Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/3f7e56-0916-47ac-8586-a9388f31b47e/1/qY4j8hGFAyiZnG2zLBDjD0zlHeM.roa
File: qY4j8hGFAyiZnG2zLBDjD0zlHeM.roa (raw, json)
Hash identifier: o7WalC0e2z6WhGsY/iUvDaOHeqQFiY3xsXtk8zuIMYk=
Subject key identifier: A9:8E:23:F2:11:85:03:28:99:9C:6D:B3:2C:10:E3:0F:4C:E5:1D:E3
Certificate issuer: /CN=3cd37ec23719b2f142f46e6f3317664034adf598
Certificate serial: 018CC6B93027E9A0B6101F889BE620D2A1AD
Authority key identifier: 3C:D3:7E:C2:37:19:B2:F1:42:F4:6E:6F:33:17:66:40:34:AD:F5:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PNN-wjcZsvFC9G5vMxdmQDSt9Zg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/3f7e56-0916-47ac-8586-a9388f31b47e/1/qY4j8hGFAyiZnG2zLBDjD0zlHeM.roa
Signing time: Mon 01 Jan 2024 20:31:14 +0000
ROA not before: Mon 01 Jan 2024 20:31:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202391
IP address blocks: 185.83.180.0/24 maxlen: 24
185.170.236.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/3f7e56-0916-47ac-8586-a9388f31b47e/1/PNN-wjcZsvFC9G5vMxdmQDSt9Zg.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/3f7e56-0916-47ac-8586-a9388f31b47e/1/PNN-wjcZsvFC9G5vMxdmQDSt9Zg.mft
rsync://rpki.ripe.net/repository/DEFAULT/PNN-wjcZsvFC9G5vMxdmQDSt9Zg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Jun 2024 18:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:30:27:e9:a0:b6:10:1f:88:9b:e6:20:d2:a1:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cd37ec23719b2f142f46e6f3317664034adf598
Validity
Not Before: Jan 1 20:31:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a98e23f211850328999c6db32c10e30f4ce51de3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f0:39:f4:ec:2f:70:bc:e2:32:a8:37:70:64:
05:bc:ba:91:ed:df:e2:f9:7a:6c:2a:88:81:5b:80:
6e:c8:a4:1d:04:81:3c:35:4f:63:48:d0:64:8a:ba:
80:07:0e:32:14:db:92:23:2b:14:90:ec:91:70:63:
70:bf:f2:85:5e:e2:34:ff:3e:23:ab:ea:ae:0a:64:
90:6d:18:bf:c3:ad:d3:b9:5c:2e:3c:ae:45:e0:43:
c1:0d:bd:90:ff:80:cf:54:61:8f:49:88:ee:45:11:
38:2a:78:df:bb:c3:5b:0a:50:17:4b:e8:51:d6:f0:
ee:a1:09:22:77:fb:6b:82:06:a6:42:5b:15:2b:b3:
df:f6:49:99:6a:f1:69:4f:1b:9b:c3:52:a9:ec:ec:
f0:95:d0:3d:40:19:4a:26:46:4c:7a:9e:55:60:48:
2c:f7:3c:34:f6:d5:06:f1:58:96:09:56:9c:db:5c:
22:10:04:5e:0f:84:f7:1d:92:3c:14:d3:59:8f:7f:
e2:58:be:a8:21:0a:d0:47:88:7c:67:a1:da:2c:0d:
1b:a2:f1:bf:1a:50:66:1a:17:26:c0:61:9c:88:88:
90:4a:15:3f:33:fa:0b:d9:92:c2:52:56:8c:0d:4f:
26:76:d5:bc:ab:82:cc:b6:0c:2c:9b:8a:82:aa:76:
4e:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:8E:23:F2:11:85:03:28:99:9C:6D:B3:2C:10:E3:0F:4C:E5:1D:E3
X509v3 Authority Key Identifier:
keyid:3C:D3:7E:C2:37:19:B2:F1:42:F4:6E:6F:33:17:66:40:34:AD:F5:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PNN-wjcZsvFC9G5vMxdmQDSt9Zg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3f7e56-0916-47ac-8586-a9388f31b47e/1/qY4j8hGFAyiZnG2zLBDjD0zlHeM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3f7e56-0916-47ac-8586-a9388f31b47e/1/PNN-wjcZsvFC9G5vMxdmQDSt9Zg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.83.180.0/24
185.170.236.0/22
Signature Algorithm: sha256WithRSAEncryption
4b:6b:a1:17:a7:c7:fd:d2:22:c3:75:33:96:80:23:1a:be:f4:
b7:c0:1a:4d:09:c6:47:84:d7:ff:59:8d:9b:86:df:00:e1:39:
43:d2:62:73:a5:3e:e1:3d:18:f9:8d:95:e8:e3:0d:5a:71:31:
d2:6e:9e:af:0d:d4:f4:2f:e1:ac:b0:3e:39:51:0b:89:8f:18:
c4:22:ec:d8:2d:24:e2:c9:eb:17:06:80:a9:03:63:77:42:b9:
05:62:ac:84:66:4f:74:2f:1b:f1:fb:d5:57:f5:91:17:aa:e5:
26:ea:74:77:91:c4:1b:3f:c3:3e:ba:a8:3c:af:65:8e:51:71:
f0:59:e1:8b:6e:a7:5b:d7:7d:b1:d8:c9:0d:2c:32:99:76:92:
4a:7a:3e:a3:e4:8e:f1:3a:8b:2b:64:e0:ff:29:a1:d6:6d:dc:
2c:0a:a9:90:06:e6:02:77:32:c2:8f:fd:7f:94:c8:f9:c4:e5:
1a:76:81:82:bb:c9:8f:5a:63:0c:58:c9:c6:4e:bb:cc:24:ae:
a6:e3:f0:69:c0:76:bb:2a:54:19:41:c2:95:d4:92:5b:1e:b6:
c6:0a:49:78:2c:7b:c3:52:31:95:0a:e3:6f:39:a1:b2:18:53:
b6:a3:1b:89:ce:f8:6d:5d:d6:a8:ab:1e:4c:2c:8a:a2:84:a7:
94:b5:bf:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 20:06:33 2024 by rpki-client on console-fra.rpki-client.org