Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/ce0b21-d65c-42e6-874b-f4cb867f90d8/1/cCaLf_GxdOgv_OJ6rlMA9CsHYDg.roa
File: cCaLf_GxdOgv_OJ6rlMA9CsHYDg.roa (raw, json)
Hash identifier: uSDaK4rc8Iyy5njnF32XfjzST2e6Uh8B3xHFZqyjstc=
Subject key identifier: 70:26:8B:7F:F1:B1:74:E8:2F:FC:E2:7A:AE:53:00:F4:2B:07:60:38
Certificate issuer: /CN=b06f4040491a656ff7526d2f17611b0d68acbd0c
Certificate serial: 018CC56EA8AF6CABE58FB8219D5DC1247F58
Authority key identifier: B0:6F:40:40:49:1A:65:6F:F7:52:6D:2F:17:61:1B:0D:68:AC:BD:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sG9AQEkaZW_3Um0vF2EbDWisvQw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/ce0b21-d65c-42e6-874b-f4cb867f90d8/1/cCaLf_GxdOgv_OJ6rlMA9CsHYDg.roa
Signing time: Mon 01 Jan 2024 14:30:12 +0000
ROA not before: Mon 01 Jan 2024 14:30:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204996
IP address blocks: 185.170.248.0/22 maxlen: 24
185.170.248.0/23 maxlen: 23
185.170.248.0/24 maxlen: 24
185.170.251.0/24 maxlen: 24
185.170.249.0/24 maxlen: 24
185.170.250.0/24 maxlen: 24
185.170.250.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/ce0b21-d65c-42e6-874b-f4cb867f90d8/1/sG9AQEkaZW_3Um0vF2EbDWisvQw.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/ce0b21-d65c-42e6-874b-f4cb867f90d8/1/sG9AQEkaZW_3Um0vF2EbDWisvQw.mft
rsync://rpki.ripe.net/repository/DEFAULT/sG9AQEkaZW_3Um0vF2EbDWisvQw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 14:21:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:a8:af:6c:ab:e5:8f:b8:21:9d:5d:c1:24:7f:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b06f4040491a656ff7526d2f17611b0d68acbd0c
Validity
Not Before: Jan 1 14:30:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=70268b7ff1b174e82ffce27aae5300f42b076038
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:50:df:9d:5c:84:ba:c9:0a:be:e4:91:e5:0f:
fa:c7:0f:23:ea:18:3d:35:d0:95:83:d8:23:d5:73:
52:9d:b7:c5:7f:03:70:13:ed:8a:7a:4e:8c:62:ae:
dc:92:67:f7:a0:72:2b:3a:86:11:f5:fc:aa:31:bb:
2b:34:fd:f6:da:ea:5e:4a:9c:a5:26:b5:a6:a2:44:
8a:b3:ed:8b:f7:66:12:04:55:d1:2d:b4:9f:34:84:
d5:1b:f1:02:90:ca:b3:fa:3f:fc:ac:f8:70:ec:cc:
9f:67:08:fb:64:66:b5:49:a5:61:06:11:01:5e:0b:
8c:e4:c0:56:de:f8:96:09:84:3c:33:e1:26:a7:1f:
b5:cb:4a:34:27:6c:44:3b:c8:65:39:69:58:61:27:
09:90:dd:58:50:9a:a9:f7:7a:d1:e2:4a:ee:05:75:
e1:ca:d0:f7:c7:63:51:c6:93:63:05:3c:f7:6c:18:
14:cd:98:bc:67:65:6e:31:db:da:02:6d:06:c2:6d:
96:44:5f:16:41:10:61:cd:65:5c:c6:04:e1:17:0c:
e4:83:f1:c4:de:ad:2b:f9:fd:32:b5:68:a9:4f:35:
88:24:a3:ca:06:a1:70:d4:40:0f:c3:bb:7e:27:e8:
a4:6c:57:a4:51:a4:40:e8:40:94:b1:d6:51:6e:59:
fc:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:26:8B:7F:F1:B1:74:E8:2F:FC:E2:7A:AE:53:00:F4:2B:07:60:38
X509v3 Authority Key Identifier:
keyid:B0:6F:40:40:49:1A:65:6F:F7:52:6D:2F:17:61:1B:0D:68:AC:BD:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sG9AQEkaZW_3Um0vF2EbDWisvQw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/ce0b21-d65c-42e6-874b-f4cb867f90d8/1/cCaLf_GxdOgv_OJ6rlMA9CsHYDg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/ce0b21-d65c-42e6-874b-f4cb867f90d8/1/sG9AQEkaZW_3Um0vF2EbDWisvQw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.170.248.0/22
Signature Algorithm: sha256WithRSAEncryption
c3:0f:33:a5:dd:87:8c:5a:06:05:88:b6:25:67:8f:ad:8a:55:
ae:97:6a:83:ef:36:8e:fc:49:60:b8:b8:d5:0d:ae:f3:60:11:
d2:98:de:e2:61:6d:ef:99:35:57:67:2e:61:71:19:78:bd:d9:
7e:df:36:6a:9b:8a:90:fa:94:f8:4a:82:88:e3:a0:03:4e:f3:
52:49:63:24:89:e3:03:c6:bf:b8:75:28:cd:73:dc:c5:ca:f6:
06:3d:36:1e:09:81:63:51:47:2f:7f:f7:76:a6:29:68:3f:a8:
29:9a:83:01:c4:23:fd:db:37:4d:d3:5b:db:6d:16:cd:be:2a:
d6:65:e2:23:42:f3:b8:06:fe:04:39:92:cf:88:fb:9c:29:05:
67:b9:25:e4:d2:fa:49:30:a8:06:78:47:f1:b7:73:78:2f:c2:
62:3e:e4:87:89:de:9c:14:2a:41:76:7d:97:fc:9f:2c:0f:11:
ca:cc:a6:55:a5:8b:bc:98:8c:f9:aa:6b:e8:83:16:5f:cf:2c:
95:e1:09:7f:2f:07:8f:a0:6e:70:b3:b8:d2:ee:10:13:fb:bf:
7c:39:52:c1:aa:29:bc:5d:c1:4a:c5:e1:4a:0a:c6:5e:24:ab:
3f:f3:50:4c:f1:1c:22:1b:b6:47:f1:cd:ac:c2:de:f2:5e:74:
ac:6f:04:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 18:39:06 2024 by rpki-client on console-fra.rpki-client.org