Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/8903ca-fb67-4ee7-a23a-db7690e45765/1/ximLvrg_8d8poJmzXLotk0uyg64.roa
File: ximLvrg_8d8poJmzXLotk0uyg64.roa (raw, json)
Hash identifier: w92beLt4D28zyziXWw4Avo0ctQsdrVqlg3zVabuArW8=
Subject key identifier: C6:29:8B:BE:B8:3F:F1:DF:29:A0:99:B3:5C:BA:2D:93:4B:B2:83:AE
Certificate issuer: /CN=fd4d1cbaa900c9dabd2a1f768198a1e55bcfb50f
Certificate serial: 01926698958BB8753B6F622304B8B0B848F8
Authority key identifier: FD:4D:1C:BA:A9:00:C9:DA:BD:2A:1F:76:81:98:A1:E5:5B:CF:B5:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_U0cuqkAydq9Kh92gZih5VvPtQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/8903ca-fb67-4ee7-a23a-db7690e45765/1/ximLvrg_8d8poJmzXLotk0uyg64.roa
Signing time: Mon 07 Oct 2024 10:48:48 +0000
ROA not before: Mon 07 Oct 2024 10:48:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48084
IP address blocks: 185.214.244.0/22 maxlen: 24
185.214.244.0/24 maxlen: 24
185.214.245.0/24 maxlen: 24
185.214.246.0/24 maxlen: 24
185.214.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/8903ca-fb67-4ee7-a23a-db7690e45765/1/_U0cuqkAydq9Kh92gZih5VvPtQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/8903ca-fb67-4ee7-a23a-db7690e45765/1/_U0cuqkAydq9Kh92gZih5VvPtQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/_U0cuqkAydq9Kh92gZih5VvPtQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:66:98:95:8b:b8:75:3b:6f:62:23:04:b8:b0:b8:48:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd4d1cbaa900c9dabd2a1f768198a1e55bcfb50f
Validity
Not Before: Oct 7 10:48:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c6298bbeb83ff1df29a099b35cba2d934bb283ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:33:82:20:d8:d5:3c:9e:a5:90:ff:be:bd:88:
24:a7:07:76:71:99:ee:e4:a0:30:75:53:b2:f2:37:
33:ae:92:72:21:b3:83:7a:70:ef:32:23:bf:df:b7:
b5:81:66:bc:a1:f7:13:77:33:28:2e:4c:99:26:58:
6b:a8:8e:a5:8e:21:ec:20:d7:cd:0c:40:4a:a0:6a:
0d:fb:a7:5c:29:ee:86:c0:dd:d1:77:9c:26:92:fb:
83:12:41:a6:bd:a7:3f:9a:a7:78:5d:28:06:aa:cc:
85:49:28:1e:74:63:09:5d:f1:bb:7f:1e:a8:2e:b7:
00:71:cf:1a:cc:14:b4:40:e0:30:ea:ae:f5:d2:39:
d2:9c:e5:fe:76:d7:53:64:b7:d9:a9:44:7c:8b:87:
b7:97:7c:df:3d:28:70:17:56:c8:b2:ef:b1:35:0c:
e0:d7:1b:c6:c8:3f:dd:94:c7:1e:5d:3b:92:31:0f:
17:ad:58:5e:bf:f2:12:e4:01:c8:37:8c:d4:ec:6d:
d6:d3:c6:86:9e:f3:a3:d9:af:9a:11:68:11:b3:0e:
88:8d:53:2d:0e:39:e2:65:8e:fa:b9:ce:e0:98:29:
e5:27:df:49:12:1c:c4:b3:37:4c:67:8f:2d:1c:80:
bd:fa:bf:97:38:37:d3:d8:22:1b:64:4b:a8:31:e7:
5d:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:29:8B:BE:B8:3F:F1:DF:29:A0:99:B3:5C:BA:2D:93:4B:B2:83:AE
X509v3 Authority Key Identifier:
keyid:FD:4D:1C:BA:A9:00:C9:DA:BD:2A:1F:76:81:98:A1:E5:5B:CF:B5:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_U0cuqkAydq9Kh92gZih5VvPtQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/8903ca-fb67-4ee7-a23a-db7690e45765/1/ximLvrg_8d8poJmzXLotk0uyg64.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/8903ca-fb67-4ee7-a23a-db7690e45765/1/_U0cuqkAydq9Kh92gZih5VvPtQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.214.244.0/22
Signature Algorithm: sha256WithRSAEncryption
77:6a:37:0a:07:6b:f8:da:7c:a2:98:0e:df:b4:57:41:23:fb:
ab:0f:73:da:2c:a9:77:34:73:79:69:33:ff:28:ac:9f:60:8b:
be:4e:d5:3d:df:14:1e:c0:1f:43:45:a9:ed:52:71:86:d0:c6:
e2:86:24:60:02:7a:69:1f:81:5d:a7:da:39:5e:39:b6:45:61:
33:f1:49:0b:35:e6:6f:6f:b3:89:82:5b:48:c5:37:4d:96:eb:
29:33:d2:b9:43:a7:91:95:e5:42:3e:df:f2:66:1f:b2:1d:a5:
18:c5:f1:41:f2:ab:34:12:1b:f6:f0:26:4a:11:6c:ef:46:da:
73:7b:bc:3e:7b:90:15:0a:2b:2e:46:9d:78:02:a0:c1:9d:d7:
fd:8c:f0:a6:f4:33:b7:88:44:24:dc:bf:33:4b:3a:fe:73:b1:
8d:8b:57:4c:db:9f:62:7a:02:05:a3:b9:d4:b3:2e:2a:9e:63:
65:06:08:e8:ca:7b:9b:94:2a:87:78:1e:6d:f9:b5:13:29:b6:
4c:dc:22:c7:9f:d6:18:b4:b1:9e:9d:b0:0e:5e:79:4d:33:92:
4a:db:e2:31:d6:e4:b1:98:2e:9c:1f:ab:83:74:0e:04:53:9c:
6b:2d:83:3d:3e:42:95:b6:40:02:ad:47:00:56:33:34:0e:68:
04:05:5e:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:36:05 2024 by rpki-client on console-ams.rpki-client.org