Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/092570-512a-44fa-a4fe-dbca8c31ebc8/1/kXnfXb33reLGjSF2gtLfBObvOZE.roa
File: kXnfXb33reLGjSF2gtLfBObvOZE.roa (raw, json)
Hash identifier: Nf3hRILlCloPkpQbmFfGp267OBpLoWBjHPR8CM3r7HQ=
Subject key identifier: 91:79:DF:5D:BD:F7:AD:E2:C6:8D:21:76:82:D2:DF:04:E6:EF:39:91
Certificate issuer: /CN=bfd09a87743817c56f8088007a5746eb69ff2e30
Certificate serial: 018CC793649BA41F3494C0F0264F66252942
Authority key identifier: BF:D0:9A:87:74:38:17:C5:6F:80:88:00:7A:57:46:EB:69:FF:2E:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v9Cah3Q4F8VvgIgAeldG62n_LjA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/092570-512a-44fa-a4fe-dbca8c31ebc8/1/kXnfXb33reLGjSF2gtLfBObvOZE.roa
Signing time: Tue 02 Jan 2024 00:29:34 +0000
ROA not before: Tue 02 Jan 2024 00:29:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201102
IP address blocks: 195.184.75.0/24 maxlen: 24
185.194.4.0/22 maxlen: 22
185.82.224.0/22 maxlen: 22
2a05:9540::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/092570-512a-44fa-a4fe-dbca8c31ebc8/1/v9Cah3Q4F8VvgIgAeldG62n_LjA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/092570-512a-44fa-a4fe-dbca8c31ebc8/1/v9Cah3Q4F8VvgIgAeldG62n_LjA.mft
rsync://rpki.ripe.net/repository/DEFAULT/v9Cah3Q4F8VvgIgAeldG62n_LjA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:93:64:9b:a4:1f:34:94:c0:f0:26:4f:66:25:29:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfd09a87743817c56f8088007a5746eb69ff2e30
Validity
Not Before: Jan 2 00:29:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9179df5dbdf7ade2c68d217682d2df04e6ef3991
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:51:f0:e6:03:28:d6:cd:2f:20:37:41:e6:a7:
0d:36:70:71:5a:8c:05:2d:b0:9d:c0:1c:bc:28:70:
8f:b0:0e:f1:94:1c:f6:c7:4a:b8:b7:2f:ac:77:1f:
db:66:7f:df:3e:2d:03:42:c3:31:fa:99:79:86:ee:
95:dd:cb:47:e5:62:47:24:bb:a6:6a:b3:b7:42:78:
af:93:9b:b4:bf:a0:a6:04:55:69:53:61:2f:2f:c9:
f2:73:d5:d9:c7:e9:94:4c:0c:61:37:1a:ed:89:7d:
0b:04:62:4a:a3:fa:9c:22:9e:7b:b9:94:68:64:4f:
1b:35:a8:1a:d3:76:dc:4a:24:77:7a:ba:c9:ea:5d:
3d:71:a2:e8:90:a5:7e:7e:bd:34:1d:02:45:84:f2:
42:99:52:71:76:ff:c0:c2:76:12:e2:27:f1:53:65:
bc:0c:df:60:b2:32:c8:0a:7c:44:68:db:cb:0e:5a:
43:0c:a0:37:cd:2d:0e:2b:1f:af:86:cc:53:da:66:
ab:22:0b:55:29:19:ee:13:1b:f5:b5:47:c0:b6:74:
f4:4e:5e:34:b5:eb:6e:76:63:ed:18:92:49:2d:bf:
d2:34:98:7e:09:4f:75:7c:81:9f:f5:e7:c7:ab:2c:
ea:64:3c:a6:52:6a:07:cc:1c:9b:a9:b7:de:a3:50:
f6:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:79:DF:5D:BD:F7:AD:E2:C6:8D:21:76:82:D2:DF:04:E6:EF:39:91
X509v3 Authority Key Identifier:
keyid:BF:D0:9A:87:74:38:17:C5:6F:80:88:00:7A:57:46:EB:69:FF:2E:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v9Cah3Q4F8VvgIgAeldG62n_LjA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/092570-512a-44fa-a4fe-dbca8c31ebc8/1/kXnfXb33reLGjSF2gtLfBObvOZE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/092570-512a-44fa-a4fe-dbca8c31ebc8/1/v9Cah3Q4F8VvgIgAeldG62n_LjA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.82.224.0/22
185.194.4.0/22
195.184.75.0/24
IPv6:
2a05:9540::/29
Signature Algorithm: sha256WithRSAEncryption
2c:43:b5:24:91:07:7e:44:89:c9:28:b5:06:01:29:c5:54:95:
bb:18:17:3f:ce:80:a8:21:2f:7e:ef:38:72:e6:e1:d3:a0:40:
52:68:29:cf:c3:da:ab:e9:8e:c5:9e:a3:25:0b:fc:4f:1c:d3:
5f:a3:86:71:9a:7a:b9:83:18:47:3f:67:60:79:ee:ab:89:bd:
a1:8c:a7:84:eb:54:88:cc:d7:9a:3e:6c:33:6b:cc:40:76:3d:
7e:85:11:18:9b:6f:3b:c9:99:21:dc:c3:58:6d:ba:09:59:54:
af:4b:65:95:55:5f:70:51:15:17:8b:54:69:e7:bd:56:e4:dd:
0f:13:cc:16:e1:75:09:17:08:af:9b:8a:af:44:8c:48:c9:c1:
d8:d6:99:80:3b:e4:7d:01:06:0b:48:07:07:34:52:40:d0:74:
9e:5a:a3:99:95:3c:f8:be:c1:e8:7f:31:49:b5:c4:ee:85:dd:
2d:e8:43:65:07:1f:d2:18:d8:78:71:58:ea:9d:1a:08:fc:35:
bf:c2:8d:72:e0:1b:49:fc:53:74:56:ed:19:2d:4a:ae:dd:dd:
9d:0b:db:88:18:a9:7f:0f:41:6e:d9:c2:82:4f:6f:ac:8e:01:
65:d2:58:07:fa:20:b2:b3:b4:31:e2:ad:44:f0:94:c8:cb:69:
41:58:4d:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:42:01 2024 by rpki-client on console-fra.rpki-client.org