Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/27ca16-f46b-4f8e-b92e-5ed089c1afed/1/wH2A1tGOmZQQUqpf8r8HI-22K5s.roa
File: wH2A1tGOmZQQUqpf8r8HI-22K5s.roa (raw, json)
Hash identifier: JM42kcbrnYs6crwWPTl17vM+mJsxgqVJni97wy5mhLQ=
Subject key identifier: C0:7D:80:D6:D1:8E:99:94:10:52:AA:5F:F2:BF:07:23:ED:B6:2B:9B
Certificate issuer: /CN=67920420f722f7d7f3c4b25a80e17d7290171180
Certificate serial: 018FC433D621FFDB66E6C83D92C377932076
Authority key identifier: 67:92:04:20:F7:22:F7:D7:F3:C4:B2:5A:80:E1:7D:72:90:17:11:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z5IEIPci99fzxLJagOF9cpAXEYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/27ca16-f46b-4f8e-b92e-5ed089c1afed/1/wH2A1tGOmZQQUqpf8r8HI-22K5s.roa
Signing time: Wed 29 May 2024 11:54:42 +0000
ROA not before: Wed 29 May 2024 11:54:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8280
IP address blocks: 185.82.36.0/22 maxlen: 24
185.82.36.0/24 maxlen: 32
185.82.37.0/24 maxlen: 32
185.82.38.0/24 maxlen: 32
185.82.39.0/24 maxlen: 32
2001:4d70::/32 maxlen: 128
2a05:8cc0::/29 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/27ca16-f46b-4f8e-b92e-5ed089c1afed/1/Z5IEIPci99fzxLJagOF9cpAXEYA.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/27ca16-f46b-4f8e-b92e-5ed089c1afed/1/Z5IEIPci99fzxLJagOF9cpAXEYA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z5IEIPci99fzxLJagOF9cpAXEYA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 29 Jun 2024 16:26:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:c4:33:d6:21:ff:db:66:e6:c8:3d:92:c3:77:93:20:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67920420f722f7d7f3c4b25a80e17d7290171180
Validity
Not Before: May 29 11:54:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c07d80d6d18e99941052aa5ff2bf0723edb62b9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:36:63:1d:73:2b:82:9d:d1:00:b0:d2:02:af:
b9:c6:76:05:a7:a3:d9:d3:d2:c9:6f:b7:92:c2:7c:
3d:16:f5:13:b7:02:45:89:e8:12:ae:e7:c5:dd:fb:
0d:51:6f:7f:c4:9e:60:a7:a7:17:6a:79:3c:09:a6:
25:95:66:4f:d7:49:20:fb:0a:20:71:f2:9c:35:63:
3a:a8:d9:e3:f0:84:f6:98:33:a3:85:17:2f:4f:c0:
8a:bf:1f:fd:6c:ce:05:5a:78:25:d8:91:69:35:ac:
20:c2:53:58:b7:3d:10:73:ed:de:ad:3d:52:5b:9e:
e2:83:27:9d:fa:52:aa:3b:92:6c:c9:e7:09:46:40:
44:14:9e:45:77:2a:3f:6c:4f:2b:70:d7:41:6e:ef:
3b:ee:4f:6e:b3:02:04:eb:5b:51:9f:53:cf:70:4d:
bd:9c:a6:9e:5a:71:81:13:91:d2:12:e2:fe:03:1e:
ed:a5:ef:d5:2c:f3:4c:b7:92:da:14:8f:d6:05:6c:
fa:83:b7:23:2f:0f:4f:25:75:2e:e9:28:f8:59:60:
c2:89:9b:ea:93:24:64:0d:75:2f:cc:0f:49:ce:84:
d0:99:ea:f5:51:73:aa:ab:39:03:e7:34:23:c5:0c:
e5:3e:30:29:8a:37:b8:32:6f:95:66:43:b6:13:c6:
84:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:7D:80:D6:D1:8E:99:94:10:52:AA:5F:F2:BF:07:23:ED:B6:2B:9B
X509v3 Authority Key Identifier:
keyid:67:92:04:20:F7:22:F7:D7:F3:C4:B2:5A:80:E1:7D:72:90:17:11:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5IEIPci99fzxLJagOF9cpAXEYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/27ca16-f46b-4f8e-b92e-5ed089c1afed/1/wH2A1tGOmZQQUqpf8r8HI-22K5s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/27ca16-f46b-4f8e-b92e-5ed089c1afed/1/Z5IEIPci99fzxLJagOF9cpAXEYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.82.36.0/22
IPv6:
2001:4d70::/32
2a05:8cc0::/29
Signature Algorithm: sha256WithRSAEncryption
5a:77:3d:ee:75:e4:73:1d:a7:ef:89:81:48:c4:68:0f:de:c4:
34:47:ec:b0:8d:08:a0:b0:8c:96:d0:8a:d4:bc:13:93:17:13:
e5:5e:9a:b9:f8:16:80:e1:1b:b6:bf:98:55:bc:79:3a:6e:d5:
e5:fb:cb:2c:54:98:0e:1b:a9:20:d4:17:9d:69:ac:0f:78:63:
a5:2b:3d:79:e0:c4:b4:d0:87:84:48:13:b3:c0:88:69:59:25:
38:40:54:ac:73:2b:61:7d:04:09:e8:f5:f7:7d:31:1f:c0:ae:
98:c1:47:56:51:15:a5:a0:b1:e2:90:ae:3b:01:e0:1f:00:dd:
e3:f3:3f:89:2f:bb:0e:d1:34:fa:e9:58:27:34:4e:ce:cf:d8:
25:80:38:76:c2:f2:41:1c:41:e7:a0:db:f0:d3:a7:8f:29:ac:
1a:8d:3f:97:96:10:c6:d3:7e:c2:c2:6b:28:92:c8:eb:07:72:
8a:a2:83:68:a8:5e:45:a0:8e:06:8b:fe:54:f5:90:35:07:2a:
89:cc:97:ca:54:01:f5:6b:fd:32:03:ff:81:a1:51:15:f3:72:
58:37:54:2c:d2:83:3e:ec:1b:0f:9d:51:60:24:25:c9:e9:de:
d4:f2:d1:e2:5b:8e:fb:e4:96:7d:82:d2:f6:91:68:3a:d5:3f:
97:9d:fa:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 21:51:31 2024 by rpki-client on console-ams.rpki-client.org