Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/8xAPMXk_TcRqM5UUhaGFY9bISmE.roa
File: 8xAPMXk_TcRqM5UUhaGFY9bISmE.roa (raw, json)
Hash identifier: ihbGOdiuJiXenBYHVWBhjeIMlaBTLoLLfcDjeZ1OA+4=
Subject key identifier: F3:10:0F:31:79:3F:4D:C4:6A:33:95:14:85:A1:85:63:D6:C8:4A:61
Certificate issuer: /CN=01626ffd800eafa336bdf343141f03f7c393c364
Certificate serial: 018CC5DC8FA4A1714A89F92B0B402A3A4073
Authority key identifier: 01:62:6F:FD:80:0E:AF:A3:36:BD:F3:43:14:1F:03:F7:C3:93:C3:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AWJv_YAOr6M2vfNDFB8D98OTw2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/8xAPMXk_TcRqM5UUhaGFY9bISmE.roa
Signing time: Mon 01 Jan 2024 16:30:15 +0000
ROA not before: Mon 01 Jan 2024 16:30:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48635
IP address blocks: 85.92.132.0/24 maxlen: 24
85.92.139.0/24 maxlen: 24
85.92.145.0/24 maxlen: 24
213.189.29.0/24 maxlen: 24
89.18.168.0/24 maxlen: 24
83.98.177.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/AWJv_YAOr6M2vfNDFB8D98OTw2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/AWJv_YAOr6M2vfNDFB8D98OTw2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/AWJv_YAOr6M2vfNDFB8D98OTw2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:8f:a4:a1:71:4a:89:f9:2b:0b:40:2a:3a:40:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01626ffd800eafa336bdf343141f03f7c393c364
Validity
Not Before: Jan 1 16:30:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f3100f31793f4dc46a33951485a18563d6c84a61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b3:aa:00:c2:8f:b0:0d:10:d5:c2:1e:57:30:
e6:29:56:fa:de:d7:ae:33:c4:eb:c6:39:fb:55:90:
27:2c:7b:c4:b8:ca:9a:83:f7:73:45:09:2b:66:50:
4d:1d:65:20:c1:40:24:4b:7c:6c:a5:4e:a6:b8:f1:
1e:66:64:61:fa:88:bb:38:86:1b:f6:e0:9d:6b:b3:
0c:bf:75:ae:58:f0:21:ab:81:d2:74:02:29:4f:6c:
3c:4b:37:c1:ce:86:1b:9e:47:3e:8d:20:bd:37:82:
0c:c6:b3:b3:92:65:ff:d8:60:e2:26:01:e3:86:5a:
c9:3c:00:7c:b4:f0:d3:62:97:6e:ef:62:f0:d0:83:
3e:be:af:44:2e:b1:5c:ff:31:b4:de:94:bf:49:3a:
e6:0d:12:58:7e:e7:d2:4a:f2:94:ec:4e:02:0c:f8:
8f:68:5e:d4:2d:34:c8:13:39:28:e2:b1:3b:4b:f1:
76:67:76:4c:e5:42:53:24:73:95:12:8b:f5:a3:2e:
c4:c3:b5:2b:82:06:ce:cd:a3:92:63:8f:c7:5d:fa:
4c:01:27:f5:7c:8c:aa:9c:8b:10:a1:48:d0:40:fb:
ea:47:1e:eb:d3:b7:ac:dd:3f:7e:43:62:ae:cc:da:
d7:bf:23:c0:2a:8a:d0:2d:09:72:1a:09:4e:c8:41:
3c:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:10:0F:31:79:3F:4D:C4:6A:33:95:14:85:A1:85:63:D6:C8:4A:61
X509v3 Authority Key Identifier:
keyid:01:62:6F:FD:80:0E:AF:A3:36:BD:F3:43:14:1F:03:F7:C3:93:C3:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AWJv_YAOr6M2vfNDFB8D98OTw2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/8xAPMXk_TcRqM5UUhaGFY9bISmE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/AWJv_YAOr6M2vfNDFB8D98OTw2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.98.177.0/24
85.92.132.0/24
85.92.139.0/24
85.92.145.0/24
89.18.168.0/24
213.189.29.0/24
Signature Algorithm: sha256WithRSAEncryption
11:9c:ef:e9:8c:c9:d2:c7:24:02:66:d5:fa:ba:30:22:9f:5e:
9f:3f:62:5e:7b:5f:73:4d:43:4b:15:dc:b3:bc:56:50:53:ff:
50:37:31:66:39:8c:53:85:29:ab:61:5e:0b:da:52:6c:85:33:
97:ed:b0:cf:65:f8:f5:45:2b:5a:dc:a1:8c:f6:38:33:91:8d:
9a:31:38:1a:79:f9:c3:44:a2:cd:67:eb:24:49:5e:03:56:cb:
e8:51:6f:13:c5:59:f7:c9:5d:4e:29:a1:56:59:26:3d:fa:47:
85:aa:1d:61:ad:6c:55:f1:fd:0d:a6:e5:e4:3d:2d:ce:89:3f:
38:03:aa:7e:72:41:d1:6d:b6:c4:ea:5d:5f:fa:5f:1e:d4:67:
d3:30:2c:c2:56:04:8e:5b:8e:99:89:5c:eb:26:1c:2c:4b:5e:
d2:4a:b0:42:32:b6:51:1c:fc:e2:9e:76:9f:94:ae:7f:c6:86:
5d:1b:29:f8:22:34:6b:a3:bd:32:9b:3c:9d:e6:76:f8:f8:52:
fb:9e:71:23:c0:62:74:33:0f:6a:7f:e6:c8:14:51:97:73:b4:
49:40:00:45:52:8d:e5:c1:ce:6a:f9:8c:51:4c:15:91:80:d4:
34:56:f6:c8:9a:f2:2c:7e:3f:5c:47:a8:ce:59:de:28:16:eb:
75:e7:ff:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 18:54:48 2024 by rpki-client on console-ams.rpki-client.org