Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/3d3c3b-1a95-4b50-8974-c1d0acb7819a/1/0tyMUUgSdfQrxDfvO3c5g-GJbKk.roa
File: 0tyMUUgSdfQrxDfvO3c5g-GJbKk.roa (raw, json)
Hash identifier: x6nfIgxw7Vf0Ecx/EvK4IlleeyetM9tP3W6nWMEo7jA=
Subject key identifier: D2:DC:8C:51:48:12:75:F4:2B:C4:37:EF:3B:77:39:83:E1:89:6C:A9
Certificate issuer: /CN=8f90f6b75e913f2782ed549eb72172c59cc47af1
Certificate serial: 018CC64B46FA8A2F7BA1413B78971DF13EDA
Authority key identifier: 8F:90:F6:B7:5E:91:3F:27:82:ED:54:9E:B7:21:72:C5:9C:C4:7A:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j5D2t16RPyeC7VSetyFyxZzEevE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/3d3c3b-1a95-4b50-8974-c1d0acb7819a/1/0tyMUUgSdfQrxDfvO3c5g-GJbKk.roa
Signing time: Mon 01 Jan 2024 18:31:11 +0000
ROA not before: Mon 01 Jan 2024 18:31:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203924
IP address blocks: 185.216.120.0/24 maxlen: 24
185.216.120.0/22 maxlen: 22
185.216.121.0/24 maxlen: 24
185.216.122.0/23 maxlen: 23
85.117.252.0/23 maxlen: 23
85.117.252.0/22 maxlen: 22
85.117.254.0/23 maxlen: 23
185.113.144.0/24 maxlen: 24
185.113.144.0/22 maxlen: 22
185.113.145.0/24 maxlen: 24
185.113.146.0/24 maxlen: 24
185.113.147.0/24 maxlen: 24
185.146.36.0/24 maxlen: 24
185.146.36.0/22 maxlen: 22
185.146.37.0/24 maxlen: 24
185.146.38.0/23 maxlen: 23
193.105.0.0/24 maxlen: 24
2a0b:b644::/30 maxlen: 30
2a0b:b640::/30 maxlen: 30
2a0b:b640::/29 maxlen: 29
2a07:4d00::/30 maxlen: 30
2a07:4d00::/29 maxlen: 29
2a06:6a40::/29 maxlen: 29
2a07:4d04::/30 maxlen: 30
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/3d3c3b-1a95-4b50-8974-c1d0acb7819a/1/j5D2t16RPyeC7VSetyFyxZzEevE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/3d3c3b-1a95-4b50-8974-c1d0acb7819a/1/j5D2t16RPyeC7VSetyFyxZzEevE.mft
rsync://rpki.ripe.net/repository/DEFAULT/j5D2t16RPyeC7VSetyFyxZzEevE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 07:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:46:fa:8a:2f:7b:a1:41:3b:78:97:1d:f1:3e:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f90f6b75e913f2782ed549eb72172c59cc47af1
Validity
Not Before: Jan 1 18:31:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d2dc8c51481275f42bc437ef3b773983e1896ca9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:4d:52:2c:01:36:63:3a:41:2b:81:c4:d0:de:
4f:aa:c2:9f:5c:14:db:78:e1:21:81:92:fd:cd:ee:
24:1d:fb:82:8f:8c:1c:23:16:83:40:3a:27:3d:00:
53:9f:1b:f5:95:c4:14:6b:af:37:3c:6e:3a:ad:8d:
b4:6f:c3:d7:cf:9e:ff:98:35:19:1b:cb:89:31:d9:
0b:5d:c9:35:35:18:a0:18:b5:28:45:97:69:2e:2a:
5d:79:2a:d7:71:b1:33:ce:0f:eb:02:19:04:95:21:
97:68:27:3a:e9:f7:ee:77:58:11:6c:c2:ed:be:8a:
ca:af:8a:27:32:e4:0d:76:e7:80:74:f1:03:32:fb:
9a:56:b7:7e:df:b2:0c:63:e4:7c:90:01:78:84:10:
5c:a2:56:79:f5:b1:9f:7a:98:d1:ae:c4:62:0e:fd:
cd:16:eb:89:a4:95:0b:62:93:e2:42:e2:71:ae:a4:
6a:c6:6c:a1:18:49:fd:50:ac:64:68:c2:c1:16:93:
99:56:26:3b:41:e4:f1:9d:50:7b:b6:f5:a8:8e:0a:
1e:ee:17:93:07:6f:f1:af:35:d9:fc:e4:63:64:06:
16:47:9e:3c:8b:6c:65:a7:79:63:03:eb:50:39:d5:
76:fc:c1:c9:cf:d3:2a:58:73:cd:fc:02:f4:aa:61:
8b:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:DC:8C:51:48:12:75:F4:2B:C4:37:EF:3B:77:39:83:E1:89:6C:A9
X509v3 Authority Key Identifier:
keyid:8F:90:F6:B7:5E:91:3F:27:82:ED:54:9E:B7:21:72:C5:9C:C4:7A:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j5D2t16RPyeC7VSetyFyxZzEevE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/3d3c3b-1a95-4b50-8974-c1d0acb7819a/1/0tyMUUgSdfQrxDfvO3c5g-GJbKk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/3d3c3b-1a95-4b50-8974-c1d0acb7819a/1/j5D2t16RPyeC7VSetyFyxZzEevE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.117.252.0/22
185.113.144.0/22
185.146.36.0/22
185.216.120.0/22
193.105.0.0/24
IPv6:
2a06:6a40::/29
2a07:4d00::/29
2a0b:b640::/29
Signature Algorithm: sha256WithRSAEncryption
0a:07:20:ff:d0:bf:1d:88:2e:14:c7:af:5d:32:80:c5:5e:b2:
36:d0:20:60:1b:b1:a1:7e:49:64:5d:23:2f:ec:bc:fc:13:ea:
ca:1a:b4:9f:cf:84:79:d3:8a:c3:b8:24:03:93:7a:99:d5:72:
e6:4a:ff:f1:57:41:bc:40:6a:a9:9b:d5:7c:e0:a3:fe:d6:df:
66:f0:40:92:50:ea:0b:cd:36:0d:27:21:6e:54:9f:a6:64:3c:
c5:5c:8a:6f:78:f0:8d:9c:93:a3:2f:49:b3:88:6a:07:d9:e0:
96:d5:c4:20:02:0a:06:01:f1:a3:41:55:94:3b:8c:51:a0:4f:
0a:80:45:fe:d1:db:03:d9:6e:75:88:e7:59:95:00:d0:3f:c5:
8a:20:b1:c3:86:a3:05:8e:53:d8:63:74:2d:25:b9:2e:67:df:
10:f1:ca:53:2a:64:a9:be:e9:fd:1c:03:33:a9:0f:b2:21:7e:
c4:4f:8b:46:fb:63:4a:fc:43:04:9d:36:be:33:2d:61:54:c3:
fe:44:b5:04:13:6a:3c:d7:99:16:b9:ab:ae:16:6b:8d:4f:f1:
af:5d:95:c1:2f:6d:32:f8:67:1d:1a:81:62:c7:e3:69:a5:62:
00:22:ca:03:da:13:af:d9:f6:8e:1e:9d:27:3a:38:dc:bd:1d:
e6:ed:a2:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 16:43:55 2024 by rpki-client on console-ams.rpki-client.org