Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/8wtXj6f5qBp0uAZpxTYBOHrvQJk.roa
File: 8wtXj6f5qBp0uAZpxTYBOHrvQJk.roa (raw, json)
Hash identifier: UXYtW3d3czaSDn5V7vj5GOsxwszbIv0BxdBtlFZErL4=
Subject key identifier: F3:0B:57:8F:A7:F9:A8:1A:74:B8:06:69:C5:36:01:38:7A:EF:40:99
Certificate issuer: /CN=ab6f6a36ec2960d4d05f3d9dcb187b9b904ea59b
Certificate serial: 018CCA73D6CDFD240655599E308C240928BB
Authority key identifier: AB:6F:6A:36:EC:29:60:D4:D0:5F:3D:9D:CB:18:7B:9B:90:4E:A5:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q29qNuwpYNTQXz2dyxh7m5BOpZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/8wtXj6f5qBp0uAZpxTYBOHrvQJk.roa
Signing time: Tue 02 Jan 2024 13:53:58 +0000
ROA not before: Tue 02 Jan 2024 13:53:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212376
IP address blocks: 185.184.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/q29qNuwpYNTQXz2dyxh7m5BOpZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/q29qNuwpYNTQXz2dyxh7m5BOpZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/q29qNuwpYNTQXz2dyxh7m5BOpZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:73:d6:cd:fd:24:06:55:59:9e:30:8c:24:09:28:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab6f6a36ec2960d4d05f3d9dcb187b9b904ea59b
Validity
Not Before: Jan 2 13:53:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f30b578fa7f9a81a74b80669c53601387aef4099
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:0b:fd:a1:bc:71:4c:04:8a:78:1b:8a:ea:c9:
0e:64:56:27:1b:75:1a:d4:a7:50:04:40:ab:6b:c1:
0a:74:89:9a:32:12:62:4a:fe:93:6a:1a:b4:c7:f1:
eb:fc:a4:55:41:71:cb:c6:92:c3:84:f5:f8:98:36:
ea:42:e6:61:87:d1:03:d7:67:69:f1:4b:3b:8e:ac:
bc:74:da:e5:f9:67:2e:38:ad:60:58:2f:c0:c3:c1:
d1:9e:9d:b1:63:e3:8a:05:a0:0e:aa:b0:03:dd:23:
a6:6f:6b:4b:38:48:35:f8:d1:8b:ef:ff:08:19:14:
3e:6b:73:1f:a9:9e:1a:70:aa:3f:6e:a2:b2:f4:c3:
f1:fb:04:2b:45:6d:d4:76:88:ff:eb:63:1c:82:52:
86:dd:30:ae:6d:37:26:d8:87:8f:ce:aa:3c:31:a1:
ff:1b:53:e0:4e:34:e9:a2:66:2a:86:25:69:af:85:
a5:c8:53:68:fe:96:1e:04:9d:bd:12:1c:7b:7f:55:
7a:2a:9c:ff:74:f8:39:3f:af:d8:3a:ca:3c:b2:85:
df:90:71:dd:aa:32:8a:aa:aa:b6:c0:3d:75:55:53:
f3:2d:4b:96:a4:90:57:bd:4a:93:71:d6:51:98:d9:
4d:47:d3:f1:ba:da:d5:b3:e0:fc:94:6b:af:d9:0c:
5c:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:0B:57:8F:A7:F9:A8:1A:74:B8:06:69:C5:36:01:38:7A:EF:40:99
X509v3 Authority Key Identifier:
keyid:AB:6F:6A:36:EC:29:60:D4:D0:5F:3D:9D:CB:18:7B:9B:90:4E:A5:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q29qNuwpYNTQXz2dyxh7m5BOpZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/8wtXj6f5qBp0uAZpxTYBOHrvQJk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/q29qNuwpYNTQXz2dyxh7m5BOpZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.184.196.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:4e:f2:f6:d4:82:29:38:96:28:d1:7d:2b:ee:6e:64:f2:79:
b4:86:b2:39:50:0d:5b:53:91:55:99:7d:c8:6f:74:4d:72:7e:
a5:03:fd:e9:6d:e3:3c:2e:64:f0:53:fe:b6:07:36:58:47:b5:
40:52:80:a5:1e:5e:84:e7:61:5c:a7:f4:95:d7:d3:83:01:e1:
36:4d:a5:b2:47:93:f3:a1:14:c5:8b:83:77:e6:aa:25:5e:64:
a3:ea:d0:6c:9c:6e:1e:14:f8:21:73:4a:a3:02:5c:31:b4:bf:
4d:88:ed:cd:84:1d:c5:1c:bf:0a:69:83:78:eb:52:79:32:90:
67:ef:20:50:7d:43:06:8b:6a:6f:89:57:50:71:1c:40:27:6e:
80:96:a6:50:19:65:ec:47:c2:b1:c2:99:03:18:66:7c:72:f1:
5a:01:25:8d:ed:e2:53:c1:a3:c7:9f:78:88:c7:24:7b:4c:e2:
cf:f7:05:46:59:30:ac:fb:1d:c5:32:1f:af:ce:4a:d6:48:4c:
9a:9b:b1:96:69:a9:35:ef:bb:1a:f3:40:af:14:d8:71:20:fc:
ed:46:76:63:6a:69:92:3d:eb:6f:20:08:bd:58:4a:14:64:65:
a7:5c:7b:c2:d6:d9:58:bd:f3:8d:15:82:ab:1c:8d:d1:0d:63:
fc:fa:43:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 06:14:59 2024 by rpki-client on console-ams.rpki-client.org