Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/79ff5d-6dfe-441b-a21d-135c40217b86/1/g7W9o7sq689OrKVRL1iIDoommeo.roa
File: g7W9o7sq689OrKVRL1iIDoommeo.roa (raw, json)
Hash identifier: 2y4VXAM5HzLQiiY/pmVfu36UVVQanjhtUGZ5VVxd6lE=
Subject key identifier: 83:B5:BD:A3:BB:2A:EB:CF:4E:AC:A5:51:2F:58:88:0E:8A:26:99:EA
Certificate issuer: /CN=bc20d41ad3570ed888c3b9a395843d28c4bde70e
Certificate serial: 01935436CAFE16D6E0749168C760D3DB6793
Authority key identifier: BC:20:D4:1A:D3:57:0E:D8:88:C3:B9:A3:95:84:3D:28:C4:BD:E7:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vCDUGtNXDtiIw7mjlYQ9KMS95w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/79ff5d-6dfe-441b-a21d-135c40217b86/1/g7W9o7sq689OrKVRL1iIDoommeo.roa
Signing time: Fri 22 Nov 2024 14:11:37 +0000
ROA not before: Fri 22 Nov 2024 14:11:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48417
IP address blocks: 94.247.32.0/21 maxlen: 24
185.21.162.0/23 maxlen: 23
2a02:db8::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/79ff5d-6dfe-441b-a21d-135c40217b86/1/vCDUGtNXDtiIw7mjlYQ9KMS95w4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/79ff5d-6dfe-441b-a21d-135c40217b86/1/vCDUGtNXDtiIw7mjlYQ9KMS95w4.mft
rsync://rpki.ripe.net/repository/DEFAULT/vCDUGtNXDtiIw7mjlYQ9KMS95w4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:54:36:ca:fe:16:d6:e0:74:91:68:c7:60:d3:db:67:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc20d41ad3570ed888c3b9a395843d28c4bde70e
Validity
Not Before: Nov 22 14:11:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=83b5bda3bb2aebcf4eaca5512f58880e8a2699ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c1:46:a4:ea:ab:e9:97:20:3b:81:84:99:e2:
8f:81:90:1d:58:93:80:60:04:1f:e9:33:fc:d9:bd:
11:8d:a4:2d:1e:5e:2c:b7:54:a3:5b:9d:e0:14:d3:
2a:2f:f8:f0:78:08:fd:06:c7:83:46:24:72:00:15:
50:9f:19:48:d4:1c:51:5c:74:4b:37:20:55:8b:db:
7e:70:8b:4d:1f:4f:ed:7c:c6:37:a7:6c:29:5e:ee:
14:af:5d:cd:3f:07:65:ac:7b:b9:55:df:63:ab:38:
26:bc:b5:3f:b3:7f:9a:78:c9:42:92:2b:be:92:f1:
62:b6:c6:01:8e:a1:48:1c:96:16:8b:e2:30:06:5b:
46:2e:d6:8c:78:77:4a:6e:cc:68:13:47:aa:ea:5a:
7b:e7:4c:0a:b4:fc:79:04:9d:30:ac:ff:f7:62:ca:
d8:70:07:b8:89:6b:d7:d1:27:35:f2:dd:6c:a7:73:
83:cc:73:d3:ec:f4:d6:85:1b:80:86:5b:99:3f:57:
bd:38:f9:03:45:57:ad:2f:a3:a7:7f:7c:32:f3:50:
7a:20:4c:7d:b2:c0:65:3c:a1:23:68:4c:7d:f1:3b:
f6:2c:80:19:30:4f:15:65:58:76:42:45:be:25:a4:
69:df:7d:6e:c1:65:6c:5f:80:83:bb:fd:d2:92:33:
ac:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:B5:BD:A3:BB:2A:EB:CF:4E:AC:A5:51:2F:58:88:0E:8A:26:99:EA
X509v3 Authority Key Identifier:
keyid:BC:20:D4:1A:D3:57:0E:D8:88:C3:B9:A3:95:84:3D:28:C4:BD:E7:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vCDUGtNXDtiIw7mjlYQ9KMS95w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/79ff5d-6dfe-441b-a21d-135c40217b86/1/g7W9o7sq689OrKVRL1iIDoommeo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/79ff5d-6dfe-441b-a21d-135c40217b86/1/vCDUGtNXDtiIw7mjlYQ9KMS95w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.247.32.0/21
185.21.162.0/23
IPv6:
2a02:db8::/32
Signature Algorithm: sha256WithRSAEncryption
20:3a:ee:21:52:9c:87:9f:6b:2d:0a:88:0f:cf:42:a6:c4:a8:
a8:57:6e:a9:bd:97:b7:1c:ef:10:3c:fd:59:fc:53:74:75:b7:
83:3c:a5:14:b8:80:31:03:a2:f8:f6:23:ea:7d:1a:00:51:56:
ea:a2:5b:18:52:68:c1:31:69:d9:79:ba:fd:94:e2:1e:ff:7d:
ec:4c:6b:de:66:e6:03:8f:f1:c9:b4:f4:09:00:2e:d4:af:d0:
2c:21:54:aa:eb:f0:38:59:08:32:d9:ac:94:c5:74:e0:10:84:
5a:f8:9c:b6:dd:8f:cc:a3:38:31:e1:2f:d7:90:0d:99:88:5b:
56:d9:76:40:e7:06:23:32:04:98:5d:7c:c9:6f:ea:99:6d:07:
85:d8:e8:ca:9c:37:57:e7:6a:f7:30:b8:da:8b:39:a1:55:b1:
5a:75:f5:2a:15:61:04:c8:96:5b:43:a7:90:24:51:62:28:10:
63:e6:28:33:bc:c9:35:b4:42:81:34:56:f5:94:94:cd:e9:dc:
4e:9d:32:ff:f6:b3:bb:cc:86:1c:e6:da:87:87:ac:f9:fa:ba:
6e:e4:a1:34:c8:c1:f3:64:2c:88:79:dc:df:ea:3e:8b:2c:f7:
fc:58:b8:20:93:f1:8b:6b:70:ff:cd:cf:2c:e3:66:1e:1f:b8:
e1:12:5b:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:18:13 2024 by rpki-client on console-fra.rpki-client.org