Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/d6a422-3612-45af-83ab-d24b68966e0e/1/yFzuc1zz0kuBWi3lad37_T3Atfg.roa
File: yFzuc1zz0kuBWi3lad37_T3Atfg.roa (raw, json)
Hash identifier: KJJg72b2ikecJ9YEwMRiVCNrrjqW5ZjoxPTK4m4FxZg=
Subject key identifier: C8:5C:EE:73:5C:F3:D2:4B:81:5A:2D:E5:69:DD:FB:FD:3D:C0:B5:F8
Certificate issuer: /CN=a15e3f974b5f974656ccf4d45596caad1b9096d4
Certificate serial: 018CC2DAD47043DBC0A0B1443C11ED9EF037
Authority key identifier: A1:5E:3F:97:4B:5F:97:46:56:CC:F4:D4:55:96:CA:AD:1B:90:96:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oV4_l0tfl0ZWzPTUVZbKrRuQltQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/d6a422-3612-45af-83ab-d24b68966e0e/1/yFzuc1zz0kuBWi3lad37_T3Atfg.roa
Signing time: Mon 01 Jan 2024 02:29:30 +0000
ROA not before: Mon 01 Jan 2024 02:29:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205376
IP address blocks: 185.220.151.0/24 maxlen: 24
185.220.150.0/24 maxlen: 24
185.220.149.0/24 maxlen: 24
185.220.148.0/24 maxlen: 24
185.220.148.0/22 maxlen: 24
2a0b:f840::/32 maxlen: 32
2a0b:f841::/32 maxlen: 32
2a0b:f840::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/d6a422-3612-45af-83ab-d24b68966e0e/1/oV4_l0tfl0ZWzPTUVZbKrRuQltQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/d6a422-3612-45af-83ab-d24b68966e0e/1/oV4_l0tfl0ZWzPTUVZbKrRuQltQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/oV4_l0tfl0ZWzPTUVZbKrRuQltQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 19 Jun 2024 04:03:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:d4:70:43:db:c0:a0:b1:44:3c:11:ed:9e:f0:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a15e3f974b5f974656ccf4d45596caad1b9096d4
Validity
Not Before: Jan 1 02:29:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c85cee735cf3d24b815a2de569ddfbfd3dc0b5f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:2b:4c:d4:58:66:73:e6:a7:d3:73:50:a4:05:
d9:eb:af:44:41:3d:48:57:d3:7b:d0:be:0c:a3:dc:
2a:46:25:0f:ce:03:3d:28:70:9e:0e:2e:26:e8:e0:
64:c0:97:26:2a:4b:3c:a6:98:8f:dc:86:e3:f6:fb:
21:b3:ba:61:62:4a:92:e0:3e:fe:f6:a1:2c:28:f7:
f4:0b:2f:1e:48:ef:a8:a2:5d:63:00:e0:b3:b1:7a:
6d:5f:12:fb:c4:bb:9c:fd:9b:89:80:a6:b5:ec:42:
be:0f:c1:39:41:ee:2f:54:1c:4c:31:97:a4:c1:6a:
38:8c:b4:34:12:53:ff:67:34:69:d1:72:31:dd:14:
88:81:06:93:ca:bc:27:4c:09:51:f4:30:4b:a2:4b:
02:92:f6:e1:77:84:70:ae:ec:e4:3b:10:bc:4b:ea:
c2:06:89:53:97:a2:59:8a:77:b7:b0:e4:47:86:ce:
9f:a8:84:c5:82:8c:af:75:c5:ce:36:db:69:6e:46:
6f:7d:bd:ec:6b:52:21:bb:e8:9f:70:00:2c:36:00:
24:f5:81:07:50:a7:b7:95:ca:61:dd:3e:51:23:db:
f1:37:5b:4e:10:53:de:55:18:a4:a0:22:fc:cc:f8:
6d:81:ff:81:c5:29:6b:59:77:06:2d:ea:f9:27:7e:
74:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:5C:EE:73:5C:F3:D2:4B:81:5A:2D:E5:69:DD:FB:FD:3D:C0:B5:F8
X509v3 Authority Key Identifier:
keyid:A1:5E:3F:97:4B:5F:97:46:56:CC:F4:D4:55:96:CA:AD:1B:90:96:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oV4_l0tfl0ZWzPTUVZbKrRuQltQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d6a422-3612-45af-83ab-d24b68966e0e/1/yFzuc1zz0kuBWi3lad37_T3Atfg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d6a422-3612-45af-83ab-d24b68966e0e/1/oV4_l0tfl0ZWzPTUVZbKrRuQltQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.220.148.0/22
IPv6:
2a0b:f840::/29
Signature Algorithm: sha256WithRSAEncryption
67:38:f7:ba:8a:1c:aa:1a:84:e1:22:ed:68:4d:ae:b2:10:37:
45:f4:9b:75:1f:d2:f7:57:95:98:7a:20:d9:dd:29:ff:4a:b6:
cd:90:c8:c3:d0:e6:72:fb:42:b9:4a:1a:e7:d0:d9:28:3a:92:
48:63:de:90:75:9d:0b:ed:36:f4:da:59:56:c6:76:dd:2c:41:
2d:dc:51:96:c1:80:3a:be:8b:c4:d4:9a:6b:d5:e6:05:2a:90:
3d:39:be:11:d9:71:e6:97:92:25:bc:ac:e0:0a:a3:da:66:14:
a1:aa:99:12:50:ad:2b:4d:99:7c:e6:7c:14:d1:de:81:4f:9e:
4d:6c:40:ea:09:de:b4:3c:3c:a9:49:26:f1:4b:88:9e:e0:bf:
35:c9:c1:c7:82:41:1e:ac:1c:c7:a6:84:d7:0c:dc:6d:73:26:
42:1c:e0:38:23:86:e2:5a:19:33:ee:dd:8f:64:57:f2:26:f1:
4f:e9:fc:1e:68:f7:eb:1e:aa:5b:3a:68:76:5d:ba:0f:f8:97:
6f:47:41:30:dd:46:00:e7:8e:3d:dc:a2:bd:74:d2:86:af:b2:
a4:cf:87:19:68:47:e3:54:79:8e:f3:a5:ae:e7:c9:d9:c7:00:
a5:81:7d:ae:74:12:03:23:6f:2a:ac:50:4b:4d:9d:b7:8d:71:
76:f0:db:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 18 09:42:08 2024 by rpki-client on console-fra.rpki-client.org