Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/iT-GWP7tJpCGI9o8z0aX3CKit4Y.roa
File: iT-GWP7tJpCGI9o8z0aX3CKit4Y.roa (raw, json)
Hash identifier: V37c0Wb1LxwsSZMokNVez1UIf0t4w168v/S27lgPC6A=
Subject key identifier: 89:3F:86:58:FE:ED:26:90:86:23:DA:3C:CF:46:97:DC:22:A2:B7:86
Certificate issuer: /CN=f1f42360a3970a808016fdf8d8dba396c5a1d034
Certificate serial: 018CCA2B7E3FBFE2DF436C8B09AD770051C0
Authority key identifier: F1:F4:23:60:A3:97:0A:80:80:16:FD:F8:D8:DB:A3:96:C5:A1:D0:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8fQjYKOXCoCAFv342NujlsWh0DQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/iT-GWP7tJpCGI9o8z0aX3CKit4Y.roa
Signing time: Tue 02 Jan 2024 12:34:56 +0000
ROA not before: Tue 02 Jan 2024 12:34:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61149
IP address blocks: 185.16.90.0/23 maxlen: 23
185.16.91.0/24 maxlen: 24
185.16.90.0/24 maxlen: 24
185.16.89.0/24 maxlen: 24
185.16.88.0/23 maxlen: 23
185.16.88.0/22 maxlen: 22
185.16.88.0/24 maxlen: 24
45.82.107.0/24 maxlen: 24
45.82.106.0/24 maxlen: 24
86.104.226.0/24 maxlen: 24
91.235.107.0/24 maxlen: 24
2a03:cac0:2::/48 maxlen: 48
2a03:cac0:a::/48 maxlen: 48
2a03:cac0:b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/8fQjYKOXCoCAFv342NujlsWh0DQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/8fQjYKOXCoCAFv342NujlsWh0DQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8fQjYKOXCoCAFv342NujlsWh0DQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 17:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2b:7e:3f:bf:e2:df:43:6c:8b:09:ad:77:00:51:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1f42360a3970a808016fdf8d8dba396c5a1d034
Validity
Not Before: Jan 2 12:34:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=893f8658feed26908623da3ccf4697dc22a2b786
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e2:99:13:30:18:aa:75:78:74:eb:f9:ef:54:
7d:48:67:53:6a:94:b1:f1:ff:95:f2:9c:08:ce:55:
78:a2:46:b9:81:8a:a9:40:1b:65:b7:90:f7:ac:6b:
f7:d9:8f:0b:75:71:2d:d7:05:4c:18:08:e3:41:1a:
5c:93:2b:82:37:41:e7:81:32:82:68:82:9d:a5:72:
f5:b4:64:85:46:10:63:d7:14:d2:42:6e:9b:5e:1d:
e1:b8:5a:78:6a:b9:be:51:03:ff:ef:04:2e:33:b6:
2d:38:88:a8:ea:3b:6e:cf:f1:77:f1:be:9e:15:7c:
f0:cc:33:a1:66:b6:ca:e1:be:a0:21:89:c9:00:d6:
30:16:23:b8:e5:05:39:57:18:92:51:12:b4:cf:9f:
69:f3:92:ef:e6:b6:46:1f:ad:70:90:4e:a1:25:7d:
b4:43:bc:0b:94:87:95:b4:45:ec:5c:a9:ec:ee:e4:
95:68:4d:f8:b2:0a:a3:e3:19:08:75:11:60:fa:59:
93:49:a7:b3:f4:85:59:88:18:a3:87:9e:fe:0d:9c:
5c:04:2d:43:c1:d3:07:9f:c1:8e:86:64:aa:20:67:
4f:55:ff:2a:c3:b5:1e:56:cb:46:75:67:1f:29:ff:
94:4e:bc:fe:36:15:83:14:84:b4:cd:59:53:87:ec:
72:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:3F:86:58:FE:ED:26:90:86:23:DA:3C:CF:46:97:DC:22:A2:B7:86
X509v3 Authority Key Identifier:
keyid:F1:F4:23:60:A3:97:0A:80:80:16:FD:F8:D8:DB:A3:96:C5:A1:D0:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8fQjYKOXCoCAFv342NujlsWh0DQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/iT-GWP7tJpCGI9o8z0aX3CKit4Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/8fQjYKOXCoCAFv342NujlsWh0DQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.82.106.0/23
86.104.226.0/24
91.235.107.0/24
185.16.88.0/22
IPv6:
2a03:cac0:2::/48
2a03:cac0:a::/47
Signature Algorithm: sha256WithRSAEncryption
5f:a6:82:a0:f8:93:36:54:e0:d2:b1:dc:46:a3:40:7b:be:a7:
5f:31:bc:36:e3:61:48:97:3a:1c:cd:48:7e:1f:f1:8f:63:d6:
7c:e7:c5:dc:91:05:aa:38:3c:38:5c:df:d8:c7:1d:d0:35:b3:
45:e7:41:97:dd:88:d5:e8:80:10:46:bd:95:d4:61:fd:bb:c8:
a4:20:27:b0:a6:a0:fd:20:5a:f3:23:a6:64:eb:13:69:bc:19:
c2:5d:0e:da:a0:b0:18:cb:bb:58:e9:9f:26:55:46:c1:b4:76:
32:e3:2c:f9:3c:de:3e:ed:78:7c:59:ef:98:10:15:e1:86:b0:
83:4d:9f:83:6e:45:45:b2:ff:0b:7b:dc:69:f1:9b:0b:aa:40:
91:f1:ad:e2:42:08:4c:82:68:3d:52:21:c5:12:63:47:52:5a:
d1:4d:e5:ca:c6:88:5c:f7:29:40:1a:fa:f9:a4:dd:1d:8a:47:
0f:29:05:3a:5c:e3:47:dc:31:cd:a0:14:84:e5:0a:13:83:fd:
75:85:87:3f:d1:73:61:eb:53:62:60:34:5d:3c:47:4f:c6:59:
b7:e1:7c:14:ce:7a:00:69:b6:c9:86:21:2f:8b:a7:1e:05:55:
79:99:57:3f:22:10:4f:97:89:57:53:0c:8e:48:26:34:8e:80:
db:73:08:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:07:33 2024 by rpki-client on console-ams.rpki-client.org