Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/8d9ac1-d35d-4e32-b83f-c10cc953bd1b/1/NY2ZVGO8AltbDe6pGG4pCe87TLw.roa
File: NY2ZVGO8AltbDe6pGG4pCe87TLw.roa (raw, json)
Hash identifier: ucIlCmd3QuMG2CbI3or4Lv3ZAGZyKBlyUpc431Sk9Bs=
Subject key identifier: 35:8D:99:54:63:BC:02:5B:5B:0D:EE:A9:18:6E:29:09:EF:3B:4C:BC
Certificate issuer: /CN=916f80c35f202eb02766419bfb7d282125ffe158
Certificate serial: 018CC9BC43AA928FBEC4C7494EBCF34A3C33
Authority key identifier: 91:6F:80:C3:5F:20:2E:B0:27:66:41:9B:FB:7D:28:21:25:FF:E1:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kW-Aw18gLrAnZkGb-30oISX_4Vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/8d9ac1-d35d-4e32-b83f-c10cc953bd1b/1/NY2ZVGO8AltbDe6pGG4pCe87TLw.roa
Signing time: Tue 02 Jan 2024 10:33:27 +0000
ROA not before: Tue 02 Jan 2024 10:33:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58273
IP address blocks: 148.252.16.0/20 maxlen: 24
185.201.32.0/22 maxlen: 24
185.89.32.0/22 maxlen: 24
194.113.44.0/22 maxlen: 24
5.83.8.0/21 maxlen: 24
2a01:6240::/29 maxlen: 48
2a10:cb80::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/8d9ac1-d35d-4e32-b83f-c10cc953bd1b/1/kW-Aw18gLrAnZkGb-30oISX_4Vg.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/8d9ac1-d35d-4e32-b83f-c10cc953bd1b/1/kW-Aw18gLrAnZkGb-30oISX_4Vg.mft
rsync://rpki.ripe.net/repository/DEFAULT/kW-Aw18gLrAnZkGb-30oISX_4Vg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 19:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:43:aa:92:8f:be:c4:c7:49:4e:bc:f3:4a:3c:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=916f80c35f202eb02766419bfb7d282125ffe158
Validity
Not Before: Jan 2 10:33:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=358d995463bc025b5b0deea9186e2909ef3b4cbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:18:fd:f3:75:c7:cf:4d:ca:a5:11:28:31:55:
9f:36:4a:11:4c:3d:e6:37:92:04:b3:bb:0f:96:be:
34:b3:df:dc:76:a2:58:13:69:83:3a:73:1c:ac:37:
25:47:b8:1e:99:59:d2:cd:b2:b7:9c:7b:e2:17:5e:
9d:c6:de:d2:4b:60:89:f7:85:5d:64:58:d1:9d:00:
05:fa:b2:62:60:cc:00:74:89:9b:fa:1e:24:f6:e0:
f1:22:c0:bc:93:45:ea:b1:85:3e:e6:d0:56:6d:52:
6c:f8:7d:e4:f0:29:79:07:b3:50:9e:27:14:b0:a9:
d4:1c:e1:cd:5f:de:52:ed:3a:6b:fd:49:74:6b:37:
40:5a:22:e2:ac:0d:24:23:af:d6:2a:e7:71:7d:d8:
0f:58:da:3c:c7:d0:6c:28:a6:68:36:7e:fa:b9:1e:
95:1e:f7:41:b8:74:df:41:88:37:69:29:e3:e5:2f:
9c:63:9b:ec:2d:f8:28:cb:0c:7c:3d:a5:5e:1a:f0:
11:81:09:e5:5a:1f:34:c2:21:73:d6:fa:a8:33:46:
63:bc:d2:0b:90:f7:5a:39:9f:2f:3b:c8:39:5a:e8:
e2:77:e0:8c:1c:e8:de:b4:38:83:e5:05:d4:31:88:
df:c1:59:c2:f2:e9:32:06:49:13:c1:0f:5f:ab:00:
d2:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:8D:99:54:63:BC:02:5B:5B:0D:EE:A9:18:6E:29:09:EF:3B:4C:BC
X509v3 Authority Key Identifier:
keyid:91:6F:80:C3:5F:20:2E:B0:27:66:41:9B:FB:7D:28:21:25:FF:E1:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kW-Aw18gLrAnZkGb-30oISX_4Vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/8d9ac1-d35d-4e32-b83f-c10cc953bd1b/1/NY2ZVGO8AltbDe6pGG4pCe87TLw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/8d9ac1-d35d-4e32-b83f-c10cc953bd1b/1/kW-Aw18gLrAnZkGb-30oISX_4Vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.8.0/21
148.252.16.0/20
185.89.32.0/22
185.201.32.0/22
194.113.44.0/22
IPv6:
2a01:6240::/29
2a10:cb80::/29
Signature Algorithm: sha256WithRSAEncryption
97:29:4f:a2:4c:2e:e1:f7:53:25:ab:53:f1:d4:b4:a9:2a:8f:
09:55:a9:7f:97:ee:63:55:85:67:1f:2c:c7:dd:01:2f:24:21:
a3:2e:ba:92:2e:d9:e7:86:ec:14:48:a3:72:98:3f:91:ff:05:
21:b2:0d:8f:f6:c8:a4:d3:b7:a9:e9:69:53:3a:c8:1f:55:90:
4e:93:45:36:d1:a6:c1:67:d7:e4:9f:0d:4b:74:bb:aa:b6:71:
0c:d2:69:87:e8:de:7e:37:be:8f:51:12:09:ca:15:18:b9:a9:
06:1a:34:d6:c9:d0:d3:7c:38:21:4d:82:98:a7:f8:bb:39:94:
5f:76:36:e1:a3:fd:e3:a9:96:4d:1f:e2:10:12:72:9e:23:90:
ef:c2:27:d2:8b:32:44:f3:c6:9b:0f:aa:0b:64:ae:1d:ad:46:
2d:a9:3b:ec:d1:c6:27:ef:10:b1:b1:91:60:5e:e3:29:b0:65:
dd:84:be:c9:2b:97:b5:2d:c3:0b:f2:42:27:99:2c:40:77:01:
10:50:37:2b:81:bc:cf:f8:8d:98:e4:05:b7:ee:46:78:2e:55:
5b:2c:f8:57:16:73:6e:a9:3e:ac:01:24:ed:90:04:fb:50:3b:
ff:c4:94:aa:50:ee:cf:08:04:f2:e5:cb:08:f5:60:3d:9f:83:
da:50:a2:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 23:09:24 2024 by rpki-client on console-ams.rpki-client.org