Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/3a39e9-3d40-46f8-bb0f-5ba43b118f75/1/ytZFJp27jGFYcX22sjWEfOc-rNk.roa
File: ytZFJp27jGFYcX22sjWEfOc-rNk.roa (raw, json)
Hash identifier: rrfhczHYqW8Z5rAN9Dam9ieX700vIKeW9o1NL88feBE=
Subject key identifier: CA:D6:45:26:9D:BB:8C:61:58:71:7D:B6:B2:35:84:7C:E7:3E:AC:D9
Certificate issuer: /CN=0a2a157f00515f95b6df5dc0d52eb1b5d43fde5c
Certificate serial: 018CC9BCAE2B32AE607AA130C6BEC3343116
Authority key identifier: 0A:2A:15:7F:00:51:5F:95:B6:DF:5D:C0:D5:2E:B1:B5:D4:3F:DE:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CioVfwBRX5W2313A1S6xtdQ_3lw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/3a39e9-3d40-46f8-bb0f-5ba43b118f75/1/ytZFJp27jGFYcX22sjWEfOc-rNk.roa
Signing time: Tue 02 Jan 2024 10:33:54 +0000
ROA not before: Tue 02 Jan 2024 10:33:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47406
IP address blocks: 185.154.88.0/22 maxlen: 24
185.176.200.0/22 maxlen: 24
185.118.72.0/22 maxlen: 24
160.202.28.0/22 maxlen: 24
185.211.15.0/24 maxlen: 24
185.123.36.0/22 maxlen: 24
2a06:9240::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/3a39e9-3d40-46f8-bb0f-5ba43b118f75/1/CioVfwBRX5W2313A1S6xtdQ_3lw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/3a39e9-3d40-46f8-bb0f-5ba43b118f75/1/CioVfwBRX5W2313A1S6xtdQ_3lw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CioVfwBRX5W2313A1S6xtdQ_3lw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 14:49:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:ae:2b:32:ae:60:7a:a1:30:c6:be:c3:34:31:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a2a157f00515f95b6df5dc0d52eb1b5d43fde5c
Validity
Not Before: Jan 2 10:33:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cad645269dbb8c6158717db6b235847ce73eacd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:fb:9b:f7:b4:6d:e4:61:d2:dc:09:10:c6:18:
d3:2a:22:26:2d:8d:cf:1f:d9:3e:1a:2f:3d:9d:60:
e0:66:5b:a3:bf:25:e8:33:14:cc:07:0f:6d:17:cc:
77:08:2d:24:b0:00:7e:4c:92:05:02:a6:06:9a:bd:
ea:ba:cb:7b:f7:fa:ce:9a:23:7f:9a:2a:3e:6e:5e:
a9:a9:67:51:60:fc:56:99:9a:d2:2f:08:e3:2e:ed:
7e:c7:fb:7b:73:b0:29:6d:d3:8f:bd:d5:8a:02:6c:
1e:9a:ba:fa:ff:a2:2d:f4:39:10:ec:83:b0:4c:fe:
c4:6d:7c:eb:1b:0c:96:8b:1d:a1:43:71:94:b0:dc:
bf:3d:f6:c9:c6:a4:97:89:df:dc:a1:ef:f6:55:7a:
0f:09:1c:d4:3e:70:8a:b2:75:78:83:16:79:a3:cc:
58:a8:cf:36:37:1d:15:7c:a8:a1:b6:81:34:d0:5f:
a6:d5:ee:83:58:18:54:63:52:99:8b:62:cc:58:d9:
3a:cf:6e:d8:ae:d3:01:b6:ac:c7:86:fc:66:8f:15:
78:d4:eb:9a:a4:fa:aa:26:9d:1e:83:77:c7:5d:fa:
eb:8c:a5:19:20:08:7f:7b:a9:e3:4c:93:11:9f:36:
99:48:c1:90:37:96:01:47:f6:2f:41:b2:d5:35:78:
ee:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:D6:45:26:9D:BB:8C:61:58:71:7D:B6:B2:35:84:7C:E7:3E:AC:D9
X509v3 Authority Key Identifier:
keyid:0A:2A:15:7F:00:51:5F:95:B6:DF:5D:C0:D5:2E:B1:B5:D4:3F:DE:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CioVfwBRX5W2313A1S6xtdQ_3lw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/3a39e9-3d40-46f8-bb0f-5ba43b118f75/1/ytZFJp27jGFYcX22sjWEfOc-rNk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/3a39e9-3d40-46f8-bb0f-5ba43b118f75/1/CioVfwBRX5W2313A1S6xtdQ_3lw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.202.28.0/22
185.118.72.0/22
185.123.36.0/22
185.154.88.0/22
185.176.200.0/22
185.211.15.0/24
IPv6:
2a06:9240::/29
Signature Algorithm: sha256WithRSAEncryption
5b:f8:34:9d:8b:45:ea:0a:43:12:9e:ef:54:76:e9:10:4a:26:
ca:a0:98:73:0d:c4:04:4b:ba:ae:80:ef:21:c5:4e:41:d7:39:
e4:67:f9:f6:fa:ee:90:dc:e2:82:3e:5e:cc:2c:9f:cf:14:0a:
c1:41:a1:dc:7d:fe:bc:95:c6:7a:5a:f1:b8:dd:6d:46:bd:2a:
ff:ef:21:e4:11:a3:f7:01:40:97:74:87:0b:a8:86:e7:a5:f0:
dd:8d:5a:56:9d:72:ca:1e:19:ea:fe:0c:98:95:e0:d0:9f:34:
3d:d7:11:c1:0c:0e:63:1f:56:0a:42:1d:a9:9a:4d:f7:36:9d:
6b:3c:5f:02:89:8a:fd:9d:9a:79:c7:f6:e3:56:7f:13:52:12:
2b:d6:e6:e3:81:d9:4d:bb:1c:0b:2b:d9:9b:cd:93:c8:e3:82:
6c:5b:0a:ec:56:0b:5a:41:62:9d:da:80:ef:3e:05:6e:d1:ec:
a1:f1:eb:90:30:9c:f7:a0:fe:fc:33:aa:92:6b:67:03:ec:f6:
23:a1:5b:6e:5b:49:8c:b9:33:a8:3d:4c:be:fd:d6:01:bf:fb:
e5:5d:5f:fa:0b:dd:cc:0f:3e:e7:8a:e9:0a:fb:04:67:37:96:
d0:bb:0d:09:39:3b:fb:56:14:7f:69:70:e7:db:d6:f2:b8:94:
68:8e:ce:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 17:41:35 2024 by rpki-client on console-ams.rpki-client.org