:d7:b1:bd:89:79:
7a:0f:31:ff:e9:f7:d6:8e:c6:88:5b:d8:af:34:9e:3b:8b:1c:
36:ac:b9:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 21:33:31 2024 by rpki-client on console-ams.rpki-client.org