Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/n80W8K5oVE875H00lB0iswOXEFE.roa
File: n80W8K5oVE875H00lB0iswOXEFE.roa (raw, json)
Hash identifier: VRcqvG2dEMG8Y3oR+5n5jVGNXEvZ6CJPL9ygPJdy7zM=
Subject key identifier: 9F:CD:16:F0:AE:68:54:4F:3B:E4:7D:34:94:1D:22:B3:03:97:10:51
Certificate issuer: /CN=c398060f1bf22f0999cb071b1b42696dbc43e10c
Certificate serial: 018CC8016E0E67FDBF006EDC19C72612C864
Authority key identifier: C3:98:06:0F:1B:F2:2F:09:99:CB:07:1B:1B:42:69:6D:BC:43:E1:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w5gGDxvyLwmZywcbG0JpbbxD4Qw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/n80W8K5oVE875H00lB0iswOXEFE.roa
Signing time: Tue 02 Jan 2024 02:29:46 +0000
ROA not before: Tue 02 Jan 2024 02:29:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197727
IP address blocks: 194.151.12.0/24 maxlen: 24
185.15.165.0/24 maxlen: 24
185.15.164.0/22 maxlen: 22
185.15.167.0/24 maxlen: 24
194.151.85.0/24 maxlen: 24
194.151.86.0/24 maxlen: 24
2001:67c:21ac::/48 maxlen: 48
2a03:ca40::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/w5gGDxvyLwmZywcbG0JpbbxD4Qw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/w5gGDxvyLwmZywcbG0JpbbxD4Qw.mft
rsync://rpki.ripe.net/repository/DEFAULT/w5gGDxvyLwmZywcbG0JpbbxD4Qw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:6e:0e:67:fd:bf:00:6e:dc:19:c7:26:12:c8:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c398060f1bf22f0999cb071b1b42696dbc43e10c
Validity
Not Before: Jan 2 02:29:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9fcd16f0ae68544f3be47d34941d22b303971051
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:1b:6e:67:f5:b8:0c:c4:b7:c3:7d:0a:9f:40:
3f:28:5b:2a:7e:5d:3b:85:e6:e2:80:87:d5:13:a1:
36:51:26:59:14:df:95:89:00:a7:d5:9b:4a:c7:10:
df:76:16:9f:9b:7a:b7:d7:78:e9:70:da:f4:52:33:
95:0e:4b:84:0a:9a:76:38:eb:c1:8a:bc:46:03:73:
4f:77:9d:20:25:06:70:7e:36:84:4b:47:38:4c:08:
b3:a5:8f:33:5f:d3:43:3c:c5:03:aa:51:9d:07:0d:
74:7c:6e:0a:e0:93:2e:97:da:0e:af:9c:c7:c6:8e:
bb:9c:3f:71:22:8a:81:e1:07:f6:d3:91:7a:52:41:
de:50:e6:02:fe:80:25:b6:26:5c:46:79:5f:c4:96:
53:23:a7:88:51:4d:64:6d:cc:36:8c:7e:4a:92:7b:
f1:7a:7a:50:c9:88:9f:76:97:50:e4:1d:2b:40:cc:
73:f7:10:3b:03:4a:b6:5d:25:cd:cc:3b:eb:7e:9c:
cd:f6:f4:e7:6e:6a:24:5a:e1:c1:e1:c5:bc:29:64:
79:7c:84:5c:4e:77:ef:e4:ea:c3:28:4e:6e:bc:ef:
9a:5a:6f:7a:8e:cb:c7:58:40:2e:c3:60:4c:b1:06:
9f:94:59:98:8b:dd:01:a2:45:02:94:56:a2:4f:9d:
6f:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:CD:16:F0:AE:68:54:4F:3B:E4:7D:34:94:1D:22:B3:03:97:10:51
X509v3 Authority Key Identifier:
keyid:C3:98:06:0F:1B:F2:2F:09:99:CB:07:1B:1B:42:69:6D:BC:43:E1:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w5gGDxvyLwmZywcbG0JpbbxD4Qw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/n80W8K5oVE875H00lB0iswOXEFE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/w5gGDxvyLwmZywcbG0JpbbxD4Qw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.15.164.0/22
194.151.12.0/24
194.151.85.0-194.151.86.255
IPv6:
2001:67c:21ac::/48
2a03:ca40::/32
Signature Algorithm: sha256WithRSAEncryption
2e:18:fc:6d:0f:76:30:72:5b:fe:5b:6c:9b:48:b3:f3:5d:65:
b3:05:c7:91:8b:6e:4e:d6:e2:55:4d:70:2a:99:ba:bd:4f:37:
80:89:8a:eb:5f:29:5d:3f:4d:cc:99:72:d2:a7:f2:86:bc:fb:
ab:60:e1:e7:81:c0:c9:09:83:4b:2b:08:d6:b7:b8:e1:67:8b:
bf:a2:5b:b7:f5:c5:e9:e5:fb:cd:db:cc:e7:a1:0a:51:4d:5a:
cd:1a:b0:00:5c:6c:90:3b:b8:04:a2:7b:e3:28:83:c2:7b:6a:
ab:12:5e:5a:a7:61:6b:4f:4b:70:d5:19:b8:ac:2b:90:a1:c4:
65:01:05:85:00:ba:d3:6b:33:ec:5e:46:45:e3:aa:22:2e:d5:
3b:f3:ba:de:32:1a:2b:50:b4:b7:23:98:44:53:f2:46:63:3e:
b3:38:8d:8f:3f:e6:20:c2:ba:ed:33:13:ad:36:97:3d:ff:7e:
d4:3f:e4:53:62:bf:61:ee:e9:f8:30:df:da:e6:40:87:60:bf:
ee:1c:64:5b:3b:10:df:a8:6d:33:49:f9:f7:a0:e1:2d:d3:b5:
e1:0d:d4:15:20:27:10:86:03:f2:3e:13:f5:80:6b:8e:3b:21:
25:41:71:1d:5e:89:fa:23:86:ce:11:9d:ce:e8:e8:da:13:52:
d4:e8:74:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:52:05 2024 by rpki-client on console-fra.rpki-client.org