Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/abc103-ce66-4fcc-8fe1-3c91ad4b3e08/1/0qAVz8pVB_-tgXyUWz5yWirLYCA.roa
File: 0qAVz8pVB_-tgXyUWz5yWirLYCA.roa (raw, json)
Hash identifier: b435aSKC7aysMiXQTzSsERp83zL0CxC2Aw4B11U8W/E=
Subject key identifier: D2:A0:15:CF:CA:55:07:FF:AD:81:7C:94:5B:3E:72:5A:2A:CB:60:20
Certificate issuer: /CN=05881f357ea6680dde52a2a9bfbbb6ed4385d8d9
Certificate serial: 018CC26CFCC7B7F67BECE017E36227CEF8F4
Authority key identifier: 05:88:1F:35:7E:A6:68:0D:DE:52:A2:A9:BF:BB:B6:ED:43:85:D8:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BYgfNX6maA3eUqKpv7u27UOF2Nk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/abc103-ce66-4fcc-8fe1-3c91ad4b3e08/1/0qAVz8pVB_-tgXyUWz5yWirLYCA.roa
Signing time: Mon 01 Jan 2024 00:29:31 +0000
ROA not before: Mon 01 Jan 2024 00:29:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8240
IP address blocks: 185.172.24.0/22 maxlen: 22
195.80.96.0/19 maxlen: 19
185.161.84.0/22 maxlen: 22
213.184.32.0/19 maxlen: 19
2a0b:6c00::/29 maxlen: 29
2a02:88::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/abc103-ce66-4fcc-8fe1-3c91ad4b3e08/1/BYgfNX6maA3eUqKpv7u27UOF2Nk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/abc103-ce66-4fcc-8fe1-3c91ad4b3e08/1/BYgfNX6maA3eUqKpv7u27UOF2Nk.mft
rsync://rpki.ripe.net/repository/DEFAULT/BYgfNX6maA3eUqKpv7u27UOF2Nk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6c:fc:c7:b7:f6:7b:ec:e0:17:e3:62:27:ce:f8:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05881f357ea6680dde52a2a9bfbbb6ed4385d8d9
Validity
Not Before: Jan 1 00:29:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d2a015cfca5507ffad817c945b3e725a2acb6020
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:91:4b:98:e2:5d:34:24:c7:87:8e:0c:12:8a:
53:11:2c:f7:6d:fa:c8:68:8c:04:d5:54:78:c1:2f:
7e:40:58:42:93:7c:b6:18:66:d0:ae:7a:78:ed:83:
f7:ef:92:3b:6f:c0:12:e3:b3:38:ad:f5:ae:9d:53:
b8:d0:e7:c2:4f:b8:62:9b:f0:30:b7:f3:86:11:86:
69:dd:11:bc:0c:50:89:05:e6:88:fa:de:22:3e:4b:
c6:fe:f7:07:d8:87:cf:42:5e:b8:d8:e2:5b:da:70:
1c:88:5c:bc:40:c8:65:fc:7d:8f:e2:3a:c9:af:fb:
91:ed:cb:c6:6a:13:73:21:77:ed:2d:53:a4:ea:c6:
c4:f5:c1:1c:69:16:2b:37:91:04:74:60:58:43:39:
b1:a8:97:7b:94:4b:b3:0e:0e:f4:cf:c8:f4:cb:ab:
22:21:4d:e9:e2:8b:f5:59:6c:08:c3:2c:8b:48:b0:
f8:87:d7:7e:55:01:b5:39:9e:49:da:e3:1a:34:09:
56:55:4e:ea:cd:94:3b:1d:b5:e5:e3:c4:ea:f7:66:
5f:8c:af:a7:1f:f5:24:b8:25:7f:69:07:84:05:58:
a9:89:02:b9:81:99:90:e3:17:5d:84:e0:7e:4e:54:
29:a1:83:9f:c8:78:fb:08:4e:fa:55:88:07:22:5f:
8b:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:A0:15:CF:CA:55:07:FF:AD:81:7C:94:5B:3E:72:5A:2A:CB:60:20
X509v3 Authority Key Identifier:
keyid:05:88:1F:35:7E:A6:68:0D:DE:52:A2:A9:BF:BB:B6:ED:43:85:D8:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BYgfNX6maA3eUqKpv7u27UOF2Nk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/abc103-ce66-4fcc-8fe1-3c91ad4b3e08/1/0qAVz8pVB_-tgXyUWz5yWirLYCA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/abc103-ce66-4fcc-8fe1-3c91ad4b3e08/1/BYgfNX6maA3eUqKpv7u27UOF2Nk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.161.84.0/22
185.172.24.0/22
195.80.96.0/19
213.184.32.0/19
IPv6:
2a02:88::/32
2a0b:6c00::/29
Signature Algorithm: sha256WithRSAEncryption
ca:65:65:fd:f5:22:f8:e0:26:dc:f0:2c:b9:42:7c:bc:eb:55:
8d:ad:4e:b6:2f:be:41:56:98:da:c8:38:dc:11:3e:71:7c:cc:
6b:74:45:5b:06:c8:d7:b1:33:b4:8b:11:d8:38:6b:1f:3c:18:
7f:12:61:48:c9:18:71:b8:e7:f2:49:73:39:9a:7b:78:ef:d5:
9d:3e:99:86:a8:ea:a5:1a:d5:fa:ef:97:37:d2:4e:64:1f:69:
73:69:19:fb:59:32:ca:ce:02:b7:4b:37:df:51:d6:02:4c:1e:
55:d5:ab:57:c4:2c:a7:b3:fa:3c:14:31:03:2b:cc:5b:79:6f:
0d:61:4d:74:08:f4:c3:7d:24:42:00:b8:d7:1a:32:2e:4a:99:
5e:91:5e:65:42:8c:f7:ef:d9:76:cc:71:9a:39:50:ee:49:a5:
0e:93:a4:b7:9c:80:8a:3e:a4:0b:02:03:75:5d:6e:a8:81:17:
c1:b5:7f:eb:eb:3f:6a:3a:69:af:9f:ac:57:71:2a:09:ae:44:
e8:cc:2b:87:88:e1:ff:fa:24:b1:26:b6:77:e1:bc:d6:ec:81:
fa:98:ca:d3:68:ee:3c:63:09:af:9f:88:e9:c6:16:d7:d7:66:
6f:98:e3:69:a5:44:35:c0:17:e5:f5:ce:fa:b1:89:e9:d2:af:
c7:4f:eb:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 14:53:29 2024 by rpki-client on console-ams.rpki-client.org