Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/cc7e6b-8c86-45ab-ac03-cbadb64340e0/1/CiyAobmabfnjKoZLs8JCNePoZzs.roa
File: CiyAobmabfnjKoZLs8JCNePoZzs.roa (raw, json)
Hash identifier: g6PxSlXWRbAKmmyh/Bl8xP84MB76EOeMzp6qVVmDGcQ=
Subject key identifier: 0A:2C:80:A1:B9:9A:6D:F9:E3:2A:86:4B:B3:C2:42:35:E3:E8:67:3B
Certificate issuer: /CN=27c637a709ddbe7f6237af8d5b2913b42237157c
Certificate serial: 018CEDDD1E78E1A5004D3ABDD6BB1CCDAEB3
Authority key identifier: 27:C6:37:A7:09:DD:BE:7F:62:37:AF:8D:5B:29:13:B4:22:37:15:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J8Y3pwndvn9iN6-NWykTtCI3FXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/cc7e6b-8c86-45ab-ac03-cbadb64340e0/1/CiyAobmabfnjKoZLs8JCNePoZzs.roa
Signing time: Tue 09 Jan 2024 10:55:40 +0000
ROA not before: Tue 09 Jan 2024 10:55:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211029
IP address blocks: 185.253.244.0/22 maxlen: 24
185.253.246.0/24 maxlen: 24
185.253.245.0/24 maxlen: 24
185.253.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/cc7e6b-8c86-45ab-ac03-cbadb64340e0/1/J8Y3pwndvn9iN6-NWykTtCI3FXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/cc7e6b-8c86-45ab-ac03-cbadb64340e0/1/J8Y3pwndvn9iN6-NWykTtCI3FXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/J8Y3pwndvn9iN6-NWykTtCI3FXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ed:dd:1e:78:e1:a5:00:4d:3a:bd:d6:bb:1c:cd:ae:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27c637a709ddbe7f6237af8d5b2913b42237157c
Validity
Not Before: Jan 9 10:55:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0a2c80a1b99a6df9e32a864bb3c24235e3e8673b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:b2:f3:2c:f8:7e:15:9a:f3:b6:e0:1c:bf:15:
3c:1e:47:2e:32:72:12:eb:50:82:64:b2:6e:89:23:
ae:7e:1a:24:98:3e:74:86:6f:e4:41:e5:c0:64:87:
0b:e2:cd:71:38:ff:61:6a:24:bb:e4:92:f7:81:79:
e0:e6:d8:c5:d0:2d:2b:d3:1b:ca:25:d8:ec:bd:6d:
99:c6:f4:e2:42:e0:d3:bb:86:7d:54:62:63:a7:eb:
5b:ea:c9:d7:f4:69:af:9b:21:59:25:4b:02:6d:7a:
47:2e:74:09:dc:07:9a:be:af:26:ff:b5:2c:1a:ba:
9a:2a:98:27:44:77:58:9e:89:9a:c4:4a:99:19:ca:
6b:a5:3d:84:d4:9c:1a:62:12:07:2f:3f:4b:63:82:
1b:76:b0:18:f8:a6:f8:aa:ac:db:36:b3:4c:91:85:
26:4b:10:03:61:c1:0e:ec:f3:ee:5f:4f:e5:dd:13:
46:35:ab:fb:dd:e5:cb:4d:01:5b:08:c9:0b:aa:64:
8e:61:58:f5:48:a3:e6:95:20:b5:a3:90:27:9e:55:
e1:63:90:14:f6:b4:01:d0:13:e3:55:c3:5e:f8:9e:
1f:d9:7c:98:81:15:86:37:96:fb:7e:ae:03:6d:b2:
3c:1f:0e:91:e5:23:96:33:cc:43:98:eb:c2:97:f8:
4f:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:2C:80:A1:B9:9A:6D:F9:E3:2A:86:4B:B3:C2:42:35:E3:E8:67:3B
X509v3 Authority Key Identifier:
keyid:27:C6:37:A7:09:DD:BE:7F:62:37:AF:8D:5B:29:13:B4:22:37:15:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J8Y3pwndvn9iN6-NWykTtCI3FXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/cc7e6b-8c86-45ab-ac03-cbadb64340e0/1/CiyAobmabfnjKoZLs8JCNePoZzs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/cc7e6b-8c86-45ab-ac03-cbadb64340e0/1/J8Y3pwndvn9iN6-NWykTtCI3FXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.253.244.0/22
Signature Algorithm: sha256WithRSAEncryption
67:b6:56:dc:6e:da:a9:c6:c2:ee:cf:0b:87:a3:7f:1d:39:0c:
56:33:03:3b:51:27:83:81:c0:a8:71:bc:6f:42:0a:e4:b5:93:
43:fc:18:fa:b7:13:0a:95:a9:64:70:9a:32:ed:a7:ce:27:5e:
31:e5:37:ca:9a:f2:94:39:e9:dd:b3:56:7c:cc:de:1c:7f:14:
d6:8d:4d:4c:12:7b:ba:50:c0:0d:60:c0:b5:b1:ef:b0:0c:8b:
71:8c:8a:d0:04:7f:f4:97:1d:ac:15:b1:bd:b4:d1:28:f5:8e:
3a:1e:95:3f:b5:72:33:6f:96:02:82:16:50:03:04:c6:5e:75:
0a:da:aa:e3:1b:a0:b7:81:8f:08:ea:9b:e6:5d:f3:4c:9f:58:
79:7e:cb:96:57:d2:36:54:06:65:a7:c1:82:74:bf:eb:ff:d0:
bd:50:ec:3f:1b:0a:a8:4e:d9:29:f5:85:f9:e1:3a:67:12:91:
31:8e:99:24:95:2a:2c:3b:9b:6d:6a:e9:7d:22:dd:b7:84:a3:
88:2b:1a:a2:cf:4b:92:98:5f:76:7d:41:ff:9e:b3:2b:fd:43:
51:21:75:1d:b4:2c:be:a1:4a:7a:56:2d:f0:2f:87:6a:a8:8a:
5a:7a:57:26:55:5b:cd:77:af:90:b3:07:8e:66:36:02:c8:ca:
23:b8:92:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 12:31:57 2024 by rpki-client on console-ams.rpki-client.org