Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/aedb03-b04c-4212-813b-ff25ba599031/1/XGiS9LTX5q981OvX1G8SnKNeKao.roa
File: XGiS9LTX5q981OvX1G8SnKNeKao.roa (raw, json)
Hash identifier: NMlP8jLkSt4pHV2jFXtqN4KMh2EBI8Qs9XIisFCTFAo=
Subject key identifier: 5C:68:92:F4:B4:D7:E6:AF:7C:D4:EB:D7:D4:6F:12:9C:A3:5E:29:AA
Certificate issuer: /CN=550b7c0c8bae610f7e519c0485a4773bceb48dab
Certificate serial: 018CC5DC019A18325033F420216D2131F33A
Authority key identifier: 55:0B:7C:0C:8B:AE:61:0F:7E:51:9C:04:85:A4:77:3B:CE:B4:8D:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VQt8DIuuYQ9-UZwEhaR3O860jas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/aedb03-b04c-4212-813b-ff25ba599031/1/XGiS9LTX5q981OvX1G8SnKNeKao.roa
Signing time: Mon 01 Jan 2024 16:29:39 +0000
ROA not before: Mon 01 Jan 2024 16:29:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34619
IP address blocks: 94.73.128.0/18 maxlen: 24
185.22.186.0/24 maxlen: 24
185.22.184.0/22 maxlen: 24
185.22.184.0/24 maxlen: 24
185.22.185.0/24 maxlen: 24
80.253.240.0/22 maxlen: 24
89.19.0.0/19 maxlen: 24
85.159.64.0/21 maxlen: 24
37.148.208.0/21 maxlen: 24
2a02:2020::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/aedb03-b04c-4212-813b-ff25ba599031/1/VQt8DIuuYQ9-UZwEhaR3O860jas.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/aedb03-b04c-4212-813b-ff25ba599031/1/VQt8DIuuYQ9-UZwEhaR3O860jas.mft
rsync://rpki.ripe.net/repository/DEFAULT/VQt8DIuuYQ9-UZwEhaR3O860jas.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 13:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:01:9a:18:32:50:33:f4:20:21:6d:21:31:f3:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=550b7c0c8bae610f7e519c0485a4773bceb48dab
Validity
Not Before: Jan 1 16:29:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5c6892f4b4d7e6af7cd4ebd7d46f129ca35e29aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:6d:d0:46:d4:5c:58:be:9d:56:e3:8b:65:e5:
0b:17:ef:6f:1c:e6:83:37:5a:ea:fb:b8:d2:c1:6f:
11:ae:1a:74:c0:04:ea:62:a3:c9:0c:e4:ca:f2:c0:
54:f4:56:84:e5:90:c5:df:6b:b7:11:a3:9a:21:3e:
18:05:89:77:9e:34:4c:69:86:c9:94:53:e1:ad:e0:
d4:2c:2d:06:05:b9:0f:bc:39:21:25:ba:d6:ae:9c:
43:5a:82:0e:7b:07:fc:88:07:53:07:ac:e7:15:e0:
69:86:b4:db:49:a4:7a:53:f0:61:36:68:ba:fb:0b:
d7:1c:f4:a8:34:48:45:06:75:e7:e3:2b:4b:90:f3:
2f:6c:d7:13:b5:53:7d:39:c7:e0:d6:3a:c2:19:64:
b5:70:fe:54:20:32:4a:b9:92:f7:63:f2:4a:e5:38:
d2:12:a1:72:1b:08:0d:76:ef:64:82:77:60:9f:44:
2d:f2:fe:ec:0a:24:b8:2c:d2:c8:a9:71:99:9a:e4:
5f:1d:01:2e:f7:87:24:d0:28:f1:5f:49:4e:49:ad:
ba:84:f5:96:00:99:73:0d:10:9d:f7:0c:17:4a:2b:
47:30:8e:1a:de:ac:ec:f7:9b:59:c6:29:0f:94:c7:
56:81:82:81:3d:5a:87:50:56:a8:97:e7:ed:90:42:
2f:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:68:92:F4:B4:D7:E6:AF:7C:D4:EB:D7:D4:6F:12:9C:A3:5E:29:AA
X509v3 Authority Key Identifier:
keyid:55:0B:7C:0C:8B:AE:61:0F:7E:51:9C:04:85:A4:77:3B:CE:B4:8D:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VQt8DIuuYQ9-UZwEhaR3O860jas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/aedb03-b04c-4212-813b-ff25ba599031/1/XGiS9LTX5q981OvX1G8SnKNeKao.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/aedb03-b04c-4212-813b-ff25ba599031/1/VQt8DIuuYQ9-UZwEhaR3O860jas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.148.208.0/21
80.253.240.0/22
85.159.64.0/21
89.19.0.0/19
94.73.128.0/18
185.22.184.0/22
IPv6:
2a02:2020::/32
Signature Algorithm: sha256WithRSAEncryption
47:96:88:6b:14:62:16:f4:8f:b7:01:34:55:5b:49:40:f8:24:
40:ca:b1:ca:38:87:bc:c9:a1:50:3c:f5:a5:16:b3:8b:ab:5f:
09:e7:e5:6a:60:41:1a:73:48:b6:c4:02:e4:78:86:3f:fd:c9:
5b:14:aa:ff:21:d6:41:95:52:c1:bf:df:a7:90:82:57:c0:46:
15:60:9c:44:90:19:33:04:f0:73:28:f6:61:ca:aa:1c:0d:55:
95:9f:f9:1a:33:df:a1:e5:75:b6:c8:61:5b:a1:22:1c:1d:a4:
5b:68:94:33:39:d1:db:25:8e:a6:5f:24:36:82:de:43:11:fb:
8e:f9:b1:25:4b:4c:5f:66:d9:c5:5a:98:6b:d4:bb:3c:ae:6e:
7a:7f:11:8f:ae:e4:59:13:4b:ec:43:5a:2f:fe:09:c0:00:65:
5d:53:82:8b:4b:12:37:ab:05:a7:d0:ad:90:fe:94:cd:32:7f:
4e:f9:9a:eb:89:7a:97:56:4e:7f:03:98:61:2c:96:d4:a9:ee:
b2:8a:68:0b:ff:1a:09:6f:bf:11:d5:5d:74:e8:b5:f7:b5:18:
5c:29:4b:9a:57:6f:b1:08:2a:06:f2:fb:0e:03:3d:a5:0c:09:
da:18:0d:45:7b:76:ba:a8:56:da:49:4f:98:f7:7c:fb:36:24:
64:1c:e9:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 16:52:37 2024 by rpki-client on console-ams.rpki-client.org