Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/Iw4wygJD_n_QEM-66XmQNAnhk3Y.roa
File: Iw4wygJD_n_QEM-66XmQNAnhk3Y.roa (raw, json)
Hash identifier: j8itHg6SOPpRfBnF5uWhKvLwCt6l45pKoUjkYm3rgV4=
Subject key identifier: 23:0E:30:CA:02:43:FE:7F:D0:10:CF:BA:E9:79:90:34:09:E1:93:76
Certificate issuer: /CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Certificate serial: 018F1EBEBAEF287AEAB5257FEAB23B6D774C
Authority key identifier: 62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/Iw4wygJD_n_QEM-66XmQNAnhk3Y.roa
Signing time: Sat 27 Apr 2024 08:49:27 +0000
ROA not before: Sat 27 Apr 2024 08:49:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215074
IP address blocks: 85.8.184.0/24 maxlen: 24
85.202.164.0/24 maxlen: 24
91.191.180.0/24 maxlen: 24
185.147.36.0/24 maxlen: 24
185.189.252.0/24 maxlen: 24
185.189.253.0/24 maxlen: 24
185.193.140.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 14:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:1e:be:ba:ef:28:7a:ea:b5:25:7f:ea:b2:3b:6d:77:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Validity
Not Before: Apr 27 08:49:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=230e30ca0243fe7fd010cfbae979903409e19376
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:63:01:a4:49:01:db:6f:3e:b1:a1:07:d3:08:
99:c9:20:9a:fa:05:cd:57:5f:e3:f6:87:2c:81:66:
de:a9:2f:0e:fd:81:94:a7:3f:69:21:3e:69:a3:c5:
e2:c6:3f:99:9f:13:19:3a:99:0e:9e:dc:3c:3a:ec:
15:01:12:08:57:ec:c0:64:5c:d1:d5:0e:e2:53:57:
2f:4b:c1:91:2e:38:07:2f:4a:30:2b:0f:32:99:af:
73:64:ae:37:11:83:f7:36:2a:bd:cc:03:bf:b8:ed:
e6:03:83:a7:ae:e2:43:4d:5e:eb:88:06:ea:75:c2:
55:84:2d:98:db:4a:93:35:20:c9:53:da:0e:2a:8e:
c8:cf:6c:88:80:d7:86:33:a5:43:64:29:c1:f3:6a:
17:30:83:38:54:fd:5c:84:75:1f:99:e4:b7:ce:ca:
e1:b6:5c:96:a9:8d:1c:da:4a:d1:7c:a3:c3:ee:dd:
4c:a3:6d:64:f6:fd:00:14:d5:7f:2e:86:eb:6c:30:
3e:bd:1b:d6:02:a5:c1:2b:ce:61:3c:b3:3d:bf:10:
6c:7e:be:32:65:34:39:1c:09:22:2a:4b:d0:ca:01:
aa:e1:d4:ba:c9:a5:b6:e0:d2:cd:43:2a:c2:e4:2c:
e0:f8:ed:82:9f:24:ee:4d:69:8b:4f:46:75:0d:49:
a2:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:0E:30:CA:02:43:FE:7F:D0:10:CF:BA:E9:79:90:34:09:E1:93:76
X509v3 Authority Key Identifier:
keyid:62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/Iw4wygJD_n_QEM-66XmQNAnhk3Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.8.184.0/24
85.202.164.0/24
91.191.180.0/24
185.147.36.0/24
185.189.252.0/23
185.193.140.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:92:e3:16:cf:02:9a:39:14:a3:40:01:17:b4:cb:3b:d7:e5:
c8:6e:92:a9:d4:fe:cc:a4:4c:15:cc:66:20:29:b7:55:1c:e1:
b2:e9:f7:b7:bc:8b:8d:ff:2f:90:e8:6d:07:12:64:b6:61:ce:
73:86:03:ef:e0:f2:38:45:f4:7a:ab:5c:55:40:a2:f6:d8:36:
d6:c2:05:a1:86:61:61:17:d0:72:14:60:ca:b4:a0:9c:31:f4:
47:07:1e:dd:74:c7:e9:90:ee:41:cc:99:88:e5:b4:b5:31:e8:
e5:09:de:98:2b:6f:af:bd:68:72:2f:ae:7f:b7:22:7c:4d:18:
70:ad:f0:9c:ce:64:02:73:c4:c2:0e:a3:82:2a:da:e6:bd:43:
19:3a:e8:05:26:c8:ea:81:9f:7a:40:00:22:da:27:a8:7e:20:
1e:1e:56:1e:af:b9:45:d1:82:21:8a:88:28:e3:57:34:1d:81:
77:a8:69:be:f9:2f:d9:8e:fb:ae:9e:90:f4:07:f3:23:93:eb:
99:05:bd:23:1e:e5:50:e0:c4:f6:89:a0:68:5a:ef:78:7a:c6:
ca:ff:10:25:a8:bd:31:61:a0:16:3c:12:c9:4f:43:a8:55:c7:
20:76:b8:d1:52:95:cc:92:06:d6:94:f0:fc:2c:fd:0b:ef:f2:
05:9c:83:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 19:56:58 2024 by rpki-client on console-fra.rpki-client.org