Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/ea376d-8efc-4440-8f54-949aa5b75a45/1/aAngZjfH7SvAWnI09UzjduTubA8.roa
File: aAngZjfH7SvAWnI09UzjduTubA8.roa (raw, json)
Hash identifier: Tb3YsE5lv5Y6iE1dK/NHEuAVRwG9FRv9IL7U+4pGqTs=
Subject key identifier: 68:09:E0:66:37:C7:ED:2B:C0:5A:72:34:F5:4C:E3:76:E4:EE:6C:0F
Certificate issuer: /CN=196379769c57ca5b26a2c61fa5d9acc527bea789
Certificate serial: 018CC424EACA86AEEADC5D04C85EFA260E60
Authority key identifier: 19:63:79:76:9C:57:CA:5B:26:A2:C6:1F:A5:D9:AC:C5:27:BE:A7:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GWN5dpxXylsmosYfpdmsxSe-p4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/ea376d-8efc-4440-8f54-949aa5b75a45/1/aAngZjfH7SvAWnI09UzjduTubA8.roa
Signing time: Mon 01 Jan 2024 08:30:02 +0000
ROA not before: Mon 01 Jan 2024 08:30:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48885
IP address blocks: 185.167.4.0/24 maxlen: 24
185.167.5.0/24 maxlen: 24
185.167.7.0/24 maxlen: 24
185.167.6.0/24 maxlen: 24
185.196.137.0/24 maxlen: 24
185.196.136.0/24 maxlen: 24
2a0a:6d40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/ea376d-8efc-4440-8f54-949aa5b75a45/1/GWN5dpxXylsmosYfpdmsxSe-p4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/ea376d-8efc-4440-8f54-949aa5b75a45/1/GWN5dpxXylsmosYfpdmsxSe-p4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/GWN5dpxXylsmosYfpdmsxSe-p4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Jun 2024 09:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:ea:ca:86:ae:ea:dc:5d:04:c8:5e:fa:26:0e:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=196379769c57ca5b26a2c61fa5d9acc527bea789
Validity
Not Before: Jan 1 08:30:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6809e06637c7ed2bc05a7234f54ce376e4ee6c0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:f7:ff:32:c8:3b:30:97:c9:e6:2a:87:32:bd:
52:e7:82:cf:36:8c:ca:72:d3:4a:b0:fb:27:4c:1c:
66:cb:6d:3c:0f:9c:4f:a6:f9:59:31:81:de:6e:2d:
f0:15:68:28:b8:7a:08:08:7f:0a:8b:75:e4:fe:3f:
68:20:c7:86:c4:4d:b0:a3:e2:55:b4:6e:33:c9:0b:
b3:a7:ab:99:96:17:53:0e:27:1b:c2:25:eb:5c:7c:
ad:9c:5b:8e:e2:a8:d4:38:25:65:d9:b8:a8:1e:40:
5b:1a:06:ca:b2:c7:67:e4:56:bd:95:a8:e6:f9:e2:
a5:f5:58:77:58:c0:d0:40:d2:da:df:c3:95:23:3f:
a3:9c:73:ee:69:d8:81:5f:9e:0e:62:bc:c5:8c:97:
ac:56:2e:fc:85:2e:9b:e8:d4:a4:53:64:dd:7c:c4:
46:7d:19:d0:67:67:7e:36:12:a7:99:cb:fc:bb:28:
50:4d:0f:65:4f:8a:a4:a5:c7:a1:7d:be:45:95:a0:
17:6a:44:45:bb:3a:05:30:4a:ca:db:44:6c:e2:a5:
3d:d0:b1:b0:83:4a:c8:8b:47:09:46:87:0e:1e:5b:
97:26:86:42:61:66:bb:23:e3:78:e7:04:57:2b:65:
61:05:cd:f6:b0:9e:48:b7:ff:88:b9:16:18:38:56:
08:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:09:E0:66:37:C7:ED:2B:C0:5A:72:34:F5:4C:E3:76:E4:EE:6C:0F
X509v3 Authority Key Identifier:
keyid:19:63:79:76:9C:57:CA:5B:26:A2:C6:1F:A5:D9:AC:C5:27:BE:A7:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GWN5dpxXylsmosYfpdmsxSe-p4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/ea376d-8efc-4440-8f54-949aa5b75a45/1/aAngZjfH7SvAWnI09UzjduTubA8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/ea376d-8efc-4440-8f54-949aa5b75a45/1/GWN5dpxXylsmosYfpdmsxSe-p4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.167.4.0/22
185.196.136.0/23
IPv6:
2a0a:6d40::/29
Signature Algorithm: sha256WithRSAEncryption
0d:01:cf:50:f4:23:63:f3:82:99:a2:dd:58:fa:b6:f0:38:e1:
e8:29:ee:8f:f7:c9:a1:72:b6:cc:43:6d:b4:c9:9f:fc:87:48:
9f:cc:88:0f:98:8e:1a:14:65:3a:a0:61:40:47:f5:b4:ab:31:
53:23:42:1e:52:e7:d5:93:87:79:a6:82:3f:72:f5:54:38:54:
6f:89:ff:f4:8b:af:9b:e4:6b:8b:1a:da:bc:d2:9d:3c:19:67:
d5:af:36:21:a9:bc:91:ce:c7:b5:7d:c4:37:a8:fb:3e:fc:82:
7d:5f:7e:c6:ea:df:40:ed:ef:d5:05:c8:81:77:ed:45:96:31:
d7:66:cb:01:4e:f0:e2:d3:84:ea:76:42:8e:b4:af:b9:90:21:
66:08:c9:b4:68:87:c5:95:52:7a:08:1d:87:b8:c5:51:79:52:
66:1a:63:9e:77:90:72:07:62:63:cf:69:9c:70:e2:88:00:f8:
b3:e2:73:d9:cc:de:77:6a:cc:b0:47:0c:62:60:34:91:c1:d7:
a0:66:53:4d:06:17:f0:7d:27:a5:99:eb:6d:15:7f:aa:86:33:
b5:c8:08:62:74:f8:73:4d:f6:8f:f2:2e:98:84:a4:26:ab:e7:
3e:b8:3c:6e:dc:64:c2:c8:85:54:18:35:4a:06:7e:f7:a3:5e:
b3:5a:fd:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 17:35:25 2024 by rpki-client on console-fra.rpki-client.org