Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/9d5910-9f5e-446c-8d3c-bc007f2dac24/1/Nn7k8anKSvDOPlx8jnKMzLvN9fQ.roa
File: Nn7k8anKSvDOPlx8jnKMzLvN9fQ.roa (raw, json)
Hash identifier: +rxakWSgqg9nQv0cO8iyUvjLybuRccRQA10QEEtN7CA=
Subject key identifier: 36:7E:E4:F1:A9:CA:4A:F0:CE:3E:5C:7C:8E:72:8C:CC:BB:CD:F5:F4
Certificate issuer: /CN=6ba3186597742a926cd26504e1ed76f8543fdb26
Certificate serial: 01926ADAF9E8DF45E2090AF81C239287627F
Authority key identifier: 6B:A3:18:65:97:74:2A:92:6C:D2:65:04:E1:ED:76:F8:54:3F:DB:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a6MYZZd0KpJs0mUE4e12-FQ_2yY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/9d5910-9f5e-446c-8d3c-bc007f2dac24/1/Nn7k8anKSvDOPlx8jnKMzLvN9fQ.roa
Signing time: Tue 08 Oct 2024 06:39:48 +0000
ROA not before: Tue 08 Oct 2024 06:39:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212988
IP address blocks: 185.194.26.0/24 maxlen: 24
185.194.27.0/24 maxlen: 24
185.219.218.0/24 maxlen: 24
185.221.188.0/24 maxlen: 24
185.221.189.0/24 maxlen: 24
185.221.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/9d5910-9f5e-446c-8d3c-bc007f2dac24/1/a6MYZZd0KpJs0mUE4e12-FQ_2yY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/9d5910-9f5e-446c-8d3c-bc007f2dac24/1/a6MYZZd0KpJs0mUE4e12-FQ_2yY.mft
rsync://rpki.ripe.net/repository/DEFAULT/a6MYZZd0KpJs0mUE4e12-FQ_2yY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 15:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:6a:da:f9:e8:df:45:e2:09:0a:f8:1c:23:92:87:62:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ba3186597742a926cd26504e1ed76f8543fdb26
Validity
Not Before: Oct 8 06:39:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=367ee4f1a9ca4af0ce3e5c7c8e728cccbbcdf5f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:4a:75:ed:01:9e:18:ba:9e:ea:af:ff:f0:b6:
12:32:6a:81:b4:e6:7b:40:71:b5:28:68:0b:4a:67:
8e:bb:0c:c5:ae:72:0b:59:15:91:74:09:6b:ae:41:
58:76:4f:78:a9:61:54:af:da:b6:d8:b2:1d:e1:9e:
4f:8d:0f:92:29:61:27:af:2d:fc:4b:a6:c5:85:f7:
5e:a2:db:8b:80:56:31:d2:f1:21:8c:7c:38:58:19:
d8:a9:47:93:fc:78:70:79:6e:b1:ff:f5:bb:05:95:
b6:42:41:ee:58:bb:50:da:dc:48:4d:a2:84:f7:d0:
f3:ab:2d:fd:f5:56:37:b5:ea:5f:78:36:f2:da:6a:
72:8d:0e:f9:af:5e:ed:ef:45:8c:39:2e:27:17:e8:
78:fb:94:f6:18:a2:95:5a:71:08:24:96:e9:99:c5:
6b:ea:80:ba:b9:30:fa:3c:55:63:a1:5b:8f:d1:82:
1e:27:c0:ef:19:9c:39:7a:c7:ff:94:c9:c8:2d:2a:
a1:a7:8d:68:c8:d6:d9:0e:eb:a1:9e:fa:76:c5:a2:
70:a2:d6:b6:21:44:98:07:d6:ee:34:9e:3f:4d:53:
b4:e3:15:c4:28:70:e3:58:21:f0:fc:63:61:d9:9b:
8b:1d:62:e3:5a:8f:12:f7:84:2e:fc:d1:f7:47:21:
22:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:7E:E4:F1:A9:CA:4A:F0:CE:3E:5C:7C:8E:72:8C:CC:BB:CD:F5:F4
X509v3 Authority Key Identifier:
keyid:6B:A3:18:65:97:74:2A:92:6C:D2:65:04:E1:ED:76:F8:54:3F:DB:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6MYZZd0KpJs0mUE4e12-FQ_2yY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9d5910-9f5e-446c-8d3c-bc007f2dac24/1/Nn7k8anKSvDOPlx8jnKMzLvN9fQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9d5910-9f5e-446c-8d3c-bc007f2dac24/1/a6MYZZd0KpJs0mUE4e12-FQ_2yY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.194.26.0/23
185.219.218.0/24
185.221.188.0-185.221.190.255
Signature Algorithm: sha256WithRSAEncryption
2a:c0:bd:82:81:50:ef:68:8c:1a:4e:2a:b2:5e:7c:85:25:43:
ab:90:e2:70:df:fd:37:b9:cc:32:bf:09:79:6c:4c:61:a4:4b:
f2:1e:b4:2d:7a:48:cb:41:ee:f4:59:35:e5:a2:7e:ed:0d:58:
80:f5:d6:e4:de:e3:cf:25:a3:12:39:8f:e4:ec:10:91:b6:bd:
55:0a:ba:a9:74:86:c4:83:c3:6b:72:08:7d:05:73:16:1e:cb:
b1:14:d1:8f:47:64:ec:35:d5:9c:57:d8:60:58:dc:2d:f3:8e:
e1:32:8a:2b:c7:3b:b3:32:25:68:bc:ee:ef:e2:cf:71:5c:45:
b7:e3:ef:3d:fb:93:25:39:80:b9:35:84:d4:a3:16:21:a7:8a:
53:1d:89:e9:47:6e:22:50:8d:5d:4c:8e:e1:93:ae:5b:d6:ce:
15:9e:73:11:3b:c0:97:62:a7:da:67:12:ed:23:6b:cd:df:e3:
15:00:c5:68:29:3a:90:39:8a:18:05:a8:12:26:60:aa:03:ed:
1b:e9:70:c9:02:63:7a:6f:03:a6:18:bd:05:96:f8:1d:b6:40:
09:09:a7:7c:33:34:40:33:ab:e4:4a:0a:b8:28:15:af:9d:9e:
d3:84:78:a9:1e:7b:db:f2:3a:2e:4d:42:ab:ac:d7:c5:a8:a1:
80:46:e2:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 20:49:04 2024 by rpki-client on console-ams.rpki-client.org