Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/xvnSWVRIatNSTVBNerTPsDFcs_8.roa
File: xvnSWVRIatNSTVBNerTPsDFcs_8.roa (raw, json)
Hash identifier: AqSZkSYfkypVyGPQWM5nPO6HlospHRWMd5Lisbps72w=
Subject key identifier: C6:F9:D2:59:54:48:6A:D3:52:4D:50:4D:7A:B4:CF:B0:31:5C:B3:FF
Certificate issuer: /CN=835bc9bb547e27788d221bc8bbd5fb02e024480f
Certificate serial: 018CC72754F7738011471741A397C4393BBD
Authority key identifier: 83:5B:C9:BB:54:7E:27:78:8D:22:1B:C8:BB:D5:FB:02:E0:24:48:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g1vJu1R-J3iNIhvIu9X7AuAkSA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/xvnSWVRIatNSTVBNerTPsDFcs_8.roa
Signing time: Mon 01 Jan 2024 22:31:32 +0000
ROA not before: Mon 01 Jan 2024 22:31:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42615
IP address blocks: 185.186.8.0/24 maxlen: 24
185.186.11.0/24 maxlen: 24
2a0b:6b81:3::/48 maxlen: 48
2a0b:6b87::/32 maxlen: 32
2a0b:6b81:4::/48 maxlen: 48
2a0b:6b82::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/g1vJu1R-J3iNIhvIu9X7AuAkSA8.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/g1vJu1R-J3iNIhvIu9X7AuAkSA8.mft
rsync://rpki.ripe.net/repository/DEFAULT/g1vJu1R-J3iNIhvIu9X7AuAkSA8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 04:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:54:f7:73:80:11:47:17:41:a3:97:c4:39:3b:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=835bc9bb547e27788d221bc8bbd5fb02e024480f
Validity
Not Before: Jan 1 22:31:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c6f9d25954486ad3524d504d7ab4cfb0315cb3ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ed:b3:74:a9:bc:8b:1e:a9:00:0c:1f:e3:ad:
18:83:20:24:a3:6a:91:1c:cf:00:6f:f8:6c:dc:e3:
4e:9f:3b:70:1c:40:e1:fc:72:94:58:6c:ac:31:bf:
e9:3f:16:4d:2e:8e:c4:7a:e1:42:f3:04:4c:a4:b6:
77:e2:2d:4e:28:fe:e7:fe:ae:19:eb:3d:cf:fd:83:
60:7e:09:98:1b:68:9f:c5:d4:43:17:13:ef:50:46:
0d:30:53:c4:66:3c:51:12:c0:48:02:a8:75:53:0e:
7c:6e:cd:19:92:2b:b7:c1:85:a7:25:64:3c:f0:90:
31:bc:2c:ba:d9:a8:f1:6b:1f:b2:6e:4d:3b:70:2c:
5f:65:f8:d8:3b:12:20:ad:78:21:cf:5f:3f:4e:20:
a1:7a:ad:db:70:fc:f5:d9:f2:b4:4f:37:ac:0c:57:
12:c5:33:79:c6:76:85:6d:f8:2d:27:63:17:b6:b2:
ce:d4:86:00:7f:f4:59:21:6e:a8:78:73:ed:06:47:
1a:84:b1:a6:b7:01:0b:63:6a:d9:f7:f9:eb:e2:5b:
c3:d6:0a:36:30:dd:e4:bc:e5:a8:38:7f:24:98:90:
85:ea:d5:be:80:30:3e:45:cf:5d:67:0e:5f:4e:db:
9f:4f:1f:aa:e1:48:37:47:0b:b7:06:73:c5:88:39:
67:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:F9:D2:59:54:48:6A:D3:52:4D:50:4D:7A:B4:CF:B0:31:5C:B3:FF
X509v3 Authority Key Identifier:
keyid:83:5B:C9:BB:54:7E:27:78:8D:22:1B:C8:BB:D5:FB:02:E0:24:48:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g1vJu1R-J3iNIhvIu9X7AuAkSA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/xvnSWVRIatNSTVBNerTPsDFcs_8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/g1vJu1R-J3iNIhvIu9X7AuAkSA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.186.8.0/24
185.186.11.0/24
IPv6:
2a0b:6b81:3::-2a0b:6b81:4:ffff:ffff:ffff:ffff:ffff
2a0b:6b82::/32
2a0b:6b87::/32
Signature Algorithm: sha256WithRSAEncryption
b7:de:78:36:c3:e5:b2:57:dc:23:30:ed:5a:19:c3:b9:a3:3a:
fe:3f:18:87:66:10:1d:86:24:f1:7d:9e:e8:84:c3:c0:b4:3f:
a7:e1:bc:20:89:9e:3e:81:26:a5:c1:08:76:54:86:98:f5:60:
e5:45:66:64:f8:be:5e:c1:22:eb:91:a6:b6:91:ce:54:5d:cc:
22:94:5a:c3:d9:23:b8:fc:10:3f:4f:32:59:7a:81:8c:ea:7e:
3d:42:95:39:84:9b:19:9b:66:f5:dd:5c:68:3d:31:3e:db:0f:
6a:72:bf:73:28:98:b6:e7:94:46:d3:8c:dc:99:98:b9:c4:fe:
9e:24:b3:2a:9e:3e:5f:e0:b1:b2:d9:2b:62:84:bb:b1:95:3c:
67:cd:72:b8:96:fd:10:d9:a9:8b:00:c1:ec:97:92:fb:29:9d:
5d:e0:68:ff:a8:d6:66:1e:35:28:a0:45:ed:ff:49:50:6a:74:
7d:e5:f4:c2:c0:0b:09:27:6a:e5:c7:0c:f7:6d:36:ba:dc:9b:
ad:a3:89:11:e1:ed:f6:86:e2:f3:c7:57:6e:dc:33:dd:2d:fb:
8f:e3:1a:f9:02:7d:b7:98:e8:a5:ca:81:14:80:e9:e1:8e:01:
d2:de:3d:97:9c:3b:c7:40:53:37:e0:bf:b4:8d:d2:c3:89:85:
15:3c:a3:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 13:28:04 2024 by rpki-client on console-ams.rpki-client.org