Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/1d57dd-5599-45a7-ab03-4d6ce0766eb5/1/8JK4tuEXHzoc5qd3ew80K0KeYdc.roa
File: 8JK4tuEXHzoc5qd3ew80K0KeYdc.roa (raw, json)
Hash identifier: KoZpJVw2brS4DUMQXJtko3tLkXHK9G80pS9g+fw7GQ4=
Subject key identifier: F0:92:B8:B6:E1:17:1F:3A:1C:E6:A7:77:7B:0F:34:2B:42:9E:61:D7
Certificate issuer: /CN=6dc0d05f8ee9e958fc95de65dc59a2141c5f1efd
Certificate serial: 018CCA2A6DD1C0AA40CA538D518E817547E3
Authority key identifier: 6D:C0:D0:5F:8E:E9:E9:58:FC:95:DE:65:DC:59:A2:14:1C:5F:1E:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bcDQX47p6Vj8ld5l3FmiFBxfHv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/1d57dd-5599-45a7-ab03-4d6ce0766eb5/1/8JK4tuEXHzoc5qd3ew80K0KeYdc.roa
Signing time: Tue 02 Jan 2024 12:33:47 +0000
ROA not before: Tue 02 Jan 2024 12:33:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59796
IP address blocks: 185.121.240.0/24 maxlen: 24
185.121.240.0/22 maxlen: 22
185.121.243.0/24 maxlen: 24
185.121.241.0/24 maxlen: 24
185.121.242.0/24 maxlen: 24
185.71.64.0/22 maxlen: 22
185.71.64.0/24 maxlen: 24
185.71.67.0/24 maxlen: 24
185.71.65.0/24 maxlen: 24
185.71.66.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/1d57dd-5599-45a7-ab03-4d6ce0766eb5/1/bcDQX47p6Vj8ld5l3FmiFBxfHv0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/1d57dd-5599-45a7-ab03-4d6ce0766eb5/1/bcDQX47p6Vj8ld5l3FmiFBxfHv0.mft
rsync://rpki.ripe.net/repository/DEFAULT/bcDQX47p6Vj8ld5l3FmiFBxfHv0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:6d:d1:c0:aa:40:ca:53:8d:51:8e:81:75:47:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dc0d05f8ee9e958fc95de65dc59a2141c5f1efd
Validity
Not Before: Jan 2 12:33:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f092b8b6e1171f3a1ce6a7777b0f342b429e61d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:0a:3b:cf:80:e9:5e:b2:42:57:7f:9a:a1:11:
0c:53:e6:6d:4c:16:59:d7:3a:77:cb:a5:5e:9d:e4:
e9:91:cf:32:89:14:f0:bc:fb:cd:a3:e5:56:4c:f3:
f6:e9:f8:91:7e:52:07:fd:98:cf:52:9e:54:83:22:
9f:30:96:0e:71:78:3b:5d:8b:2c:f1:c7:67:da:c8:
89:4c:34:95:f5:50:2a:53:2b:1d:9e:3f:1c:a8:79:
dc:72:9c:d9:b6:cd:7c:22:dd:5e:7d:da:e8:db:39:
43:a7:ea:e7:0b:2c:66:a9:bb:6f:f0:ba:87:c4:7e:
b8:b3:a4:37:c3:d5:6f:39:00:2f:35:94:25:89:74:
03:09:f9:d7:a1:ca:a0:7d:c0:b3:1b:40:ca:9f:e2:
f0:d1:bf:13:24:d8:a1:f1:14:2d:89:4f:1b:b9:c2:
0a:85:6b:fe:7a:5c:23:ae:a7:8d:cd:5f:7b:79:70:
b9:cd:54:f3:3f:9e:a2:96:21:63:ee:4c:75:5a:96:
a5:c9:24:11:28:75:c5:89:f0:a8:a1:86:87:bb:9b:
f7:48:b3:93:90:98:f6:36:bb:b5:d1:29:eb:25:48:
1c:14:8f:ba:b8:90:c5:85:83:fe:94:75:be:9d:97:
3c:ab:2a:5c:04:3a:1f:f0:dc:0a:34:2f:15:7f:5d:
e0:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:92:B8:B6:E1:17:1F:3A:1C:E6:A7:77:7B:0F:34:2B:42:9E:61:D7
X509v3 Authority Key Identifier:
keyid:6D:C0:D0:5F:8E:E9:E9:58:FC:95:DE:65:DC:59:A2:14:1C:5F:1E:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bcDQX47p6Vj8ld5l3FmiFBxfHv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/1d57dd-5599-45a7-ab03-4d6ce0766eb5/1/8JK4tuEXHzoc5qd3ew80K0KeYdc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/1d57dd-5599-45a7-ab03-4d6ce0766eb5/1/bcDQX47p6Vj8ld5l3FmiFBxfHv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.71.64.0/22
185.121.240.0/22
Signature Algorithm: sha256WithRSAEncryption
09:4b:f6:ae:b7:d4:18:b5:9e:7c:65:c2:12:6c:c4:f3:01:9c:
8c:b4:a0:f7:c9:0d:f3:bc:15:e6:da:bb:38:18:46:a4:b4:16:
30:2b:f8:0b:03:4d:4d:10:89:b3:ae:9a:11:03:11:0b:70:a5:
cf:c6:cd:0c:57:43:81:a5:68:7a:7d:a3:6b:89:b4:56:df:74:
48:28:f2:8a:9a:cc:c3:4d:25:4e:3b:7e:31:5d:aa:e2:7f:8c:
f9:63:d5:5a:c7:f1:19:b0:e3:d8:4a:b8:40:03:1c:57:c0:8a:
41:8a:62:08:e6:22:74:21:42:3e:71:eb:4b:1d:84:91:fe:89:
44:ab:de:30:ed:9f:5e:c5:59:5b:98:95:31:49:5f:26:ae:97:
f7:79:98:b0:c1:37:c3:14:af:5a:27:38:95:ff:d0:d8:be:6a:
b9:83:b9:5c:61:32:58:67:67:7a:42:8f:4e:6d:41:bf:a1:3a:
16:c1:86:61:f1:99:61:97:74:d7:9b:78:cd:3e:d8:f8:38:20:
cb:f9:9b:ec:50:c2:df:2b:c4:47:15:0b:fb:3e:94:df:54:2a:
71:b1:49:f5:6b:84:d8:07:a0:60:27:18:cb:d8:7c:5f:44:38:
16:40:dc:f5:dc:c7:a1:52:30:e7:bc:17:f1:f5:6b:2b:15:9a:
30:4a:f9:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 23:36:05 2024 by rpki-client on console-fra.rpki-client.org