Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/f2PkEaTSPPUiPEPWrODJ7Kma3c4.roa
File: f2PkEaTSPPUiPEPWrODJ7Kma3c4.roa (raw, json)
Hash identifier: J5ctJE7DnJerOr9/3w0oQUH3dBBb4/ccRqJaLputjm4=
Subject key identifier: 7F:63:E4:11:A4:D2:3C:F5:22:3C:43:D6:AC:E0:C9:EC:A9:9A:DD:CE
Certificate issuer: /CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Certificate serial: 018F050F21248BACD6079B248684717E9943
Authority key identifier: 2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/f2PkEaTSPPUiPEPWrODJ7Kma3c4.roa
Signing time: Mon 22 Apr 2024 09:07:08 +0000
ROA not before: Mon 22 Apr 2024 09:07:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199218
IP address blocks: 93.152.219.0/24 maxlen: 24
93.152.225.0/24 maxlen: 24
94.26.90.0/24 maxlen: 24
94.190.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:05:0f:21:24:8b:ac:d6:07:9b:24:86:84:71:7e:99:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Validity
Not Before: Apr 22 09:07:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7f63e411a4d23cf5223c43d6ace0c9eca99addce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:c7:a5:2d:47:c3:11:fa:4d:ad:79:d5:82:62:
ea:05:42:f2:de:bb:61:b0:60:57:db:9d:a7:d8:d3:
6a:80:ed:11:81:4e:ee:ca:47:77:9d:c2:ae:83:f2:
f2:82:a9:96:d2:68:a5:8b:73:d1:5c:24:48:ab:1f:
68:b5:c9:7a:e0:24:22:22:7f:69:be:01:4a:24:df:
29:3c:8d:43:61:78:c9:19:84:8b:11:b3:60:2c:c9:
63:f0:1f:7b:8a:86:d3:22:56:18:2d:bf:9d:dc:22:
e7:86:03:88:2d:f9:8e:04:95:cb:ef:7f:11:79:db:
82:b2:9c:9b:d9:66:4c:a6:f1:5d:21:22:26:d5:c4:
75:be:e0:76:16:31:ff:b2:d3:ab:3f:ec:5e:c7:1d:
6d:16:27:4d:c4:cd:29:ab:ac:9b:08:59:2c:4e:5d:
6c:ab:e4:3c:d4:ea:fc:ac:ab:8a:47:30:ef:1c:16:
2a:b9:cf:d0:41:8a:43:7f:7c:0f:26:f4:f4:90:f0:
2e:ad:b1:b8:eb:49:4e:05:28:7b:a2:a5:81:dd:71:
fa:48:6d:94:e5:49:d0:b9:02:66:af:09:dd:03:56:
da:23:6c:53:72:c8:72:45:03:04:35:8b:57:c7:94:
7d:19:dd:c0:57:35:dc:d2:2f:a7:52:d0:3e:53:89:
90:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:63:E4:11:A4:D2:3C:F5:22:3C:43:D6:AC:E0:C9:EC:A9:9A:DD:CE
X509v3 Authority Key Identifier:
keyid:2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/f2PkEaTSPPUiPEPWrODJ7Kma3c4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.152.219.0/24
93.152.225.0/24
94.26.90.0/24
94.190.195.0/24
Signature Algorithm: sha256WithRSAEncryption
20:5c:2b:3a:e6:9e:92:f2:08:7c:96:53:75:8f:03:b3:7e:4e:
d4:54:3c:cd:4a:8e:ee:82:0d:20:40:aa:31:5f:a3:02:9f:b0:
a0:c0:b8:f6:71:10:d4:13:ae:f2:4b:5d:ff:67:3d:47:7a:fe:
f2:3e:bc:a4:b7:ba:50:1f:0a:83:e0:70:32:5f:7b:7b:e7:76:
4c:47:61:c4:d5:e6:d0:60:c2:53:49:3f:c9:c6:7f:33:57:a4:
6f:58:e1:a3:70:22:22:85:87:8f:b2:e3:16:61:84:60:2e:7b:
e6:12:97:f7:c0:31:11:27:0c:73:0e:45:d5:b1:12:71:2c:e6:
f4:6b:98:1a:bd:80:ca:ed:09:10:6c:74:d3:18:0f:a5:4d:3c:
4c:fa:4a:d5:46:86:83:37:a4:1d:80:cb:69:3f:b7:5d:d7:0a:
fc:ab:55:7a:f4:f7:16:e2:2a:c8:cd:95:25:24:56:ef:6f:de:
1d:59:d8:0b:95:23:d8:c4:d9:9c:72:58:70:19:0e:d8:30:f9:
79:7e:8d:ad:62:55:a3:a3:46:9b:0e:fb:d8:d4:3b:c4:0a:40:
1e:68:19:2e:2b:a7:9d:32:ea:8a:a2:cf:40:da:f1:22:5b:28:
25:63:32:4d:73:90:d1:79:af:e3:35:a7:3f:b3:80:5b:81:e5:
d8:a9:5c:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 09:44:49 2024 by rpki-client on console-ams.rpki-client.org