Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/1f36d5-3080-4a0e-9d63-79344da3a2e6/1/xR5Ejmg-DdpmGe8PfF2wFaQ6R5E.roa
File: xR5Ejmg-DdpmGe8PfF2wFaQ6R5E.roa (raw, json)
Hash identifier: tIbbg6AnU1xeX3004hXi1Xdl/FpZ1hSKu4F84wNsRsk=
Subject key identifier: C5:1E:44:8E:68:3E:0D:DA:66:19:EF:0F:7C:5D:B0:15:A4:3A:47:91
Certificate issuer: /CN=af23585bfcdd061ca946e2d9ea8b97e45b9c31d6
Certificate serial: 018CC727211E8AB813F5EC7B79D1068EED36
Authority key identifier: AF:23:58:5B:FC:DD:06:1C:A9:46:E2:D9:EA:8B:97:E4:5B:9C:31:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ryNYW_zdBhypRuLZ6ouX5FucMdY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/1f36d5-3080-4a0e-9d63-79344da3a2e6/1/xR5Ejmg-DdpmGe8PfF2wFaQ6R5E.roa
Signing time: Mon 01 Jan 2024 22:31:19 +0000
ROA not before: Mon 01 Jan 2024 22:31:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20634
IP address blocks: 185.213.56.0/22 maxlen: 22
2a0b:83c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/1f36d5-3080-4a0e-9d63-79344da3a2e6/1/ryNYW_zdBhypRuLZ6ouX5FucMdY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/1f36d5-3080-4a0e-9d63-79344da3a2e6/1/ryNYW_zdBhypRuLZ6ouX5FucMdY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ryNYW_zdBhypRuLZ6ouX5FucMdY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Jun 2024 10:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:21:1e:8a:b8:13:f5:ec:7b:79:d1:06:8e:ed:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af23585bfcdd061ca946e2d9ea8b97e45b9c31d6
Validity
Not Before: Jan 1 22:31:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c51e448e683e0dda6619ef0f7c5db015a43a4791
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:63:72:6f:6b:de:b6:1e:85:48:51:a3:7d:b9:
25:54:9d:10:c7:4e:db:d1:62:15:c7:76:d0:e4:3a:
45:6d:67:85:d4:52:b4:ee:d0:95:e0:5c:70:c5:07:
65:fa:f8:5c:1b:be:e6:1a:4d:cb:e4:ca:c2:6f:25:
bc:dc:2a:22:f6:77:3f:fc:76:16:91:92:27:2c:af:
fd:4b:1e:b6:09:51:24:21:70:85:8f:bb:5a:90:f2:
60:cc:e6:4d:65:b7:32:64:1d:e9:69:0b:13:ee:52:
e1:e0:54:77:18:7f:2f:e8:b1:70:f5:95:45:23:66:
2a:7b:84:9f:5f:50:11:3a:e0:2f:17:40:9d:5d:d5:
99:54:1a:63:b0:91:ad:99:bb:b3:75:cf:38:1c:05:
ad:34:ef:37:8e:57:fa:45:ac:07:7f:79:cb:ee:44:
6e:57:e0:b0:01:06:b6:15:c5:27:fb:bb:82:bd:6f:
db:9b:4a:42:50:d5:6b:91:11:3a:b1:73:6f:a2:19:
0f:b9:50:b6:85:6f:fd:3f:d0:1e:b2:b8:59:f4:79:
8d:ff:37:27:27:9c:33:04:d5:21:05:c3:2a:f7:ae:
ca:40:0e:5a:18:ef:26:d0:7b:79:0a:4e:2d:75:a5:
2e:0d:09:7e:cd:32:ab:d0:3a:24:db:1b:e6:41:0d:
0f:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:1E:44:8E:68:3E:0D:DA:66:19:EF:0F:7C:5D:B0:15:A4:3A:47:91
X509v3 Authority Key Identifier:
keyid:AF:23:58:5B:FC:DD:06:1C:A9:46:E2:D9:EA:8B:97:E4:5B:9C:31:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ryNYW_zdBhypRuLZ6ouX5FucMdY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/1f36d5-3080-4a0e-9d63-79344da3a2e6/1/xR5Ejmg-DdpmGe8PfF2wFaQ6R5E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/1f36d5-3080-4a0e-9d63-79344da3a2e6/1/ryNYW_zdBhypRuLZ6ouX5FucMdY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.213.56.0/22
IPv6:
2a0b:83c0::/29
Signature Algorithm: sha256WithRSAEncryption
84:9e:cf:06:86:75:86:ae:97:29:28:7d:31:1e:0a:1b:ab:4e:
f1:4f:d1:58:9b:44:2e:56:3c:c8:82:e7:3b:4f:4b:8f:6a:18:
5f:21:dd:9a:15:cc:59:6f:e2:03:db:4c:fa:91:41:f6:74:22:
4e:9a:2d:68:89:f6:fe:3a:c9:ba:22:26:c2:d4:8d:ef:a5:23:
fe:3d:43:cb:93:f7:14:38:6e:db:07:ff:e8:b7:9e:4c:80:2c:
c7:67:2d:ad:7f:2e:b2:71:3e:d6:96:db:70:42:c8:e5:df:3d:
09:c3:4c:79:58:83:14:8b:a1:01:c0:d0:1f:be:ff:f6:91:34:
ba:5b:2f:f5:bb:71:30:f0:ee:8d:1d:60:79:7c:f9:e8:49:d2:
c5:f9:e7:0a:52:b0:43:94:e2:76:1f:df:63:41:7a:98:72:36:
61:eb:dc:73:4d:66:fd:fd:33:ed:2b:d1:a0:26:cc:2c:97:f7:
37:16:4a:e8:24:85:2f:76:46:12:4a:e2:0e:fe:18:3e:f4:d9:
a4:9c:9c:f1:74:c4:84:d7:79:ba:5b:19:18:6d:a9:5e:00:67:
9d:57:ab:dd:b9:1d:de:77:57:46:f3:6b:41:86:49:e7:0d:62:
33:00:e7:a6:40:06:f5:cd:3f:39:a9:cb:ad:40:7b:d1:42:ff:
af:e9:71:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 21:10:35 2024 by rpki-client on console-fra.rpki-client.org