Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/eafe6e-cfe3-4245-9c36-07a28ad3cb64/1/3fjSIMnH_WBLUgpvU7tlZHyeIto.roa
File: 3fjSIMnH_WBLUgpvU7tlZHyeIto.roa (raw, json)
Hash identifier: WGMBLao+4V+10nyD0vrWm6kwApVc/HWl+LY5c8OlBc4=
Subject key identifier: DD:F8:D2:20:C9:C7:FD:60:4B:52:0A:6F:53:BB:65:64:7C:9E:22:DA
Certificate issuer: /CN=199ef1b4eb6a0f812511b6bb2704801a3311f709
Certificate serial: 018CC870C3CBF0AC18C27FFF3CE545A27E0D
Authority key identifier: 19:9E:F1:B4:EB:6A:0F:81:25:11:B6:BB:27:04:80:1A:33:11:F7:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GZ7xtOtqD4ElEba7JwSAGjMR9wk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/eafe6e-cfe3-4245-9c36-07a28ad3cb64/1/3fjSIMnH_WBLUgpvU7tlZHyeIto.roa
Signing time: Tue 02 Jan 2024 04:31:22 +0000
ROA not before: Tue 02 Jan 2024 04:31:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 19905
IP address blocks: 185.197.178.0/24 maxlen: 24
185.197.179.0/24 maxlen: 24
185.197.176.0/24 maxlen: 24
185.197.177.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/eafe6e-cfe3-4245-9c36-07a28ad3cb64/1/GZ7xtOtqD4ElEba7JwSAGjMR9wk.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/eafe6e-cfe3-4245-9c36-07a28ad3cb64/1/GZ7xtOtqD4ElEba7JwSAGjMR9wk.mft
rsync://rpki.ripe.net/repository/DEFAULT/GZ7xtOtqD4ElEba7JwSAGjMR9wk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 16:02:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:70:c3:cb:f0:ac:18:c2:7f:ff:3c:e5:45:a2:7e:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=199ef1b4eb6a0f812511b6bb2704801a3311f709
Validity
Not Before: Jan 2 04:31:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ddf8d220c9c7fd604b520a6f53bb65647c9e22da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:32:ef:21:6c:50:09:5f:fe:aa:76:ff:4e:af:
3c:37:30:6a:ef:fc:87:e8:1d:45:14:d2:78:6b:d0:
c5:8c:22:c6:7e:75:3f:c4:4b:3a:7e:be:26:98:35:
1f:75:fa:0e:20:74:0f:b5:4b:70:98:e5:7b:df:7b:
dc:20:fc:3b:9b:16:d0:a5:2f:23:f9:a3:a5:d6:4c:
68:0a:39:44:28:41:84:a1:5a:54:71:9b:64:f4:d4:
1a:d8:76:06:eb:7e:3d:38:67:27:14:7e:7b:d8:98:
14:80:bf:b1:a1:2c:dd:56:41:73:bb:67:da:ae:48:
ce:80:15:7a:17:a3:34:d0:58:bd:aa:47:05:37:f2:
9e:1f:a9:eb:cf:10:80:28:90:ed:26:09:3e:04:01:
6e:81:59:1f:f4:21:40:12:21:9a:d8:63:fe:4e:3a:
0f:f0:91:e8:6e:23:37:7a:fe:ab:2f:c5:0b:b9:80:
5b:db:8b:68:13:8c:4b:7a:4c:49:ec:44:f2:28:24:
4a:0a:54:00:59:a8:c4:15:6b:15:ee:db:17:22:15:
79:60:c6:2e:14:2b:56:a1:bc:0a:0a:29:02:a8:d8:
4b:36:f3:c4:eb:66:d6:13:85:02:b3:ed:5a:c3:fb:
bc:ae:13:64:52:ac:5f:92:73:08:b1:06:ce:9b:44:
ad:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:F8:D2:20:C9:C7:FD:60:4B:52:0A:6F:53:BB:65:64:7C:9E:22:DA
X509v3 Authority Key Identifier:
keyid:19:9E:F1:B4:EB:6A:0F:81:25:11:B6:BB:27:04:80:1A:33:11:F7:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GZ7xtOtqD4ElEba7JwSAGjMR9wk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/eafe6e-cfe3-4245-9c36-07a28ad3cb64/1/3fjSIMnH_WBLUgpvU7tlZHyeIto.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/eafe6e-cfe3-4245-9c36-07a28ad3cb64/1/GZ7xtOtqD4ElEba7JwSAGjMR9wk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.197.176.0/22
Signature Algorithm: sha256WithRSAEncryption
50:80:92:39:56:dd:a7:d7:5d:0b:ba:21:20:a8:44:82:16:ee:
b1:8a:90:ab:ec:1c:d5:aa:28:c9:46:22:fe:40:5b:97:a3:2e:
8e:f4:d6:ae:b0:e2:37:51:72:11:f9:c2:05:cd:08:c6:d9:6d:
6c:17:44:93:c7:2b:ef:72:61:a4:ff:ee:63:6c:c7:f3:20:a8:
ab:a8:d8:da:e5:34:70:4e:13:69:62:6b:d7:e0:6b:83:84:5a:
b8:97:8c:7e:26:1c:5b:8a:15:a2:28:95:ac:fa:18:fd:ab:1b:
15:8c:51:39:1e:39:11:0e:8c:4e:4b:c5:0d:dd:e6:88:b8:80:
7f:c9:07:37:2d:8a:3f:e7:9d:dd:5d:30:25:4f:fe:f6:d9:46:
2b:49:a6:dc:07:f4:73:54:7f:82:5d:89:13:83:54:c0:73:5e:
08:6b:b9:18:95:88:fb:a9:a1:3a:4a:41:b5:a5:af:0e:9b:d1:
b2:e6:73:3b:94:dd:77:a8:03:09:75:b4:d1:1b:2f:c4:4e:93:
17:03:7f:6a:97:88:ad:c6:37:66:53:2a:b5:be:a8:d1:42:94:
85:d7:ea:e6:c4:12:5f:2e:9d:f3:36:62:7e:f4:2d:b4:b3:1a:
09:6a:5e:4d:a3:79:1b:0c:fd:8f:ad:62:b5:48:bf:38:65:44:
ae:9e:47:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 20:53:42 2024 by rpki-client on console-ams.rpki-client.org