Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/8d0cae-ec13-45fb-9afc-3d593ebe5220/1/Cowpr5W0rf1V985Ghm32mlVKygI.roa
File: Cowpr5W0rf1V985Ghm32mlVKygI.roa (raw, json)
Hash identifier: jeVIdlmN9JtgM4s5YrwUOeySQ/+2p+UKJrnG4NPg3eU=
Subject key identifier: 0A:8C:29:AF:95:B4:AD:FD:55:F7:CE:46:86:6D:F6:9A:55:4A:CA:02
Certificate issuer: /CN=c6583f58c7110ad4cc609f4ffb7cab2f80c83581
Certificate serial: 018CC2DAD260364308FDEB85D01771AEACBB
Authority key identifier: C6:58:3F:58:C7:11:0A:D4:CC:60:9F:4F:FB:7C:AB:2F:80:C8:35:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xlg_WMcRCtTMYJ9P-3yrL4DINYE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/8d0cae-ec13-45fb-9afc-3d593ebe5220/1/Cowpr5W0rf1V985Ghm32mlVKygI.roa
Signing time: Mon 01 Jan 2024 02:29:29 +0000
ROA not before: Mon 01 Jan 2024 02:29:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15659
IP address blocks: 213.187.160.0/19 maxlen: 19
89.10.0.0/16 maxlen: 16
80.202.0.0/16 maxlen: 16
213.187.190.0/24 maxlen: 24
217.13.0.0/19 maxlen: 19
213.145.160.0/19 maxlen: 19
84.48.0.0/18 maxlen: 18
89.11.0.0/17 maxlen: 17
84.49.101.0/24 maxlen: 24
84.49.0.0/16 maxlen: 16
2a04:980::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/8d0cae-ec13-45fb-9afc-3d593ebe5220/1/xlg_WMcRCtTMYJ9P-3yrL4DINYE.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/8d0cae-ec13-45fb-9afc-3d593ebe5220/1/xlg_WMcRCtTMYJ9P-3yrL4DINYE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xlg_WMcRCtTMYJ9P-3yrL4DINYE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:d2:60:36:43:08:fd:eb:85:d0:17:71:ae:ac:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6583f58c7110ad4cc609f4ffb7cab2f80c83581
Validity
Not Before: Jan 1 02:29:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0a8c29af95b4adfd55f7ce46866df69a554aca02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:61:98:01:25:8c:1d:09:ad:02:48:64:c0:f4:
26:6f:ee:79:bf:d5:b2:1d:aa:14:8d:38:50:f9:58:
63:34:ee:77:bc:94:2a:bc:00:ae:3d:67:40:44:7b:
49:8e:62:44:12:b1:8d:44:a2:26:84:f7:13:fa:e5:
80:da:05:01:98:0e:85:82:0c:ce:93:d4:d1:1e:5c:
f7:ec:29:a1:cc:33:4a:41:c2:2e:0c:98:2e:4c:b9:
93:6e:e8:15:e0:8f:05:9a:e1:a0:44:00:3f:c2:5b:
b3:45:86:e8:b9:6e:8c:8f:46:e5:67:06:67:82:92:
60:29:4f:a1:cf:93:e3:ab:a2:9f:0d:b5:8b:d6:82:
a9:56:71:65:47:c1:09:df:07:40:05:a6:ab:fd:54:
d3:d7:f5:1d:cc:fb:6e:aa:e4:4b:bd:db:f6:94:3d:
62:ec:de:f0:9d:75:87:4c:93:d0:9a:8c:2a:b7:2f:
af:da:d6:ee:a0:6a:0f:09:5b:5e:d8:9b:50:f4:bf:
21:33:da:e0:2e:21:3b:ab:aa:55:aa:35:1f:e2:b6:
4a:68:d2:99:2f:7e:40:4f:78:c8:8a:ec:fb:a3:9d:
4c:fa:8e:c7:01:ce:7e:a5:a3:2d:e5:3d:7b:e4:df:
d4:bf:b4:1d:c8:50:c3:10:70:48:23:15:7f:36:b1:
5e:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:8C:29:AF:95:B4:AD:FD:55:F7:CE:46:86:6D:F6:9A:55:4A:CA:02
X509v3 Authority Key Identifier:
keyid:C6:58:3F:58:C7:11:0A:D4:CC:60:9F:4F:FB:7C:AB:2F:80:C8:35:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xlg_WMcRCtTMYJ9P-3yrL4DINYE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/8d0cae-ec13-45fb-9afc-3d593ebe5220/1/Cowpr5W0rf1V985Ghm32mlVKygI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/8d0cae-ec13-45fb-9afc-3d593ebe5220/1/xlg_WMcRCtTMYJ9P-3yrL4DINYE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.202.0.0/16
84.48.0.0/18
84.49.0.0/16
89.10.0.0-89.11.127.255
213.145.160.0/19
213.187.160.0/19
217.13.0.0/19
IPv6:
2a04:980::/29
Signature Algorithm: sha256WithRSAEncryption
53:3e:15:b3:1d:a4:cd:13:27:ad:0a:1b:a7:10:17:ec:b5:23:
07:80:ef:53:70:6a:8a:09:a2:fe:4f:45:b2:f6:db:b5:e2:22:
53:bf:6c:c0:e7:39:9e:55:db:74:50:05:85:d0:02:75:36:2f:
dc:3c:4e:73:c0:7f:37:2d:f3:95:2a:96:06:98:34:ed:b6:68:
c0:1d:c3:73:e4:fd:52:d2:55:24:70:4d:8b:67:73:62:79:13:
e7:5e:f7:f0:37:9b:9c:a5:b3:6b:c8:b0:5c:97:c1:c9:d9:fc:
af:7a:e8:60:36:b8:37:bc:2a:a9:4b:fc:7d:f4:60:0d:20:16:
13:bd:81:32:f9:2c:38:7f:36:31:4d:e7:90:2a:78:55:c2:0a:
f0:00:bb:41:b2:e4:6d:21:94:4b:0a:da:51:77:6d:41:b1:40:
76:f8:69:34:54:41:b1:37:a1:13:31:2e:7f:47:a6:c6:7a:c3:
6c:3f:97:7c:e3:b5:88:db:2b:da:90:f6:78:2d:e2:92:9e:93:
3c:9a:08:ec:a1:8d:94:6a:48:36:52:75:30:94:f1:2f:32:4d:
95:9e:15:9d:06:d9:e8:50:72:6d:82:25:24:89:a9:73:a9:ae:
e8:2c:91:3b:5a:0e:f1:ca:15:d4:e6:16:94:70:86:a8:c1:97:
d4:4b:ac:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 16:02:57 2024 by rpki-client on console-fra.rpki-client.org