Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/027036-82b3-4128-b954-d012ca9ec197/1/8642AKsONcNrXvz_syAV1Di4Sbc.roa
File: 8642AKsONcNrXvz_syAV1Di4Sbc.roa (raw, json)
Hash identifier: JlGD86JuPECCCJQ9iNee7TpxL7r0JEVI1+Tg40J9uiw=
Subject key identifier: F3:AE:36:00:AB:0E:35:C3:6B:5E:FC:FF:B3:20:15:D4:38:B8:49:B7
Certificate issuer: /CN=cc72e633df5635a9f98d2f68a6d2adcb44155cdc
Certificate serial: 018F23CD48B3C7BFD805E09502B01DC31157
Authority key identifier: CC:72:E6:33:DF:56:35:A9:F9:8D:2F:68:A6:D2:AD:CB:44:15:5C:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zHLmM99WNan5jS9optKty0QVXNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/027036-82b3-4128-b954-d012ca9ec197/1/8642AKsONcNrXvz_syAV1Di4Sbc.roa
Signing time: Sun 28 Apr 2024 08:23:26 +0000
ROA not before: Sun 28 Apr 2024 08:23:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59773
IP address blocks: 185.71.204.0/24 maxlen: 24
185.71.206.0/24 maxlen: 24
185.71.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/027036-82b3-4128-b954-d012ca9ec197/1/zHLmM99WNan5jS9optKty0QVXNw.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/027036-82b3-4128-b954-d012ca9ec197/1/zHLmM99WNan5jS9optKty0QVXNw.mft
rsync://rpki.ripe.net/repository/DEFAULT/zHLmM99WNan5jS9optKty0QVXNw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:23:cd:48:b3:c7:bf:d8:05:e0:95:02:b0:1d:c3:11:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc72e633df5635a9f98d2f68a6d2adcb44155cdc
Validity
Not Before: Apr 28 08:23:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f3ae3600ab0e35c36b5efcffb32015d438b849b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:f0:ec:f7:e4:ea:3b:1a:26:e3:14:b5:40:e2:
12:63:56:7e:af:39:cd:aa:d7:dc:fa:f6:9a:ab:ac:
2e:06:6f:7e:e1:26:45:5a:8f:ea:20:13:a8:80:28:
d7:55:e9:88:49:be:01:0f:ac:71:8d:c2:5c:df:1e:
95:93:e3:52:79:16:e6:1c:52:8e:a8:35:dd:4b:c2:
17:36:55:ba:68:d3:cf:2c:e4:03:9d:ad:9c:dd:f9:
ab:3d:77:57:85:32:94:1e:00:99:6d:f5:6b:43:5f:
e2:41:0c:2e:99:5f:06:f9:e3:ed:a4:b2:3e:97:12:
a4:79:6b:88:6a:37:1d:f6:ce:33:d8:19:7f:e2:6e:
74:7b:eb:a8:44:d1:86:10:4f:b6:5c:b3:78:e6:8e:
80:00:b2:6c:a5:a0:c1:ff:64:7b:ac:ba:35:30:ce:
97:2a:db:f6:39:53:f1:b5:e2:83:26:b4:18:4c:2b:
fd:6f:01:e9:1a:94:4a:aa:5a:29:65:90:b9:18:9a:
f2:a3:07:0d:1b:3b:4d:9a:b5:82:5b:d6:da:e7:ca:
16:0c:d6:5d:09:63:31:f8:bf:08:d9:c1:e7:48:02:
a8:34:b3:7a:eb:17:fb:e0:ce:d9:e9:54:02:ee:a2:
d0:37:e0:8b:42:f5:b1:aa:4d:3e:ae:f8:7c:8b:2d:
bb:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:AE:36:00:AB:0E:35:C3:6B:5E:FC:FF:B3:20:15:D4:38:B8:49:B7
X509v3 Authority Key Identifier:
keyid:CC:72:E6:33:DF:56:35:A9:F9:8D:2F:68:A6:D2:AD:CB:44:15:5C:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zHLmM99WNan5jS9optKty0QVXNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/027036-82b3-4128-b954-d012ca9ec197/1/8642AKsONcNrXvz_syAV1Di4Sbc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/027036-82b3-4128-b954-d012ca9ec197/1/zHLmM99WNan5jS9optKty0QVXNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.71.204.0/24
185.71.206.0/23
Signature Algorithm: sha256WithRSAEncryption
03:06:58:fa:11:a9:84:fa:26:56:dc:df:93:5d:1a:92:c7:f0:
84:f4:da:6c:c0:23:8d:1f:25:6c:33:75:8f:60:53:0d:fa:3e:
fd:53:ba:af:0d:60:e4:1f:56:97:82:db:02:c7:a9:3d:cf:33:
91:34:aa:6e:8c:c9:48:5a:34:23:a3:d5:3c:2a:53:87:b2:20:
80:7d:6e:80:98:ef:6b:e6:ce:d5:59:51:fe:2d:a4:bc:cf:4b:
4b:54:7d:fb:cb:b7:3a:8b:83:b3:12:de:ea:75:a7:92:c4:05:
20:21:c4:59:d4:af:12:3f:f9:96:af:84:3f:a8:8d:f8:8c:a4:
82:82:ea:cb:e4:e1:18:d3:3b:ba:16:dc:3f:ef:67:d4:ed:b8:
0a:cc:76:f6:0f:d4:d9:f9:09:1e:15:1d:bc:a6:3e:19:83:99:
bc:6f:2f:ce:5e:98:d9:59:66:83:3d:3d:2b:84:29:69:aa:93:
9e:02:34:e1:69:37:58:8d:6a:87:de:07:31:2d:f8:b3:09:d3:
c3:a7:d5:8b:68:73:55:26:9b:d6:c4:2e:ae:c3:38:7c:e6:ec:
7b:db:97:df:c2:9e:a4:c8:c5:ba:74:46:0b:b9:aa:8a:c4:cb:
a0:02:4d:9c:3e:f0:9d:f3:a0:69:cb:e7:19:94:68:c5:17:ea:
3c:87:76:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:12:10 2024 by rpki-client on console-ams.rpki-client.org