Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/2MA6RY5Jmcie9B3N1hXz4CzLmVU.roa
File: 2MA6RY5Jmcie9B3N1hXz4CzLmVU.roa (raw, json)
Hash identifier: jN+Rx1rlzfP5obtXT1za9KlVNShkuoabHZZ2VPxqeWU=
Subject key identifier: D8:C0:3A:45:8E:49:99:C8:9E:F4:1D:CD:D6:15:F3:E0:2C:CB:99:55
Certificate issuer: /CN=4ecf53007c79cc5e2f2d7356ba9121a78c0c7714
Certificate serial: 018DE9FB2BF846AC36A794E6017244D24E1D
Authority key identifier: 4E:CF:53:00:7C:79:CC:5E:2F:2D:73:56:BA:91:21:A7:8C:0C:77:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/2MA6RY5Jmcie9B3N1hXz4CzLmVU.roa
Signing time: Tue 27 Feb 2024 09:52:48 +0000
ROA not before: Tue 27 Feb 2024 09:52:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29535
IP address blocks: 79.191.255.0/24 maxlen: 24
80.54.110.0/23 maxlen: 24
83.2.0.0/20 maxlen: 20
83.2.8.0/22 maxlen: 22
83.2.56.0/22 maxlen: 22
178.42.9.0/24 maxlen: 24
178.42.22.0/24 maxlen: 24
193.110.120.0/22 maxlen: 22
195.149.235.0/24 maxlen: 24
195.149.236.0/22 maxlen: 22
2001:7f8:27::/48 maxlen: 48
2a01:1101:5::/48 maxlen: 48
2a01:11f0::/28 maxlen: 28
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:e9:fb:2b:f8:46:ac:36:a7:94:e6:01:72:44:d2:4e:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ecf53007c79cc5e2f2d7356ba9121a78c0c7714
Validity
Not Before: Feb 27 09:52:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d8c03a458e4999c89ef41dcdd615f3e02ccb9955
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:16:72:f6:3b:e9:3b:0b:03:7a:ad:26:c9:19:
a5:f3:06:b9:ce:e8:cd:a6:4c:a7:4b:f6:41:c4:c9:
40:8f:5f:78:10:09:f3:73:47:43:e1:ca:20:a7:1c:
13:63:11:8f:fc:58:5a:0b:e7:30:18:3f:fd:8d:cd:
f5:e9:8b:19:8d:1b:d8:75:03:35:e1:21:86:23:df:
b0:8d:44:ed:9b:29:a2:eb:53:4e:72:f3:e7:d9:65:
45:08:fb:df:cf:dd:d5:5a:19:23:2d:5f:30:a2:63:
90:38:fe:4a:7d:80:b0:83:8d:58:93:b6:30:a1:26:
4a:dc:43:63:74:0e:9d:02:a6:0e:25:34:82:f0:df:
a3:f6:5f:59:66:88:5b:29:1b:1d:7d:57:84:dc:a8:
7c:83:cf:ba:ca:e1:3e:39:a3:b1:e1:42:09:03:4d:
eb:90:31:c1:3c:ae:9f:a5:0d:83:3e:1f:44:e0:24:
29:77:cd:09:ac:6f:03:2b:6e:22:d0:b9:d8:39:c4:
52:ac:3a:2d:b6:84:45:a0:1e:29:72:98:54:ed:12:
b7:a6:d8:fd:7a:b7:29:f6:5f:b2:ef:2c:ea:31:98:
de:bb:f2:31:a7:b8:0d:de:9e:0e:3d:48:7b:d9:f5:
b8:0d:b8:7c:43:db:a4:f1:d8:84:60:5e:6d:77:f9:
77:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:C0:3A:45:8E:49:99:C8:9E:F4:1D:CD:D6:15:F3:E0:2C:CB:99:55
X509v3 Authority Key Identifier:
keyid:4E:CF:53:00:7C:79:CC:5E:2F:2D:73:56:BA:91:21:A7:8C:0C:77:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/2MA6RY5Jmcie9B3N1hXz4CzLmVU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.191.255.0/24
80.54.110.0/23
83.2.0.0/20
83.2.56.0/22
178.42.9.0/24
178.42.22.0/24
193.110.120.0/22
195.149.235.0-195.149.239.255
IPv6:
2001:7f8:27::/48
2a01:1101:5::/48
2a01:11f0::/28
Signature Algorithm: sha256WithRSAEncryption
67:ca:b6:18:c2:eb:47:1b:67:94:96:a5:18:fe:d9:c2:a0:1a:
51:66:fb:dc:44:38:a5:e8:b0:db:6d:36:c5:a6:c9:c9:f2:77:
01:89:e0:ec:08:ea:08:08:8f:7e:e4:9e:85:af:ec:e2:5b:f9:
0c:a1:7e:2e:df:0f:da:41:3e:18:e3:c6:66:7c:09:3d:17:7e:
03:16:c7:8b:98:02:5c:23:6f:2a:bf:03:e9:b7:34:ad:7a:d4:
0a:e1:4f:0b:c5:9f:24:9e:e4:33:67:b7:03:62:6e:52:5a:ae:
e5:5b:7f:d2:3f:e2:47:a7:7d:06:29:ba:ab:1c:48:0b:2c:47:
46:1e:33:0c:b3:3c:50:e6:a2:c9:60:e5:60:dc:7a:eb:55:75:
1d:10:b9:e2:15:2b:10:25:b9:29:0e:ab:66:9e:67:77:55:db:
c9:11:c3:fb:a6:15:12:a7:0e:57:3b:24:10:56:5b:4f:ed:a9:
47:d0:d6:a0:c4:01:eb:41:1b:30:e4:27:1e:b8:b3:6b:c0:dd:
88:87:26:23:fb:aa:a4:dd:8d:1a:18:12:6e:d0:db:69:92:80:
b0:aa:d2:ee:b1:81:7e:b4:a4:0b:34:5c:ad:46:a0:e9:6a:b9:
56:8d:45:41:44:f2:fc:ab:60:aa:ac:3d:c5:c4:8d:62:91:6d:
36:1f:f4:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 20:49:18 2024 by rpki-client on console-ams.rpki-client.org