Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/faf1e3-3bbd-4788-bdf4-1c86e7d0f784/1/cCDIA0hvoNnvM7nhEaL_YL1Y8GI.roa
File: cCDIA0hvoNnvM7nhEaL_YL1Y8GI.roa (raw, json)
Hash identifier: Qb6usvaUuukVhfy2IzjKZ83CSrCe4qD/on0XiK4WY3M=
Subject key identifier: 70:20:C8:03:48:6F:A0:D9:EF:33:B9:E1:11:A2:FF:60:BD:58:F0:62
Certificate issuer: /CN=cda88e9b7ab5e321b1b3f957a9ba1976dd425bc3
Certificate serial: 019290ABD0EB6A2F360874E2E938DEA63179
Authority key identifier: CD:A8:8E:9B:7A:B5:E3:21:B1:B3:F9:57:A9:BA:19:76:DD:42:5B:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaiOm3q14yGxs_lXqboZdt1CW8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/faf1e3-3bbd-4788-bdf4-1c86e7d0f784/1/cCDIA0hvoNnvM7nhEaL_YL1Y8GI.roa
Signing time: Tue 15 Oct 2024 14:53:51 +0000
ROA not before: Tue 15 Oct 2024 14:53:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206476
IP address blocks: 185.137.224.0/22 maxlen: 24
185.255.184.0/22 maxlen: 24
194.113.88.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/faf1e3-3bbd-4788-bdf4-1c86e7d0f784/1/zaiOm3q14yGxs_lXqboZdt1CW8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/faf1e3-3bbd-4788-bdf4-1c86e7d0f784/1/zaiOm3q14yGxs_lXqboZdt1CW8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/zaiOm3q14yGxs_lXqboZdt1CW8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:90:ab:d0:eb:6a:2f:36:08:74:e2:e9:38:de:a6:31:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cda88e9b7ab5e321b1b3f957a9ba1976dd425bc3
Validity
Not Before: Oct 15 14:53:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7020c803486fa0d9ef33b9e111a2ff60bd58f062
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:0e:5e:fe:2d:ca:7e:91:96:7f:c3:08:c5:6b:
af:d1:5b:2b:7d:71:1e:19:7f:da:61:27:59:b7:81:
2e:7e:d4:34:31:37:4d:36:71:fb:ac:ec:74:3e:46:
a4:f1:8b:a4:67:46:e2:b2:a7:4c:bb:e6:7f:d7:d7:
13:a2:e0:d8:58:1f:11:8f:e2:54:05:3e:b4:e1:b5:
97:16:a5:7d:e9:3a:0b:58:82:20:26:13:29:0a:54:
21:ab:0f:41:c2:63:99:f8:a0:e8:01:22:6f:9a:2d:
78:41:20:27:23:95:e1:a5:2d:9b:19:87:bd:23:c4:
f3:d2:28:a5:db:8a:50:6c:09:5b:33:9b:46:2a:da:
10:7d:c6:cf:67:31:e9:31:72:f9:6d:a0:fe:f9:cd:
d6:d4:27:6c:bc:07:89:50:22:cb:48:bb:bd:16:97:
17:1c:9d:f9:44:82:56:9e:43:f7:0a:11:6e:b2:2e:
af:23:f2:91:54:79:80:53:2a:72:86:85:20:e7:de:
8c:d2:aa:2a:1c:93:1d:1e:ca:14:07:8a:3c:9e:2a:
ad:b0:78:9d:7c:5c:16:76:ff:fd:6b:d3:d8:53:e3:
1a:5b:a3:67:d8:ce:95:27:a0:e5:66:b7:3e:86:df:
1d:a2:48:a7:22:79:de:29:e5:b3:4f:7d:2f:97:ff:
c9:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:20:C8:03:48:6F:A0:D9:EF:33:B9:E1:11:A2:FF:60:BD:58:F0:62
X509v3 Authority Key Identifier:
keyid:CD:A8:8E:9B:7A:B5:E3:21:B1:B3:F9:57:A9:BA:19:76:DD:42:5B:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaiOm3q14yGxs_lXqboZdt1CW8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/faf1e3-3bbd-4788-bdf4-1c86e7d0f784/1/cCDIA0hvoNnvM7nhEaL_YL1Y8GI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/faf1e3-3bbd-4788-bdf4-1c86e7d0f784/1/zaiOm3q14yGxs_lXqboZdt1CW8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.137.224.0/22
185.255.184.0/22
194.113.88.0/22
Signature Algorithm: sha256WithRSAEncryption
6d:c5:42:a7:e8:94:a3:24:f9:21:f5:01:55:e7:ee:b2:de:f1:
88:9a:cf:c7:f6:76:70:0e:32:2c:2b:ae:94:6c:92:5e:a0:e4:
73:ea:00:06:68:da:f5:9a:f4:74:bf:33:28:97:26:30:94:00:
8f:35:3a:cb:9e:84:cd:ec:74:e9:9e:f8:5e:65:7c:7a:64:18:
28:6b:86:f4:b2:eb:d7:53:1e:a9:a4:dc:01:0b:88:b5:26:18:
a2:56:68:bd:5a:11:01:fa:c0:74:9c:d9:0e:e6:de:28:85:34:
0d:63:9d:71:ad:69:e0:ab:ff:30:21:c9:65:00:d1:62:cb:ba:
b2:07:d5:ca:da:62:be:e9:28:bf:1c:0c:92:07:d5:ed:83:1d:
0b:6b:54:c9:42:1e:1e:30:be:fa:cf:be:ca:3b:ca:fc:e7:eb:
11:ba:9b:f2:cf:6f:7c:34:60:2d:39:16:09:77:1a:3d:76:a9:
7d:64:66:d4:80:66:84:bd:84:dd:b1:a1:2a:89:d8:f5:fb:ec:
f5:d9:44:d2:0d:f8:7e:0b:46:73:8e:b2:1a:8d:88:7d:c4:d5:
54:b6:96:98:82:b9:df:d2:2b:62:56:60:5e:09:9b:e9:7b:aa:
ea:c6:4a:8d:1f:a9:04:96:e0:9f:a4:d7:fd:ae:d4:77:41:11:
72:6a:ef:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 21:15:40 2024 by rpki-client on console-fra.rpki-client.org