Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/d301cd-f513-4995-9d55-1b38b02245c1/1/Wq0EK40VR2wLtDEk3u_jAd8jAIY.roa
File: Wq0EK40VR2wLtDEk3u_jAd8jAIY.roa (raw, json)
Hash identifier: aV5sEEVvLfoWCTFfCHzWF/OJUDCV68zat61LzVyWS3g=
Subject key identifier: 5A:AD:04:2B:8D:15:47:6C:0B:B4:31:24:DE:EF:E3:01:DF:23:00:86
Certificate issuer: /CN=6a8df7776b16d282e04c696e258aa4f9f9ce9c98
Certificate serial: 018CCA96F640D48D11022A6A11EF1CDCF8B6
Authority key identifier: 6A:8D:F7:77:6B:16:D2:82:E0:4C:69:6E:25:8A:A4:F9:F9:CE:9C:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ao33d2sW0oLgTGluJYqk-fnOnJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/d301cd-f513-4995-9d55-1b38b02245c1/1/Wq0EK40VR2wLtDEk3u_jAd8jAIY.roa
Signing time: Tue 02 Jan 2024 14:32:20 +0000
ROA not before: Tue 02 Jan 2024 14:32:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44387
IP address blocks: 185.28.236.0/22 maxlen: 22
178.16.80.0/20 maxlen: 20
178.16.80.0/21 maxlen: 21
178.16.88.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/d301cd-f513-4995-9d55-1b38b02245c1/1/ao33d2sW0oLgTGluJYqk-fnOnJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/d301cd-f513-4995-9d55-1b38b02245c1/1/ao33d2sW0oLgTGluJYqk-fnOnJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ao33d2sW0oLgTGluJYqk-fnOnJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Jun 2024 01:03:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:96:f6:40:d4:8d:11:02:2a:6a:11:ef:1c:dc:f8:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a8df7776b16d282e04c696e258aa4f9f9ce9c98
Validity
Not Before: Jan 2 14:32:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5aad042b8d15476c0bb43124deefe301df230086
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:49:71:29:94:88:bf:1e:2d:d1:29:c7:d7:3a:
28:43:b2:13:36:cd:be:c0:c5:ac:45:7b:88:a4:43:
36:18:ff:88:c8:14:bb:1a:f7:4e:2a:96:e7:c1:f1:
24:c9:10:86:f6:fb:da:bb:66:c2:20:03:35:a5:f1:
9e:d7:7c:9b:e6:0d:2f:22:84:af:2b:c6:c8:f5:88:
1b:7b:ca:9b:15:18:a3:92:58:61:6d:3b:85:a3:72:
c2:00:c3:54:db:c7:1e:93:4f:88:a6:bb:5d:28:09:
16:e6:92:a7:38:48:60:7e:1f:40:b9:7f:9b:f2:56:
32:c8:4b:f6:1f:66:22:66:a4:83:12:b2:3c:17:f0:
8a:9d:a7:a5:3b:1b:fe:c3:e0:f3:d9:ea:37:c7:7b:
72:d5:e0:72:71:ec:ee:e0:fe:78:1a:08:0b:34:ef:
03:87:45:f7:d1:9e:cb:cd:d5:b4:00:c6:77:a9:62:
e4:a6:11:0e:c8:65:5d:a9:ee:00:21:be:84:21:49:
e0:87:a8:e0:0e:6d:f0:9a:75:05:af:cf:a2:23:30:
0c:a3:d1:d3:c1:c3:c2:e7:df:df:f1:11:23:b0:94:
db:dc:68:e2:bd:24:13:b2:a4:e1:28:be:3d:d9:3e:
84:75:0b:9a:fd:99:8d:58:1d:0f:34:7f:cc:15:65:
93:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:AD:04:2B:8D:15:47:6C:0B:B4:31:24:DE:EF:E3:01:DF:23:00:86
X509v3 Authority Key Identifier:
keyid:6A:8D:F7:77:6B:16:D2:82:E0:4C:69:6E:25:8A:A4:F9:F9:CE:9C:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ao33d2sW0oLgTGluJYqk-fnOnJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/d301cd-f513-4995-9d55-1b38b02245c1/1/Wq0EK40VR2wLtDEk3u_jAd8jAIY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/d301cd-f513-4995-9d55-1b38b02245c1/1/ao33d2sW0oLgTGluJYqk-fnOnJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.16.80.0/20
185.28.236.0/22
Signature Algorithm: sha256WithRSAEncryption
53:9b:9c:91:3d:14:13:69:58:56:25:e1:2c:07:69:ef:46:f5:
41:0f:13:57:4f:7a:f0:da:dc:2e:5d:a4:76:50:d7:be:3b:f3:
ba:21:83:72:3f:31:ad:34:e9:50:30:6e:02:a5:c1:7d:3b:d5:
b6:d7:0f:e8:22:a1:7f:9d:52:74:04:49:7a:9b:f8:0e:1b:be:
da:bd:fd:22:a7:68:4b:fb:7a:f6:f2:a1:18:c4:62:62:fe:99:
61:e5:2e:f3:49:ed:9b:3f:0b:2f:6c:58:45:6b:a5:e2:31:71:
e5:3f:1a:2a:52:b3:fc:74:3a:97:9b:7b:ce:14:e2:41:a1:d8:
12:c7:a2:33:55:93:67:4c:1e:5f:0d:3f:0f:ac:50:f0:e6:8d:
b8:c0:e7:86:34:5f:1f:22:5f:8b:44:3b:31:1c:2f:76:a0:76:
46:5c:81:a1:e0:af:65:b0:24:86:f6:74:e3:48:56:d4:d1:ca:
ad:8d:85:c1:4d:a3:fc:29:45:10:2f:c6:5a:23:4d:2e:16:e6:
5f:5d:be:5c:29:e5:cd:25:79:04:f6:2d:39:6e:c1:cb:10:26:
f6:76:2e:16:99:d8:95:8f:f6:ea:48:5f:14:1a:f4:22:ad:72:
92:75:97:52:47:49:d8:cb:24:c4:7b:8d:3a:03:f6:51:0f:3c:
f1:07:b7:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 20 10:28:27 2024 by rpki-client on console-ams.rpki-client.org