Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/2CuzzQPl2BOZmgGlUJwEboMxsMU.roa
File: 2CuzzQPl2BOZmgGlUJwEboMxsMU.roa (raw, json)
Hash identifier: 59YafXFfZ13A7Fwn/ruu95wkdBml8KdB41A55hBU4iw=
Subject key identifier: D8:2B:B3:CD:03:E5:D8:13:99:9A:01:A5:50:9C:04:6E:83:31:B0:C5
Certificate issuer: /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Certificate serial: 018CC2DB696881AABB8DDC9CB7EEB63AC51F
Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/2CuzzQPl2BOZmgGlUJwEboMxsMU.roa
Signing time: Mon 01 Jan 2024 02:30:08 +0000
ROA not before: Mon 01 Jan 2024 02:30:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207713
IP address blocks: 185.39.204.0/24 maxlen: 24
89.23.103.0/24 maxlen: 24
185.39.207.0/24 maxlen: 24
89.23.107.0/24 maxlen: 24
89.23.108.0/24 maxlen: 24
89.23.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Jun 2024 22:02:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:69:68:81:aa:bb:8d:dc:9c:b7:ee:b6:3a:c5:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Validity
Not Before: Jan 1 02:30:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d82bb3cd03e5d813999a01a5509c046e8331b0c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:58:0a:60:e0:69:59:8d:19:2d:a5:25:f3:37:
c7:4a:23:00:49:5c:bc:eb:74:ba:29:9d:7a:d4:7d:
15:0a:90:3c:ee:8e:98:40:8e:5f:69:95:ad:9c:e2:
e5:73:99:19:04:6d:3f:09:59:3c:b0:fc:bb:3c:10:
a2:07:7b:dc:e9:e0:f6:6e:73:1a:95:18:25:10:40:
34:56:8d:5e:86:51:21:49:9a:2b:e1:65:24:02:7b:
98:bd:4a:51:48:f4:08:13:74:a8:3a:dc:9b:8b:36:
cd:85:89:4d:c3:5f:2b:fa:92:d4:a0:73:bb:7b:e2:
22:05:0c:f7:96:95:f6:b3:28:d6:ac:cb:e0:8c:cd:
a2:49:c2:55:82:d1:b1:3b:73:78:2d:54:08:e8:c1:
b6:a7:1a:44:87:99:f0:6b:d7:4a:3b:8e:e5:b9:ee:
13:9e:95:d4:3b:65:00:d0:95:27:2b:d9:9b:c8:9b:
e8:5e:a5:71:27:22:87:69:c9:7f:7b:5f:4c:15:59:
ba:9d:61:ad:a7:38:9d:8e:53:ed:3f:68:89:8d:5d:
35:05:fe:ab:f8:9e:ce:24:c0:d0:58:05:2f:69:d7:
8b:77:68:34:19:95:11:c3:d0:34:09:3d:20:ab:f4:
b5:b8:17:ff:cc:fd:6e:2f:92:5f:95:e0:6b:27:33:
bb:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:2B:B3:CD:03:E5:D8:13:99:9A:01:A5:50:9C:04:6E:83:31:B0:C5
X509v3 Authority Key Identifier:
keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/2CuzzQPl2BOZmgGlUJwEboMxsMU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.23.103.0/24
89.23.107.0-89.23.108.255
89.23.113.0/24
185.39.204.0/24
185.39.207.0/24
Signature Algorithm: sha256WithRSAEncryption
76:3e:94:c0:73:dc:90:67:a7:b6:49:e6:8c:4d:b4:da:80:58:
4e:25:67:5e:bf:81:69:fd:dd:28:c6:14:53:41:77:ee:d3:0e:
a7:1f:46:9b:52:b9:74:b9:a4:43:8e:e8:31:e5:78:ba:c1:c9:
6a:ce:9b:d7:22:0d:4f:86:43:43:37:35:53:2d:1b:98:d2:da:
5f:13:23:23:38:76:33:b9:51:94:3b:27:56:be:b4:78:aa:7b:
9a:a9:82:cb:e2:99:7d:21:93:f4:21:82:ae:1e:38:aa:ee:1b:
6e:e8:7c:c8:f8:3d:de:03:4f:4f:d7:60:65:8f:7d:4f:a0:8b:
59:9c:50:d6:0a:24:4f:20:1a:0e:05:90:0a:9f:b8:44:af:6d:
14:9e:32:68:dc:1b:74:6d:ae:80:36:cc:91:51:5d:fa:42:d1:
d1:71:9a:75:df:15:0f:6a:22:5a:35:fc:3d:00:fb:ba:3b:e9:
97:3c:15:cf:36:c5:47:23:87:6e:e4:97:e7:69:26:cd:6d:bb:
0d:4e:f5:ba:b6:1c:4a:11:69:f1:f7:24:87:59:da:59:e2:26:
6a:65:7e:96:cb:c1:48:79:22:79:f7:0a:6e:04:ad:dc:d9:7f:
fe:9c:ca:00:a3:20:4f:d5:9d:30:24:c5:80:5c:9d:fe:8b:07:
06:8f:73:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 05:55:17 2024 by rpki-client on console-ams.rpki-client.org