Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/a98fc7-7935-4eae-962a-461ab0ecee01/1/Stt2LPpIrXXRSfMzTQZx5-PeVl0.roa
File: Stt2LPpIrXXRSfMzTQZx5-PeVl0.roa (raw, json)
Hash identifier: Us3uZPQRVmst98eVkfZo23s2G0FaCG6yBhAzBXLfs5s=
Subject key identifier: 4A:DB:76:2C:FA:48:AD:75:D1:49:F3:33:4D:06:71:E7:E3:DE:56:5D
Certificate issuer: /CN=4d70af1a99886c9101d135f54bd2bdef358b266e
Certificate serial: 018CC7955ED1A776177C19FA8DD7A66E6A04
Authority key identifier: 4D:70:AF:1A:99:88:6C:91:01:D1:35:F5:4B:D2:BD:EF:35:8B:26:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TXCvGpmIbJEB0TX1S9K97zWLJm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/a98fc7-7935-4eae-962a-461ab0ecee01/1/Stt2LPpIrXXRSfMzTQZx5-PeVl0.roa
Signing time: Tue 02 Jan 2024 00:31:44 +0000
ROA not before: Tue 02 Jan 2024 00:31:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39345
IP address blocks: 89.39.14.0/24 maxlen: 32
89.39.15.0/24 maxlen: 32
89.39.12.0/24 maxlen: 32
89.39.13.0/24 maxlen: 32
86.107.246.0/24 maxlen: 32
86.107.247.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/a98fc7-7935-4eae-962a-461ab0ecee01/1/TXCvGpmIbJEB0TX1S9K97zWLJm4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/a98fc7-7935-4eae-962a-461ab0ecee01/1/TXCvGpmIbJEB0TX1S9K97zWLJm4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TXCvGpmIbJEB0TX1S9K97zWLJm4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 21:03:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:5e:d1:a7:76:17:7c:19:fa:8d:d7:a6:6e:6a:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d70af1a99886c9101d135f54bd2bdef358b266e
Validity
Not Before: Jan 2 00:31:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4adb762cfa48ad75d149f3334d0671e7e3de565d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ad:6b:c7:f9:17:10:14:cd:b5:b8:89:9b:8b:
f2:3f:b0:50:d8:19:8a:7f:bf:39:7a:43:29:1f:d3:
68:0e:f8:ae:01:a7:3a:c9:f3:bc:44:a3:69:13:6b:
91:02:7b:14:4e:4a:af:d6:9c:69:e4:66:2e:ba:0a:
5e:7e:ae:36:ac:23:24:d3:c5:f7:07:6d:d4:55:3c:
df:8a:fb:4d:16:fc:1c:1b:08:aa:21:d8:17:64:b0:
0b:0c:6c:a4:d1:92:a9:7e:fd:9c:18:6a:67:9b:65:
b7:19:f0:79:66:12:9f:e9:1c:a4:bb:5e:cd:30:f9:
0f:da:32:34:5f:fe:2c:b5:46:64:cc:dd:ff:71:e8:
18:78:f3:a7:5c:9c:76:fc:55:75:d3:d6:71:37:72:
02:2f:7b:5f:2f:d2:af:be:63:d8:df:cf:36:8c:fa:
61:f7:09:5c:ae:f2:cc:d3:c5:bc:51:8b:a6:8e:32:
54:96:4f:38:19:fd:8d:c5:d1:63:e9:d1:57:6a:4d:
59:66:e1:3a:05:5c:cf:d2:31:ef:28:9b:0d:e7:7e:
9c:73:0e:0e:3a:17:2a:b3:4d:88:3c:71:90:b0:7e:
11:2e:40:53:d5:d9:76:b2:7d:a3:31:dd:7f:66:3b:
06:df:cf:8b:df:60:12:6e:5e:65:ab:91:e7:01:fd:
e9:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:DB:76:2C:FA:48:AD:75:D1:49:F3:33:4D:06:71:E7:E3:DE:56:5D
X509v3 Authority Key Identifier:
keyid:4D:70:AF:1A:99:88:6C:91:01:D1:35:F5:4B:D2:BD:EF:35:8B:26:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TXCvGpmIbJEB0TX1S9K97zWLJm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a98fc7-7935-4eae-962a-461ab0ecee01/1/Stt2LPpIrXXRSfMzTQZx5-PeVl0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a98fc7-7935-4eae-962a-461ab0ecee01/1/TXCvGpmIbJEB0TX1S9K97zWLJm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.107.246.0/23
89.39.12.0/22
Signature Algorithm: sha256WithRSAEncryption
94:b3:aa:c3:a3:06:7e:e9:da:86:f0:b6:36:03:3d:21:49:7f:
0e:04:ab:27:d7:59:5c:ec:92:61:2d:ed:63:a1:a4:51:24:06:
67:15:2b:e4:bf:19:76:c1:2c:0c:3a:2f:86:9b:ed:2b:0a:79:
31:03:09:13:44:e0:a3:a9:6d:ba:3e:bd:e7:b4:8d:dd:2f:8d:
bc:29:8b:20:b1:56:58:38:15:4f:7b:5d:c4:84:ee:8d:a6:e3:
f3:3d:d7:ee:c8:15:d6:67:61:48:e0:36:38:98:3a:d6:0f:78:
86:ef:9d:31:c5:ef:a4:a2:12:97:80:64:cc:53:de:08:7d:dd:
61:62:8b:29:10:f0:d3:ea:61:2d:fd:a7:04:cb:55:72:0e:ed:
45:db:10:68:b4:29:e8:98:97:39:7b:40:75:26:31:eb:7c:fc:
6b:17:0a:e6:b2:87:d6:77:ef:89:e2:49:ae:b6:60:9e:c1:12:
a9:09:3a:0e:42:08:ad:b0:09:ec:d6:27:8b:f7:96:77:ff:3d:
a2:e2:42:4f:26:6a:be:65:aa:68:b9:19:3d:47:33:76:17:7f:
63:b8:9c:95:a8:11:90:e2:e1:5b:50:f7:3a:8c:a6:c7:5c:b0:
5e:33:80:55:80:ff:91:45:cc:15:0d:73:7e:10:ec:20:e7:77:
90:aa:31:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 00:56:50 2024 by rpki-client on console-fra.rpki-client.org