Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/_K6n5CisBVSl3d6lgfeBVR4ir-4.roa
File: _K6n5CisBVSl3d6lgfeBVR4ir-4.roa (raw, json)
Hash identifier: OU9UeK/U8NCb75qRpWLC1OltBl7ltPLT24GS5BhFsiY=
Subject key identifier: FC:AE:A7:E4:28:AC:05:54:A5:DD:DE:A5:81:F7:81:55:1E:22:AF:EE
Certificate issuer: /CN=571cb51cba68eb7ef9867a75d17ab28018196aa1
Certificate serial: 018CC94D5BC4EAC146995FB3E9707A5C9E40
Authority key identifier: 57:1C:B5:1C:BA:68:EB:7E:F9:86:7A:75:D1:7A:B2:80:18:19:6A:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vxy1HLpo6375hnp10XqygBgZaqE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/_K6n5CisBVSl3d6lgfeBVR4ir-4.roa
Signing time: Tue 02 Jan 2024 08:32:19 +0000
ROA not before: Tue 02 Jan 2024 08:32:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60721
IP address blocks: 193.33.237.0/24 maxlen: 24
193.33.236.0/24 maxlen: 24
193.33.236.0/23 maxlen: 24
195.211.118.0/24 maxlen: 24
195.211.116.0/24 maxlen: 24
195.211.116.0/22 maxlen: 24
195.211.117.0/24 maxlen: 24
195.211.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Vxy1HLpo6375hnp10XqygBgZaqE.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Vxy1HLpo6375hnp10XqygBgZaqE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vxy1HLpo6375hnp10XqygBgZaqE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 23:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:5b:c4:ea:c1:46:99:5f:b3:e9:70:7a:5c:9e:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=571cb51cba68eb7ef9867a75d17ab28018196aa1
Validity
Not Before: Jan 2 08:32:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fcaea7e428ac0554a5dddea581f781551e22afee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:10:f0:ad:1f:40:2a:cb:24:68:eb:9f:75:20:
a1:71:5b:de:b6:0f:90:df:ae:fe:52:36:0e:c1:31:
be:d0:ed:8c:b3:68:05:f7:ad:fb:b7:71:5d:5d:d3:
0b:d1:f6:33:32:44:0d:32:c7:5f:76:fc:2a:92:33:
b3:76:92:68:a6:c4:79:b7:de:51:cd:2f:17:7c:e2:
24:0b:a4:ca:81:d9:cd:3e:02:ec:44:d5:04:4e:67:
de:5c:18:85:a8:99:eb:85:e9:ee:9c:c8:97:a7:52:
fa:dc:ba:ec:99:6b:90:e1:9a:7c:f5:fe:3f:57:08:
cc:eb:ab:f3:52:98:d3:30:8a:82:73:58:e1:91:ff:
9d:bd:3f:71:90:9d:0a:c3:31:16:16:c4:86:1a:fb:
eb:98:f7:cb:e8:d1:a4:03:05:d6:2d:73:a8:fe:3c:
fc:78:1a:fb:eb:bc:e2:79:bb:ab:72:25:31:f9:e5:
10:40:d5:8b:6e:35:e2:08:ce:b7:03:d6:74:a9:83:
a3:53:cb:51:b7:d7:8b:0b:a8:25:df:9e:92:48:31:
c4:02:1b:51:47:8e:8a:73:ca:59:c9:3a:3f:55:4e:
76:6c:32:72:50:fb:e4:e5:4d:7e:4d:c7:72:ee:97:
65:b5:c8:37:d1:71:ba:b1:41:81:c5:aa:4a:93:4f:
8f:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:AE:A7:E4:28:AC:05:54:A5:DD:DE:A5:81:F7:81:55:1E:22:AF:EE
X509v3 Authority Key Identifier:
keyid:57:1C:B5:1C:BA:68:EB:7E:F9:86:7A:75:D1:7A:B2:80:18:19:6A:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vxy1HLpo6375hnp10XqygBgZaqE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/_K6n5CisBVSl3d6lgfeBVR4ir-4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Vxy1HLpo6375hnp10XqygBgZaqE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.33.236.0/23
195.211.116.0/22
Signature Algorithm: sha256WithRSAEncryption
72:38:c0:8a:21:c7:5a:4d:d4:ae:11:94:8c:e0:df:e0:e1:aa:
d6:2c:18:14:62:2f:54:36:f9:63:d9:5e:92:47:6a:46:ac:eb:
f7:c5:c3:29:5d:c6:7e:b8:8e:54:c0:46:e3:d9:e2:2f:e7:fa:
e6:f0:7f:5b:86:b9:af:67:5c:71:b6:3b:a8:f9:bc:bb:df:e1:
d4:16:88:d4:ed:98:85:1d:36:97:16:be:53:7c:97:4d:2a:ca:
91:09:49:80:68:3e:8a:8c:b1:06:72:31:0e:e6:69:4e:c2:50:
ff:2a:2c:5b:ad:b5:76:8f:d1:26:88:1a:b4:99:ac:7a:d5:3e:
14:04:cc:7d:34:16:42:1a:a5:40:47:07:f9:9a:5b:df:5a:b6:
3f:3e:e6:4c:2c:21:68:e6:df:84:83:3d:19:30:bc:4f:f6:28:
2e:04:95:bb:cc:49:3c:c9:44:be:16:f1:19:f2:35:e2:92:f3:
43:be:cd:3e:e1:b7:91:b5:eb:e0:4e:8b:3d:8b:09:6a:0e:75:
f2:bd:c0:d4:45:dd:f8:6e:4f:e2:ee:9a:a3:87:f3:1b:84:1f:
42:7e:9c:d0:eb:de:b1:70:98:2d:49:04:20:15:aa:5d:d6:5a:
e8:87:a6:93:91:9b:55:e9:ce:9b:39:32:87:27:3d:ff:1d:24:
50:6c:87:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 07:43:19 2024 by rpki-client on console-fra.rpki-client.org