Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/8wKxutoky3U7YKk_sdtDNiPkFHk.roa
File: 8wKxutoky3U7YKk_sdtDNiPkFHk.roa (raw, json)
Hash identifier: h1iEnBNxmt4vzHkyrRf1BxKg8RlHivBSxMQZpDnBLG4=
Subject key identifier: F3:02:B1:BA:DA:24:CB:75:3B:60:A9:3F:B1:DB:43:36:23:E4:14:79
Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial: 018CC64A7303B6C6AE39FCD9BCCA93F23444
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/8wKxutoky3U7YKk_sdtDNiPkFHk.roa
Signing time: Mon 01 Jan 2024 18:30:17 +0000
ROA not before: Mon 01 Jan 2024 18:30:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3223
IP address blocks: 188.72.82.0/24 maxlen: 24
188.72.98.0/24 maxlen: 24
37.230.130.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Jun 2024 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:73:03:b6:c6:ae:39:fc:d9:bc:ca:93:f2:34:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Validity
Not Before: Jan 1 18:30:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f302b1bada24cb753b60a93fb1db433623e41479
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:cf:1e:2a:0b:51:43:25:83:07:57:33:c1:4c:
23:54:e7:79:10:93:69:3e:18:40:ac:b4:dd:a0:58:
c3:61:1a:3e:ab:ad:5e:16:99:39:91:21:3e:cb:bf:
93:a8:88:9e:dd:51:be:15:c9:9b:75:43:02:c6:c3:
2e:ef:0f:2d:2b:a0:05:5e:61:98:67:50:07:42:2b:
7f:32:f2:0c:39:97:ed:cc:68:75:39:8f:a5:5b:93:
b6:1e:cf:e4:3b:82:d8:f1:79:c5:fb:e0:40:3f:2d:
93:74:4e:46:b3:76:0c:e2:49:99:23:9f:1f:56:33:
07:18:bd:a2:9f:6a:6a:68:10:fc:8b:49:18:c2:d4:
ce:21:b1:a0:ae:bc:60:5a:41:4c:0e:d1:12:d3:b7:
c6:ab:7e:73:9a:5e:84:1d:b6:67:16:8c:c4:7b:f1:
f9:c4:2d:d3:ab:59:43:9e:18:5a:0f:ca:00:55:19:
6e:5b:fd:de:84:a7:ba:ea:7e:b5:6e:0d:72:a2:d8:
45:f5:3d:24:6e:dd:43:45:be:18:9d:50:9f:e4:ad:
22:5d:a4:8a:c2:59:22:f6:23:d9:d4:57:fd:ab:f0:
f0:60:bf:40:7d:71:77:18:54:6f:ad:00:fb:81:ff:
61:e1:9f:3c:b0:ba:6a:70:18:4f:bc:b8:4a:0d:f4:
64:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:02:B1:BA:DA:24:CB:75:3B:60:A9:3F:B1:DB:43:36:23:E4:14:79
X509v3 Authority Key Identifier:
keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/8wKxutoky3U7YKk_sdtDNiPkFHk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.230.130.0/24
188.72.82.0/24
188.72.98.0/24
Signature Algorithm: sha256WithRSAEncryption
c9:78:20:3a:55:78:51:c5:bc:03:a4:a3:bf:28:b8:43:12:dc:
70:30:8e:60:63:dc:7f:87:ea:10:49:79:3f:55:37:d0:3f:36:
b0:42:9c:2c:ae:e3:1b:52:52:29:91:ad:af:c0:21:f4:96:a3:
d8:f7:fd:67:78:7a:f2:95:c6:40:6a:f2:76:fd:c4:1a:26:c8:
b5:bc:45:cc:9b:2f:9d:f5:2d:4a:7f:98:6d:92:b8:28:e5:17:
61:11:d6:1b:56:5b:83:1f:86:bc:06:b1:e4:1b:2e:71:ba:e5:
58:12:ca:6f:0a:bd:b7:e5:c0:1a:7a:2b:d3:01:f4:03:70:51:
9a:2a:3b:a0:9b:fb:24:2b:9c:3c:ae:7e:6c:d9:4e:97:60:de:
28:11:b5:de:a2:88:a1:ec:3c:09:53:a1:86:c5:16:4d:a5:98:
c4:9c:df:a5:4c:3b:dc:70:58:ed:f7:0d:1e:6d:3f:f9:52:4f:
5b:91:7e:0f:59:27:25:c0:69:37:64:38:9d:bf:53:cc:0f:92:
02:9c:59:31:ac:22:8c:ca:c4:cb:f4:59:c9:be:83:85:2e:31:
10:a0:e5:f6:36:1c:54:b7:89:b6:d9:7c:64:a0:e5:da:aa:42:
52:d0:ba:e1:37:d9:16:42:10:bc:b7:87:73:c4:dd:0d:cd:04:
53:bd:d9:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 09:02:26 2024 by rpki-client on console-ams.rpki-client.org