Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/2d346b-8825-4681-94e3-98441607b228/1/i8GvaR3gptFHvmvUaqFBBfjK1ig.roa
File: i8GvaR3gptFHvmvUaqFBBfjK1ig.roa (raw, json)
Hash identifier: rGktInduqJOxqSb0GxwB81MW6MRFBQWr39gsdA1IjEg=
Subject key identifier: 8B:C1:AF:69:1D:E0:A6:D1:47:BE:6B:D4:6A:A1:41:05:F8:CA:D6:28
Certificate issuer: /CN=8c05b364fcf319ccf53c5f2e8c634290ac0eb129
Certificate serial: 018CC49382C0F972810938DEF0719FBAC009
Authority key identifier: 8C:05:B3:64:FC:F3:19:CC:F5:3C:5F:2E:8C:63:42:90:AC:0E:B1:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jAWzZPzzGcz1PF8ujGNCkKwOsSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/2d346b-8825-4681-94e3-98441607b228/1/i8GvaR3gptFHvmvUaqFBBfjK1ig.roa
Signing time: Mon 01 Jan 2024 10:30:50 +0000
ROA not before: Mon 01 Jan 2024 10:30:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211483
IP address blocks: 192.109.198.0/24 maxlen: 24
193.29.3.0/24 maxlen: 24
185.60.76.0/24 maxlen: 24
185.60.77.0/24 maxlen: 24
185.60.78.0/24 maxlen: 24
185.60.79.0/24 maxlen: 24
2a04:5b40::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/2d346b-8825-4681-94e3-98441607b228/1/jAWzZPzzGcz1PF8ujGNCkKwOsSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/2d346b-8825-4681-94e3-98441607b228/1/jAWzZPzzGcz1PF8ujGNCkKwOsSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/jAWzZPzzGcz1PF8ujGNCkKwOsSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:82:c0:f9:72:81:09:38:de:f0:71:9f:ba:c0:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c05b364fcf319ccf53c5f2e8c634290ac0eb129
Validity
Not Before: Jan 1 10:30:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8bc1af691de0a6d147be6bd46aa14105f8cad628
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:c3:bc:c6:65:25:bd:6e:5b:27:6a:32:a1:c6:
5f:bb:89:1f:1c:07:33:c9:83:25:5c:89:0b:74:97:
06:84:d6:69:a9:cd:38:3a:3a:91:b5:e0:07:9a:27:
f0:79:c6:9e:31:90:5f:1c:c5:ae:82:d0:d7:74:06:
16:3b:ae:74:31:6b:34:ef:8a:d4:0b:46:9b:92:0a:
03:b9:95:10:11:96:3d:ac:53:3d:f8:3f:4e:01:e3:
49:eb:55:4d:38:3d:b0:32:7e:e6:d0:b4:d6:71:b2:
71:ee:b1:f4:40:4a:45:be:e3:17:e4:21:af:a0:d8:
53:ef:4e:85:75:45:3b:09:43:3f:33:7e:59:fb:0a:
a5:75:c5:35:92:df:39:f4:97:32:85:47:c1:ca:a7:
44:47:60:1f:40:fd:aa:d7:02:2a:35:66:5c:af:39:
65:6c:c1:ea:64:32:dd:db:82:1d:13:98:70:12:e1:
3b:53:1a:93:3a:7e:a9:1c:9b:c8:a9:e3:a7:61:79:
fb:ed:c7:fd:c5:c8:f7:32:df:10:74:4e:fe:dd:cf:
22:60:ae:f7:2f:a4:e9:58:7b:ef:9e:e9:34:d3:12:
7e:6f:ff:f2:72:38:4c:fd:1e:9b:34:22:f4:59:2d:
23:6c:c6:f5:a9:41:b3:e2:86:65:07:37:2d:50:30:
dc:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:C1:AF:69:1D:E0:A6:D1:47:BE:6B:D4:6A:A1:41:05:F8:CA:D6:28
X509v3 Authority Key Identifier:
keyid:8C:05:B3:64:FC:F3:19:CC:F5:3C:5F:2E:8C:63:42:90:AC:0E:B1:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jAWzZPzzGcz1PF8ujGNCkKwOsSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2d346b-8825-4681-94e3-98441607b228/1/i8GvaR3gptFHvmvUaqFBBfjK1ig.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2d346b-8825-4681-94e3-98441607b228/1/jAWzZPzzGcz1PF8ujGNCkKwOsSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.60.76.0/22
192.109.198.0/24
193.29.3.0/24
IPv6:
2a04:5b40::/32
Signature Algorithm: sha256WithRSAEncryption
45:1d:69:92:fe:61:ec:31:e9:cb:60:0b:ae:7f:9a:30:af:5f:
53:4d:d7:5b:53:db:61:9c:83:8c:0e:c1:23:e1:d4:55:13:f1:
b6:d6:5a:66:5b:b9:02:53:20:10:72:ac:f2:4d:9c:79:60:09:
2a:75:5d:0c:ee:5f:23:8c:74:6c:d5:ae:8a:9e:0e:65:d9:b3:
77:7d:e2:e3:d8:6b:c0:45:dd:01:d0:4f:0f:3b:fc:03:79:10:
97:f2:e3:8e:fc:25:c8:c9:66:53:a0:bf:76:0b:bb:3c:be:06:
11:39:cf:ac:ad:46:49:9e:9f:59:8f:63:1c:fb:63:ab:8c:8e:
5f:44:6b:4d:74:ef:32:bf:cd:6f:b5:2c:d1:f9:a0:c3:e2:37:
e3:45:14:82:55:4b:a7:ee:21:4b:f7:d9:8f:db:92:69:24:a3:
4f:d5:5c:87:85:ea:83:23:d9:6a:16:06:16:7f:ae:a2:9e:51:
e7:37:4b:27:3e:38:c4:2c:71:14:b7:b5:67:5b:18:cd:23:bf:
34:54:37:c0:d1:65:ad:46:38:84:c1:1c:c8:0a:92:9e:48:1f:
50:47:e4:bd:7b:32:32:c1:a8:86:ff:b0:c2:45:dd:4d:64:ff:
5c:b9:7c:a3:f2:bf:b8:7d:f1:b8:d7:50:15:fc:69:cf:ff:af:
5c:4a:68:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 21:11:13 2024 by rpki-client on console-fra.rpki-client.org