Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/8a115b-3859-4759-85ae-fb853c65334a/1/rBhrfLZ5D3GfiaCbWJyN8A-Q-qA.roa
File: rBhrfLZ5D3GfiaCbWJyN8A-Q-qA.roa (raw, json)
Hash identifier: LuIrtHULPmcSmNYRvx6p0D/ZK0X2WmitRytLW7NzbWM=
Subject key identifier: AC:18:6B:7C:B6:79:0F:71:9F:89:A0:9B:58:9C:8D:F0:0F:90:FA:A0
Certificate issuer: /CN=861c67bdb6d8c230fcdb427a9f71b80135872fc2
Certificate serial: 018CC2DB23C1C98CC064C81292C7A5F38FAE
Authority key identifier: 86:1C:67:BD:B6:D8:C2:30:FC:DB:42:7A:9F:71:B8:01:35:87:2F:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hhxnvbbYwjD820J6n3G4ATWHL8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/8a115b-3859-4759-85ae-fb853c65334a/1/rBhrfLZ5D3GfiaCbWJyN8A-Q-qA.roa
Signing time: Mon 01 Jan 2024 02:29:50 +0000
ROA not before: Mon 01 Jan 2024 02:29:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41960
IP address blocks: 195.140.240.0/22 maxlen: 24
185.238.52.0/22 maxlen: 24
193.221.114.0/24 maxlen: 24
185.17.60.0/22 maxlen: 24
185.241.76.0/22 maxlen: 24
2a03:e0c0::/32 maxlen: 48
2a0c:2680::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/8a115b-3859-4759-85ae-fb853c65334a/1/hhxnvbbYwjD820J6n3G4ATWHL8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/8a115b-3859-4759-85ae-fb853c65334a/1/hhxnvbbYwjD820J6n3G4ATWHL8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/hhxnvbbYwjD820J6n3G4ATWHL8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:23:c1:c9:8c:c0:64:c8:12:92:c7:a5:f3:8f:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=861c67bdb6d8c230fcdb427a9f71b80135872fc2
Validity
Not Before: Jan 1 02:29:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ac186b7cb6790f719f89a09b589c8df00f90faa0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:0d:99:9f:ae:3e:b4:56:65:4d:73:47:85:f8:
04:24:fa:9f:97:74:37:55:f2:09:78:e0:89:8d:2d:
34:83:64:a5:75:07:f0:68:f9:ee:69:9f:3f:dd:c2:
d7:fd:83:97:9a:a3:35:51:6a:28:a2:59:33:ee:b5:
17:82:09:19:6a:7f:24:23:d8:68:02:08:eb:05:04:
a5:25:66:5a:6a:71:4c:ea:1a:93:14:48:e4:87:d3:
5f:9f:85:6e:84:6b:0e:04:d7:f9:ee:36:02:46:51:
65:23:d9:68:e5:b1:2f:ee:b2:88:b2:08:4a:65:8f:
c7:26:ce:97:9f:cf:64:b9:d5:34:67:d8:4f:2e:42:
6c:fc:a7:a3:14:1f:b0:e6:44:d1:09:5b:7e:5e:1a:
0a:8d:bf:33:e7:15:4b:a0:8f:fb:b0:00:8f:73:e3:
17:a4:92:af:8a:b3:be:97:2d:17:4e:d0:bd:b2:9b:
bd:ae:e6:f6:25:bd:f7:51:ff:a1:9d:05:69:ab:dd:
75:22:10:36:d5:b2:2c:27:4c:5e:60:aa:1f:58:d6:
7b:f6:9c:af:c2:a6:ed:e3:46:15:3a:5b:eb:54:82:
95:9c:31:8e:48:f2:ea:b6:4b:31:42:f6:c0:3e:cb:
00:22:79:45:ca:2b:dc:53:15:4e:98:d1:16:72:86:
e4:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:18:6B:7C:B6:79:0F:71:9F:89:A0:9B:58:9C:8D:F0:0F:90:FA:A0
X509v3 Authority Key Identifier:
keyid:86:1C:67:BD:B6:D8:C2:30:FC:DB:42:7A:9F:71:B8:01:35:87:2F:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hhxnvbbYwjD820J6n3G4ATWHL8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/8a115b-3859-4759-85ae-fb853c65334a/1/rBhrfLZ5D3GfiaCbWJyN8A-Q-qA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/8a115b-3859-4759-85ae-fb853c65334a/1/hhxnvbbYwjD820J6n3G4ATWHL8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.17.60.0/22
185.238.52.0/22
185.241.76.0/22
193.221.114.0/24
195.140.240.0/22
IPv6:
2a03:e0c0::/32
2a0c:2680::/29
Signature Algorithm: sha256WithRSAEncryption
66:3c:0e:1c:9a:35:0b:40:7a:11:08:e2:3c:61:85:81:5a:e9:
b0:59:c0:46:ba:ba:e9:64:0a:5c:2b:83:dc:3d:4d:aa:ab:6d:
f5:33:71:6f:8f:6b:6a:d9:a9:34:7f:d5:c0:36:19:6b:84:24:
12:25:d4:66:2f:c0:b4:89:5c:2a:c5:c6:b3:a9:0d:7c:d0:12:
d6:88:d0:62:37:b3:79:8c:1e:f7:a6:89:c7:d9:1b:b7:1c:dc:
7e:f2:76:4a:39:d4:f1:e4:19:0e:49:5e:22:b6:d7:b3:88:f3:
0c:4a:09:1e:7e:8b:05:d3:68:04:0a:db:52:a0:1a:b6:e7:db:
c9:37:3a:a6:b3:9f:3a:ae:a6:a9:64:e8:b7:51:b1:c8:95:32:
84:83:9d:59:6c:b6:19:f9:60:81:c0:77:fc:5a:ef:bc:4b:8b:
8e:d2:84:23:b8:1b:4e:2b:08:4a:25:34:57:24:a9:e6:d3:31:
d9:d4:62:39:df:45:c5:15:82:10:73:b7:8c:60:77:a2:1a:86:
b6:63:9e:28:d8:9a:eb:c1:0e:4a:e9:f4:24:2b:f6:85:82:c6:
9f:4e:e1:41:62:da:2e:4d:a9:39:31:5b:40:ac:cb:e6:39:3d:
8b:07:90:f2:87:89:3d:1a:7b:73:a1:44:4d:5a:c4:ce:49:f3:
f0:b7:a0:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 20:44:15 2024 by rpki-client on console-fra.rpki-client.org