Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/583a2c-946d-4517-8083-26985ce45978/1/y9mgZIZmw7mMYyegRqVVO-xeN6c.roa
File: y9mgZIZmw7mMYyegRqVVO-xeN6c.roa (raw, json)
Hash identifier: xKeAaRilnhjxmZGTSCsr0pgEFxbJBQ80Sr6b/1Y7OAs=
Subject key identifier: CB:D9:A0:64:86:66:C3:B9:8C:63:27:A0:46:A5:55:3B:EC:5E:37:A7
Certificate issuer: /CN=6052e1592b12ad2cd39f5be57c058535edb12b9c
Certificate serial: 018CC64B5AFC56003D1EB245F7A1B7948B89
Authority key identifier: 60:52:E1:59:2B:12:AD:2C:D3:9F:5B:E5:7C:05:85:35:ED:B1:2B:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFLhWSsSrSzTn1vlfAWFNe2xK5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/583a2c-946d-4517-8083-26985ce45978/1/y9mgZIZmw7mMYyegRqVVO-xeN6c.roa
Signing time: Mon 01 Jan 2024 18:31:16 +0000
ROA not before: Mon 01 Jan 2024 18:31:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203982
IP address blocks: 185.118.8.0/22 maxlen: 22
185.118.11.0/24 maxlen: 24
185.118.8.0/24 maxlen: 24
185.118.10.0/24 maxlen: 24
185.118.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/583a2c-946d-4517-8083-26985ce45978/1/YFLhWSsSrSzTn1vlfAWFNe2xK5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/583a2c-946d-4517-8083-26985ce45978/1/YFLhWSsSrSzTn1vlfAWFNe2xK5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/YFLhWSsSrSzTn1vlfAWFNe2xK5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:5a:fc:56:00:3d:1e:b2:45:f7:a1:b7:94:8b:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6052e1592b12ad2cd39f5be57c058535edb12b9c
Validity
Not Before: Jan 1 18:31:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cbd9a0648666c3b98c6327a046a5553bec5e37a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:42:43:34:05:91:2f:3e:4c:ae:02:92:50:4f:
82:44:44:21:e4:6f:3d:a6:76:f9:6a:59:ba:48:46:
e8:ca:d9:80:27:d3:4b:fd:b8:be:99:ad:c1:d7:10:
35:4d:75:2c:9e:c1:16:03:aa:b1:60:3f:6b:19:a4:
ef:1c:0a:da:28:8c:ac:09:1c:5b:55:5a:a3:f8:a0:
18:29:c5:ed:12:13:87:4b:9c:11:7d:8a:b4:8a:f5:
63:fc:b1:dd:fa:ae:51:06:b1:a1:15:d0:16:1b:7d:
56:94:c4:10:1e:64:ec:72:64:3f:15:d7:64:aa:80:
08:60:1e:f4:d6:96:6a:bc:cf:1d:ef:d6:b3:b8:f2:
70:31:b1:81:45:7c:b7:90:9f:63:26:94:ee:ad:2d:
c7:87:66:72:e2:fb:6f:74:aa:5a:39:17:13:09:23:
d7:60:9c:3d:a6:5f:a8:67:dc:9e:3a:c9:75:8f:46:
88:f5:6f:b6:36:61:a4:90:c6:bc:c6:9d:92:e7:d5:
a7:b8:a4:65:41:6b:80:6e:9e:c3:8d:44:1c:0d:df:
82:ff:c0:06:3e:c9:f9:bd:23:dc:41:df:ad:18:fb:
81:ea:cf:89:ef:95:df:74:bf:6c:17:a8:96:e5:87:
32:b1:d9:30:95:0c:f3:5b:7a:2e:14:12:59:e8:91:
60:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:D9:A0:64:86:66:C3:B9:8C:63:27:A0:46:A5:55:3B:EC:5E:37:A7
X509v3 Authority Key Identifier:
keyid:60:52:E1:59:2B:12:AD:2C:D3:9F:5B:E5:7C:05:85:35:ED:B1:2B:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFLhWSsSrSzTn1vlfAWFNe2xK5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/583a2c-946d-4517-8083-26985ce45978/1/y9mgZIZmw7mMYyegRqVVO-xeN6c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/583a2c-946d-4517-8083-26985ce45978/1/YFLhWSsSrSzTn1vlfAWFNe2xK5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.118.8.0/22
Signature Algorithm: sha256WithRSAEncryption
1a:13:a5:7f:6a:79:82:0b:f8:ab:1c:17:d1:95:bb:f8:30:98:
3a:02:5f:77:d6:0d:c2:b3:0b:91:4a:59:e3:36:46:e3:9e:a5:
b7:75:27:7e:8f:85:01:ad:c2:fa:4f:76:2b:27:d3:e5:4f:0c:
c5:39:0e:9c:c5:21:94:0c:61:be:02:5d:11:22:64:d0:49:b0:
71:57:e4:28:c3:02:1a:46:61:ad:8a:6f:dd:95:d6:2f:e3:95:
a3:21:9c:77:69:be:13:a3:d4:32:95:22:db:34:9f:ad:10:23:
0a:47:3b:61:e3:60:c8:3d:b2:1e:12:d3:cd:cd:4c:3d:e4:c6:
4f:33:4a:45:3b:02:41:e3:5d:89:fb:4b:ff:fe:65:8a:18:0a:
da:04:0e:31:42:b9:0c:59:1d:27:b6:a5:f2:02:01:fa:8e:12:
77:b4:6a:bc:fc:0c:e4:f5:c8:ca:15:13:52:9b:26:c9:0b:53:
ac:58:92:d7:45:75:e5:f1:e7:c4:97:62:bb:37:1f:24:e9:6c:
4c:19:a3:f4:5e:e5:5c:6b:8a:f1:51:30:bd:56:c2:ff:e2:a8:
2a:cf:16:fa:c8:34:d3:f0:2a:96:5d:87:f7:d0:c1:bf:14:24:
bb:ea:b0:51:6e:27:66:c2:06:82:19:f7:55:a8:95:56:3c:61:
88:0c:5b:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 18:25:33 2024 by rpki-client on console-ams.rpki-client.org