Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/885457-70f2-4410-be7c-81476dbab144/1/3Ws6pCxbzEj1ioJ27ysX81yjTkQ.roa
File: 3Ws6pCxbzEj1ioJ27ysX81yjTkQ.roa (raw, json)
Hash identifier: fOqpK8FJptJ4boLFGHTZKsZhzD4Q8w3BtpYbHdNoEJc=
Subject key identifier: DD:6B:3A:A4:2C:5B:CC:48:F5:8A:82:76:EF:2B:17:F3:5C:A3:4E:44
Certificate issuer: /CN=77dda2ad098c6a7814fb258b469b0d84ce24c4a7
Certificate serial: 018CC500126C957738415CC700CD5731A1DE
Authority key identifier: 77:DD:A2:AD:09:8C:6A:78:14:FB:25:8B:46:9B:0D:84:CE:24:C4:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d92irQmMangU-yWLRpsNhM4kxKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/885457-70f2-4410-be7c-81476dbab144/1/3Ws6pCxbzEj1ioJ27ysX81yjTkQ.roa
Signing time: Mon 01 Jan 2024 12:29:25 +0000
ROA not before: Mon 01 Jan 2024 12:29:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197648
IP address blocks: 185.205.184.0/24 maxlen: 24
185.205.184.0/22 maxlen: 22
185.205.186.0/24 maxlen: 24
185.205.185.0/24 maxlen: 24
185.205.187.0/24 maxlen: 24
185.106.103.0/24 maxlen: 24
185.106.102.0/24 maxlen: 24
185.106.101.0/24 maxlen: 24
185.106.100.0/24 maxlen: 24
185.106.100.0/22 maxlen: 22
91.223.208.0/24 maxlen: 24
91.217.246.0/24 maxlen: 24
2a0c:5cc0::/29 maxlen: 29
2a06:3c80::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/885457-70f2-4410-be7c-81476dbab144/1/d92irQmMangU-yWLRpsNhM4kxKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/885457-70f2-4410-be7c-81476dbab144/1/d92irQmMangU-yWLRpsNhM4kxKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/d92irQmMangU-yWLRpsNhM4kxKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 01 Jul 2024 14:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:12:6c:95:77:38:41:5c:c7:00:cd:57:31:a1:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77dda2ad098c6a7814fb258b469b0d84ce24c4a7
Validity
Not Before: Jan 1 12:29:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dd6b3aa42c5bcc48f58a8276ef2b17f35ca34e44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:3a:fe:f4:5a:fc:cc:f8:c7:01:43:71:56:ea:
8e:81:f7:a5:65:06:11:8a:bb:1b:26:7b:77:77:70:
32:14:29:55:d9:de:d8:e2:6a:c4:c4:8a:99:8d:93:
93:f5:0a:1a:29:65:11:d1:a9:e2:04:02:12:bc:5c:
95:37:89:b9:84:a8:de:ab:0e:fb:01:6a:ac:c1:78:
8c:d4:02:42:59:4d:5d:5b:fc:2c:ac:e1:cf:86:50:
42:e9:c2:16:81:1d:79:1e:f0:02:a8:34:39:80:a9:
03:39:45:b8:fa:48:55:e2:f9:7d:f4:b0:d6:e4:53:
ab:88:f0:6f:8a:cc:88:a8:8d:60:51:4b:a8:02:ae:
2d:e1:a0:18:a9:c0:47:4a:07:77:63:95:ff:af:0d:
b6:fd:30:b9:e9:c3:83:9f:58:6a:e8:ba:2b:3d:95:
57:07:e2:9e:f5:5b:a6:52:3f:3b:58:ca:b8:98:d3:
9a:96:d5:87:b5:5d:d2:d7:44:e3:61:43:74:f3:4b:
6c:11:5a:a9:f6:d7:b8:b9:e6:c6:3c:3f:98:a7:b6:
42:c3:cd:39:34:51:e3:77:dd:c7:6b:5a:86:64:6a:
d6:af:50:02:fa:79:cc:16:ad:6d:52:0c:97:4e:ed:
71:32:61:70:e1:4b:e4:b2:e1:9d:b8:20:2a:dc:d2:
b7:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:6B:3A:A4:2C:5B:CC:48:F5:8A:82:76:EF:2B:17:F3:5C:A3:4E:44
X509v3 Authority Key Identifier:
keyid:77:DD:A2:AD:09:8C:6A:78:14:FB:25:8B:46:9B:0D:84:CE:24:C4:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d92irQmMangU-yWLRpsNhM4kxKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/885457-70f2-4410-be7c-81476dbab144/1/3Ws6pCxbzEj1ioJ27ysX81yjTkQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/885457-70f2-4410-be7c-81476dbab144/1/d92irQmMangU-yWLRpsNhM4kxKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.217.246.0/24
91.223.208.0/24
185.106.100.0/22
185.205.184.0/22
IPv6:
2a06:3c80::/29
2a0c:5cc0::/29
Signature Algorithm: sha256WithRSAEncryption
ad:65:05:46:f4:c2:a3:f4:85:c3:aa:d6:08:ff:ba:f1:ac:2c:
7a:ac:d7:f7:df:49:60:1e:a2:61:57:8a:33:50:cf:eb:55:32:
1c:e5:16:95:12:19:b7:d1:d0:8f:60:8f:84:06:5a:d5:10:36:
11:df:a4:18:09:fa:ea:7c:2d:63:47:39:d8:fd:b3:08:e1:a2:
1d:f7:e4:f3:19:ef:b9:00:09:b5:54:9d:3f:67:91:aa:13:c3:
e0:42:f1:5c:14:05:dc:c1:98:f9:3c:67:2a:bd:f6:85:03:0e:
64:56:ef:5c:64:65:ae:71:20:cf:2c:6c:77:66:73:c7:99:77:
b0:3c:3b:71:39:b5:0e:12:18:39:13:a7:b1:43:8c:ea:9f:a1:
5b:19:79:8e:93:53:ad:cf:43:bb:2e:9d:54:0c:97:0e:b5:62:
80:f7:65:53:3c:63:f1:0e:90:4c:f8:ac:48:61:3e:22:f6:ac:
18:1c:fe:07:f3:b3:68:61:7f:15:23:42:8e:f0:d0:92:4d:8a:
e9:78:da:73:2d:d1:71:8f:ac:3d:b0:5f:99:47:3e:50:71:fe:
58:d5:e6:9b:80:49:2f:7b:34:30:49:bd:cb:92:74:19:1d:0d:
1e:73:06:ce:89:51:7c:f7:29:27:52:5c:21:54:ba:30:98:8b:
90:69:32:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 30 18:43:53 2024 by rpki-client on console-fra.rpki-client.org