Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/c3e871-20cc-44f4-bfa0-a1856dd7b5d8/1/xExn5N3q_cpp53hn3ivo1hcsT3k.roa
File: xExn5N3q_cpp53hn3ivo1hcsT3k.roa (raw, json)
Hash identifier: M9vP65SQR5xOlPEtG5tLWz3ay5ENA+usw4FJCGi/6j8=
Subject key identifier: C4:4C:67:E4:DD:EA:FD:CA:69:E7:78:67:DE:2B:E8:D6:17:2C:4F:79
Certificate issuer: /CN=f57c1aaadb8320dd843235458cf2c5cbf4704ad6
Certificate serial: 019039ACF4496CF6764DC850CB877D2820F4
Authority key identifier: F5:7C:1A:AA:DB:83:20:DD:84:32:35:45:8C:F2:C5:CB:F4:70:4A:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9XwaqtuDIN2EMjVFjPLFy_RwStY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/c3e871-20cc-44f4-bfa0-a1856dd7b5d8/1/xExn5N3q_cpp53hn3ivo1hcsT3k.roa
Signing time: Fri 21 Jun 2024 07:22:34 +0000
ROA not before: Fri 21 Jun 2024 07:22:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35242
IP address blocks: 193.29.130.0/23 maxlen: 23
193.29.132.0/22 maxlen: 22
193.29.132.0/24 maxlen: 24
194.45.208.0/21 maxlen: 21
194.113.148.0/23 maxlen: 23
195.80.239.0/24 maxlen: 24
2a00:7cc0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/c3e871-20cc-44f4-bfa0-a1856dd7b5d8/1/9XwaqtuDIN2EMjVFjPLFy_RwStY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/c3e871-20cc-44f4-bfa0-a1856dd7b5d8/1/9XwaqtuDIN2EMjVFjPLFy_RwStY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9XwaqtuDIN2EMjVFjPLFy_RwStY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:39:ac:f4:49:6c:f6:76:4d:c8:50:cb:87:7d:28:20:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f57c1aaadb8320dd843235458cf2c5cbf4704ad6
Validity
Not Before: Jun 21 07:22:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c44c67e4ddeafdca69e77867de2be8d6172c4f79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:72:97:01:09:79:4b:64:07:40:d8:dd:a6:78:
92:e3:e7:66:2f:6d:75:e0:15:98:76:55:33:89:42:
e6:e5:eb:0e:b8:c7:e9:13:a6:e3:21:e4:ad:13:4f:
34:84:e1:89:f1:99:f5:6f:88:a4:4e:82:45:e2:f6:
da:c7:fa:7d:de:94:f6:55:a6:3e:44:fa:bd:d0:0b:
36:b9:27:47:70:10:f9:b6:c5:d8:91:ee:e4:8d:51:
4a:2a:84:68:28:d6:36:b0:16:50:bf:8a:7f:64:b3:
ec:05:3e:60:c2:b5:56:7d:72:75:f0:e0:90:df:af:
37:ca:52:6e:87:11:39:95:be:0f:b5:9f:92:29:12:
c5:37:14:b0:09:cc:7a:e7:ef:50:db:12:7c:5d:a4:
84:3d:fb:5c:53:43:5e:04:d7:d6:13:9b:16:da:f6:
e4:e4:d7:a4:0f:0b:c6:7a:9b:05:91:0f:40:81:b7:
65:64:cb:41:db:c6:8d:3e:69:54:83:f5:f2:61:8f:
cb:3d:ac:d1:82:bf:6c:3c:e5:33:32:4a:f0:df:21:
89:6d:a2:75:ee:8d:3c:ab:b4:5e:66:69:f0:72:29:
49:a4:2b:31:95:4a:1a:50:53:81:74:e4:f4:55:55:
a0:7d:a2:ea:15:b9:5e:90:8b:16:20:d4:15:8f:c7:
05:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:4C:67:E4:DD:EA:FD:CA:69:E7:78:67:DE:2B:E8:D6:17:2C:4F:79
X509v3 Authority Key Identifier:
keyid:F5:7C:1A:AA:DB:83:20:DD:84:32:35:45:8C:F2:C5:CB:F4:70:4A:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9XwaqtuDIN2EMjVFjPLFy_RwStY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c3e871-20cc-44f4-bfa0-a1856dd7b5d8/1/xExn5N3q_cpp53hn3ivo1hcsT3k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c3e871-20cc-44f4-bfa0-a1856dd7b5d8/1/9XwaqtuDIN2EMjVFjPLFy_RwStY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.29.130.0-193.29.135.255
194.45.208.0/21
194.113.148.0/23
195.80.239.0/24
IPv6:
2a00:7cc0::/32
Signature Algorithm: sha256WithRSAEncryption
c1:aa:81:38:fb:2e:bd:3a:ae:87:97:6b:9e:90:4f:1e:99:56:
b1:24:43:cc:0d:54:41:f7:c5:bf:8f:75:9d:74:49:70:7e:d0:
0f:c2:7b:4c:44:f6:3c:e7:e3:aa:d9:d9:e7:79:1f:ff:8a:88:
b8:1e:59:07:ac:be:01:23:28:e8:60:2a:55:1e:6f:7a:ee:17:
eb:81:0e:04:35:d8:55:6a:9a:2d:41:b9:9a:2a:56:63:a0:9b:
19:67:ec:78:c0:2c:57:ba:45:c7:15:20:7a:d6:12:5b:b3:59:
ea:a9:0b:fa:ef:24:20:ed:69:9e:c7:de:35:96:db:ab:7e:8f:
af:33:5a:d9:ec:58:cd:40:03:09:13:63:1d:94:6b:d2:c8:f0:
b2:5c:77:46:e2:d2:95:ce:de:d3:c4:62:e3:7f:2a:86:06:71:
6a:bc:d3:4a:31:5c:a5:04:3f:ed:b7:1d:ce:9f:9e:ce:6b:9a:
ed:6c:fe:f4:aa:2a:fd:5b:f3:33:a4:b8:a4:bb:bd:73:f8:64:
74:e2:96:66:f2:ef:63:9a:ee:f1:51:0a:2a:b1:7d:93:d0:97:
16:d3:87:50:d7:72:f4:bb:65:e3:a4:28:cf:db:0d:8a:36:0e:
03:0d:a4:45:e8:fd:12:2a:16:cd:4a:7a:c8:9d:bb:64:ed:44:
04:d9:2d:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 01:04:03 2024 by rpki-client on console-fra.rpki-client.org