Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/2cf88f-2c6a-4b48-a25e-4a8b6b4082b1/1/3GGQ9ItMoUocsLKm6Cx9d0oHKKE.roa
File: 3GGQ9ItMoUocsLKm6Cx9d0oHKKE.roa (raw, json)
Hash identifier: g2ua26/jDcbhnvj+WDeF0m0JQF6LgS8ALM4vGjV878c=
Subject key identifier: DC:61:90:F4:8B:4C:A1:4A:1C:B0:B2:A6:E8:2C:7D:77:4A:07:28:A1
Certificate issuer: /CN=039b01353e51a3a87e835963bd8833ed81853d77
Certificate serial: 018CC870837736C3D48FC9D49A04559BED27
Authority key identifier: 03:9B:01:35:3E:51:A3:A8:7E:83:59:63:BD:88:33:ED:81:85:3D:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A5sBNT5Ro6h-g1ljvYgz7YGFPXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/2cf88f-2c6a-4b48-a25e-4a8b6b4082b1/1/3GGQ9ItMoUocsLKm6Cx9d0oHKKE.roa
Signing time: Tue 02 Jan 2024 04:31:06 +0000
ROA not before: Tue 02 Jan 2024 04:31:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203318
IP address blocks: 185.138.80.0/22 maxlen: 24
185.214.73.0/24 maxlen: 24
2a00:1ac1::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/2cf88f-2c6a-4b48-a25e-4a8b6b4082b1/1/A5sBNT5Ro6h-g1ljvYgz7YGFPXc.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/2cf88f-2c6a-4b48-a25e-4a8b6b4082b1/1/A5sBNT5Ro6h-g1ljvYgz7YGFPXc.mft
rsync://rpki.ripe.net/repository/DEFAULT/A5sBNT5Ro6h-g1ljvYgz7YGFPXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 May 2024 07:03:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:70:83:77:36:c3:d4:8f:c9:d4:9a:04:55:9b:ed:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=039b01353e51a3a87e835963bd8833ed81853d77
Validity
Not Before: Jan 2 04:31:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dc6190f48b4ca14a1cb0b2a6e82c7d774a0728a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:7e:10:65:c5:53:71:63:e7:02:ac:d9:fc:1f:
22:2c:aa:04:36:2c:2d:3c:2f:e6:27:55:83:1a:42:
1a:ed:0d:84:ac:c0:27:c0:68:06:79:8c:41:8e:c5:
c0:4a:9a:a1:40:9c:03:eb:79:dd:81:82:49:fb:3c:
92:43:e4:f8:70:f0:04:9b:e7:d4:e6:12:cd:cc:83:
dd:1a:6a:e7:dc:5a:80:a0:04:b3:5e:24:ee:9c:e3:
31:ed:c9:83:5f:32:25:d5:f8:b3:b3:13:e7:ee:c6:
a5:91:d3:90:f7:44:26:a1:9d:1e:26:e9:e5:27:23:
b8:72:a8:b2:0f:89:a5:33:7a:8e:b0:f1:3d:a1:87:
97:6d:64:0a:9c:c2:82:68:b7:5c:b4:82:9f:7c:c9:
e9:87:c2:a3:9a:ca:f1:82:69:32:e9:29:15:29:aa:
80:34:1b:d0:0a:5f:fb:66:55:9a:f4:82:31:e9:45:
99:39:3d:7b:dd:a4:6d:93:bf:5a:45:6d:b9:08:57:
b2:8a:dd:e9:9f:ad:47:7b:a4:61:a3:e7:cc:02:9a:
43:fe:ca:4c:24:65:33:5b:e8:da:e5:66:50:ce:dd:
8c:99:f0:06:59:e2:df:5e:ec:b4:24:2a:d4:78:2b:
79:ea:b1:cf:97:88:78:b1:56:8a:eb:14:de:0e:6d:
ac:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:61:90:F4:8B:4C:A1:4A:1C:B0:B2:A6:E8:2C:7D:77:4A:07:28:A1
X509v3 Authority Key Identifier:
keyid:03:9B:01:35:3E:51:A3:A8:7E:83:59:63:BD:88:33:ED:81:85:3D:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A5sBNT5Ro6h-g1ljvYgz7YGFPXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/2cf88f-2c6a-4b48-a25e-4a8b6b4082b1/1/3GGQ9ItMoUocsLKm6Cx9d0oHKKE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/2cf88f-2c6a-4b48-a25e-4a8b6b4082b1/1/A5sBNT5Ro6h-g1ljvYgz7YGFPXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.138.80.0/22
185.214.73.0/24
IPv6:
2a00:1ac1::/32
Signature Algorithm: sha256WithRSAEncryption
39:ce:4e:ae:65:21:6d:ae:6e:7e:23:e5:31:42:70:e7:37:99:
e4:6e:27:a7:0d:82:30:c6:e1:13:27:5d:fa:1c:71:3d:ac:fa:
4a:be:2e:61:07:b6:c5:73:9a:70:8c:e4:03:f8:e5:c1:67:a5:
b4:97:2d:72:7c:f5:b9:b6:da:8e:31:74:1b:8b:09:15:dc:ac:
23:0f:41:a6:bf:7a:73:30:f3:9a:15:e7:41:dc:72:76:f0:62:
04:66:12:1b:03:bb:91:52:2c:a2:16:a2:e6:55:89:4e:5d:ad:
89:9b:96:56:d2:4e:fb:86:2c:81:03:b7:f3:ca:5c:4c:9f:4f:
a3:76:7a:ee:3d:35:69:c2:2c:52:38:39:a5:a2:bc:2f:7c:4c:
2c:5e:a4:a0:f4:35:45:04:06:4e:5e:e9:fc:e7:0c:c8:e5:72:
29:73:01:58:b6:6f:7e:bc:53:c7:fe:4e:e0:07:5f:71:80:cf:
a4:37:0c:1c:c2:70:98:c4:50:ce:a8:16:71:24:c2:7b:7f:63:
d8:61:60:37:57:b4:e4:5e:d6:65:5d:f2:72:3b:a1:a5:ba:2a:
b3:ea:e4:da:63:0e:34:63:9d:23:09:74:56:85:d2:c9:43:88:
69:ed:be:41:06:da:f1:97:82:d1:87:8e:4a:3b:07:9f:01:41:
e4:e6:0e:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 14:00:21 2024 by rpki-client on console-ams.rpki-client.org