Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/586f77-6f32-4b96-9838-a5894693af10/1/J3mTqg-OBTm3T2_XyYRwt0LCK6g.roa
File: J3mTqg-OBTm3T2_XyYRwt0LCK6g.roa (raw, json)
Hash identifier: u8j0ZAIaF33GPHg0OtmyJnKmN3dhDl3iRnbW41DR4Ic=
Subject key identifier: 27:79:93:AA:0F:8E:05:39:B7:4F:6F:D7:C9:84:70:B7:42:C2:2B:A8
Certificate issuer: /CN=8ac14985cb544c6d23d19bb43ac93711afe91f18
Certificate serial: 0192C2E4082882FBEB361151915F67052DC2
Authority key identifier: 8A:C1:49:85:CB:54:4C:6D:23:D1:9B:B4:3A:C9:37:11:AF:E9:1F:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/isFJhctUTG0j0Zu0Osk3Ea_pHxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/586f77-6f32-4b96-9838-a5894693af10/1/J3mTqg-OBTm3T2_XyYRwt0LCK6g.roa
Signing time: Fri 25 Oct 2024 08:56:16 +0000
ROA not before: Fri 25 Oct 2024 08:56:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51621
IP address blocks: 185.216.49.0/24 maxlen: 24
185.217.130.0/24 maxlen: 24
2a10:a900::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/586f77-6f32-4b96-9838-a5894693af10/1/isFJhctUTG0j0Zu0Osk3Ea_pHxg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/586f77-6f32-4b96-9838-a5894693af10/1/isFJhctUTG0j0Zu0Osk3Ea_pHxg.mft
rsync://rpki.ripe.net/repository/DEFAULT/isFJhctUTG0j0Zu0Osk3Ea_pHxg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 17:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:c2:e4:08:28:82:fb:eb:36:11:51:91:5f:67:05:2d:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ac14985cb544c6d23d19bb43ac93711afe91f18
Validity
Not Before: Oct 25 08:56:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=277993aa0f8e0539b74f6fd7c98470b742c22ba8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:df:31:2b:4d:d3:91:35:01:2d:03:1b:81:60:
d7:e2:6a:ad:51:3d:e2:66:ea:99:c2:9c:79:65:e5:
74:bc:e9:c7:52:1a:df:12:ed:5d:25:d9:c3:2e:da:
e9:2d:76:e3:c0:3b:4d:c2:11:d3:ff:9c:c7:69:a0:
6b:b4:6e:75:15:f8:4c:c1:11:28:62:20:b2:cc:16:
88:e1:0b:10:bf:89:fa:16:b9:9c:9c:0e:27:47:41:
cf:df:42:2b:1c:bd:80:c0:b9:c9:3a:8a:2c:0c:b1:
81:67:3f:e0:eb:02:ae:fc:98:96:81:ec:7b:f0:cc:
9a:63:59:13:bf:6a:a7:6c:bf:94:e9:80:5c:d9:47:
48:0b:8e:a0:a4:77:9e:71:2c:79:e5:60:b0:0b:59:
29:b0:cf:b4:6a:df:6e:19:d2:df:cc:f1:f3:c0:3a:
19:7b:d9:d7:c3:09:13:9c:30:89:1a:05:79:76:70:
fe:87:80:cd:34:e5:da:4e:fa:b5:02:e0:e9:f9:ae:
21:ef:14:fd:11:69:d3:d4:39:1a:f7:b0:de:45:b7:
df:e5:b5:7c:90:d0:d6:0f:ea:02:52:3a:1d:e3:0b:
df:89:d3:a1:68:c8:26:9c:70:8b:b4:2e:e3:73:72:
00:c9:31:b4:79:31:f0:75:58:89:62:06:1b:ae:aa:
62:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:79:93:AA:0F:8E:05:39:B7:4F:6F:D7:C9:84:70:B7:42:C2:2B:A8
X509v3 Authority Key Identifier:
keyid:8A:C1:49:85:CB:54:4C:6D:23:D1:9B:B4:3A:C9:37:11:AF:E9:1F:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/isFJhctUTG0j0Zu0Osk3Ea_pHxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/586f77-6f32-4b96-9838-a5894693af10/1/J3mTqg-OBTm3T2_XyYRwt0LCK6g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/586f77-6f32-4b96-9838-a5894693af10/1/isFJhctUTG0j0Zu0Osk3Ea_pHxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.216.49.0/24
185.217.130.0/24
IPv6:
2a10:a900::/29
Signature Algorithm: sha256WithRSAEncryption
38:f8:77:43:52:df:ac:0a:0f:89:a3:50:7d:b9:74:dd:cd:20:
db:07:dc:80:22:66:01:bb:b8:da:ef:90:52:06:e1:4d:ae:93:
13:c5:62:1d:69:f4:0c:f4:7a:57:6a:6f:f9:aa:c3:d9:ba:44:
95:c5:d0:77:b9:30:7f:0b:c7:53:2c:7f:8b:a3:2e:36:57:2b:
86:89:73:1b:d0:95:9a:b0:5e:7f:41:33:e1:6c:a5:c9:8c:a9:
79:f9:63:6b:2b:90:05:87:33:c7:43:f0:aa:14:eb:60:da:ba:
a9:a5:32:44:c6:77:41:3b:fb:87:2f:61:59:9d:3a:63:8d:32:
e8:69:ec:76:d8:3a:7f:fb:d3:41:cb:d5:fa:be:46:db:9c:fa:
a5:18:19:34:f6:9f:46:a3:ae:34:ad:a6:ef:76:8e:76:a0:9f:
0f:eb:88:0a:02:cf:4e:a2:ec:e3:4d:97:4c:f0:a1:73:60:73:
16:2a:06:bf:b8:b5:16:99:e7:6d:66:1e:68:72:50:ed:a9:c8:
8e:50:a7:5e:b4:1b:e0:90:67:f2:6b:a7:51:35:2e:df:37:05:
c4:ff:74:ed:36:4b:b4:34:ec:46:c6:9d:bf:e0:1a:51:84:af:
75:bc:33:a0:fb:14:20:9d:b6:6f:a3:fe:3f:b7:6e:c9:10:e7:
6e:4b:70:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:30:52 2024 by rpki-client on console-ams.rpki-client.org