Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/c9ccc9-c405-428f-b773-dd23dc4241fa/1/v6tdzFvSWVtJmlKd0tv2t5JiWmQ.roa
File: v6tdzFvSWVtJmlKd0tv2t5JiWmQ.roa (raw, json)
Hash identifier: 5fG7oFBORGYnKo2ptfKGI5mmJEqeew/oDUvoi5uaTaE=
Subject key identifier: BF:AB:5D:CC:5B:D2:59:5B:49:9A:52:9D:D2:DB:F6:B7:92:62:5A:64
Certificate issuer: /CN=0cd49ca1901df020930ce971f65cc180a3fcbe81
Certificate serial: 018CC86F2F96AFB5BBA185A3DCA2493B66F4
Authority key identifier: 0C:D4:9C:A1:90:1D:F0:20:93:0C:E9:71:F6:5C:C1:80:A3:FC:BE:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DNScoZAd8CCTDOlx9lzBgKP8voE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/c9ccc9-c405-428f-b773-dd23dc4241fa/1/v6tdzFvSWVtJmlKd0tv2t5JiWmQ.roa
Signing time: Tue 02 Jan 2024 04:29:39 +0000
ROA not before: Tue 02 Jan 2024 04:29:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15405
IP address blocks: 91.198.244.0/24 maxlen: 24
195.162.84.0/22 maxlen: 22
185.22.156.0/22 maxlen: 22
185.159.36.0/22 maxlen: 22
185.202.68.0/22 maxlen: 22
2a03:4c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/c9ccc9-c405-428f-b773-dd23dc4241fa/1/DNScoZAd8CCTDOlx9lzBgKP8voE.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/c9ccc9-c405-428f-b773-dd23dc4241fa/1/DNScoZAd8CCTDOlx9lzBgKP8voE.mft
rsync://rpki.ripe.net/repository/DEFAULT/DNScoZAd8CCTDOlx9lzBgKP8voE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 05:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:2f:96:af:b5:bb:a1:85:a3:dc:a2:49:3b:66:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cd49ca1901df020930ce971f65cc180a3fcbe81
Validity
Not Before: Jan 2 04:29:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bfab5dcc5bd2595b499a529dd2dbf6b792625a64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:2f:38:93:5a:d6:72:7a:e5:71:31:e5:32:0e:
40:59:a6:bf:f8:af:8d:29:be:0d:96:da:d7:42:57:
a0:b2:aa:33:d9:4d:d4:97:0d:d8:00:4c:5c:ef:26:
15:72:0e:31:d9:f7:d7:fd:da:a6:8b:e8:08:b4:3a:
bf:fb:3c:6e:3e:b5:ee:ec:81:16:25:26:23:cb:a3:
93:38:20:da:23:e5:65:42:4e:7a:de:44:ef:66:96:
22:ec:12:ba:30:11:be:4b:df:5e:b3:ad:21:eb:44:
f2:90:eb:4a:76:52:b9:d6:00:7e:3b:37:86:80:3d:
61:16:f2:94:f3:a8:5f:fd:bd:00:9f:c7:f3:96:b6:
9f:8c:2f:8a:e5:a4:4c:ec:f1:81:a2:bd:90:c7:6b:
19:6f:86:b5:a3:4c:18:85:89:d3:82:55:89:53:cd:
da:b8:7b:8a:35:00:13:11:af:65:ce:3c:5e:07:6d:
19:cd:bf:df:ce:6b:9c:37:63:24:c6:01:1a:b8:86:
35:63:98:34:0a:9e:ec:cd:a9:82:66:36:bf:dd:08:
e7:5c:bc:3d:ab:ed:0d:1d:ab:ea:22:3c:02:65:72:
51:94:92:32:0b:fd:6f:4a:c5:6a:17:9d:ca:7e:33:
2c:94:d1:40:97:39:e8:ad:5d:1f:3d:38:59:76:f4:
d1:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:AB:5D:CC:5B:D2:59:5B:49:9A:52:9D:D2:DB:F6:B7:92:62:5A:64
X509v3 Authority Key Identifier:
keyid:0C:D4:9C:A1:90:1D:F0:20:93:0C:E9:71:F6:5C:C1:80:A3:FC:BE:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DNScoZAd8CCTDOlx9lzBgKP8voE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/c9ccc9-c405-428f-b773-dd23dc4241fa/1/v6tdzFvSWVtJmlKd0tv2t5JiWmQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/c9ccc9-c405-428f-b773-dd23dc4241fa/1/DNScoZAd8CCTDOlx9lzBgKP8voE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.244.0/24
185.22.156.0/22
185.159.36.0/22
185.202.68.0/22
195.162.84.0/22
IPv6:
2a03:4c0::/32
Signature Algorithm: sha256WithRSAEncryption
2b:64:4b:cc:c5:d5:ee:1b:80:e6:ed:e5:03:7a:40:61:7e:c1:
cd:59:ec:72:d5:9d:58:7f:83:1a:73:51:5c:66:06:2e:1a:93:
31:39:ea:7c:45:a9:4c:75:33:ce:c9:b0:ef:e9:13:24:85:c5:
33:c7:09:b3:d6:8d:15:40:29:a1:4d:6a:04:a4:27:c2:a3:45:
26:b1:1d:a9:42:1c:6f:d5:f7:f7:de:5e:7e:f6:cf:f7:06:ca:
52:68:23:ab:b3:62:de:88:d2:52:55:62:0f:bb:57:38:b2:76:
ff:1d:98:2c:3b:cf:b2:09:6c:05:9f:58:a9:d6:bb:8f:b2:8a:
19:c2:0e:e7:9b:1d:34:6f:24:f5:e9:7a:ff:46:7c:19:be:f1:
95:9f:0b:fc:f3:3e:00:4a:bc:58:a5:59:ff:4f:2d:c2:b2:08:
ba:6a:a1:0c:07:e7:74:68:3c:b5:35:04:ec:a7:b3:de:d6:92:
d5:4a:93:94:85:dc:e1:15:6f:d8:03:98:b5:b3:db:9c:ee:b9:
bb:22:7b:92:60:e1:3e:7c:db:f1:ce:40:3f:7f:a8:29:86:15:
cc:cb:11:6a:b6:6c:9f:7b:fc:3e:95:cb:d9:ca:db:00:3c:61:
28:76:1f:a1:72:fd:66:d6:b1:97:57:26:b1:22:26:98:2d:36:
42:1a:84:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 13:06:34 2024 by rpki-client on console-ams.rpki-client.org