Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/86f350-94df-4830-8e9b-fb0443b8d9be/1/4qduOAWoW96_kg3plLt9e5wAbiY.roa
File: 4qduOAWoW96_kg3plLt9e5wAbiY.roa (raw, json)
Hash identifier: S50gGP874zq5DIImG8PfvINmDayNNSsaKoV/Nmjyz/U=
Subject key identifier: E2:A7:6E:38:05:A8:5B:DE:BF:92:0D:E9:94:BB:7D:7B:9C:00:6E:26
Certificate issuer: /CN=ba7966ecfd8bc2d31833f70afba4f7f8a15b24a3
Certificate serial: 018CC493504452A127B859219C2732163067
Authority key identifier: BA:79:66:EC:FD:8B:C2:D3:18:33:F7:0A:FB:A4:F7:F8:A1:5B:24:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/unlm7P2LwtMYM_cK-6T3-KFbJKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/86f350-94df-4830-8e9b-fb0443b8d9be/1/4qduOAWoW96_kg3plLt9e5wAbiY.roa
Signing time: Mon 01 Jan 2024 10:30:37 +0000
ROA not before: Mon 01 Jan 2024 10:30:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 396362
IP address blocks: 185.215.225.0/24 maxlen: 24
185.215.226.0/24 maxlen: 24
2a0b:ae40:6::/48 maxlen: 48
2a0b:ae40:7::/48 maxlen: 48
2a0b:ae40:5::/48 maxlen: 48
2a0b:ae40:8::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/86f350-94df-4830-8e9b-fb0443b8d9be/1/unlm7P2LwtMYM_cK-6T3-KFbJKM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/86f350-94df-4830-8e9b-fb0443b8d9be/1/unlm7P2LwtMYM_cK-6T3-KFbJKM.mft
rsync://rpki.ripe.net/repository/DEFAULT/unlm7P2LwtMYM_cK-6T3-KFbJKM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 May 2024 22:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:50:44:52:a1:27:b8:59:21:9c:27:32:16:30:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba7966ecfd8bc2d31833f70afba4f7f8a15b24a3
Validity
Not Before: Jan 1 10:30:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e2a76e3805a85bdebf920de994bb7d7b9c006e26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:f9:c8:7f:76:d9:39:d6:c3:86:2e:e7:d6:2f:
d1:bc:12:86:5e:5f:60:1d:be:49:c0:f7:d8:8d:e4:
1e:2e:89:8d:80:62:da:9e:a6:85:6d:24:a3:d6:8a:
60:19:47:d0:de:e7:f2:d7:cc:6b:7e:63:4e:6f:5f:
80:19:e7:c0:79:9d:c8:4b:63:84:c2:c0:a3:a5:e2:
a2:fe:15:a7:17:35:22:90:73:b1:e0:b9:4c:3e:99:
76:7f:37:85:bf:d0:36:d9:84:77:71:b5:2f:98:06:
03:76:fc:40:da:89:71:30:e8:34:f6:5e:90:81:89:
a2:df:9d:29:a6:42:2a:d0:b0:c2:8d:cd:40:55:aa:
e3:a7:da:70:73:e9:38:e2:30:c0:44:be:d8:03:76:
08:65:a4:70:08:27:b2:67:32:08:0d:57:f8:ec:4b:
70:64:b3:26:67:4d:3b:d1:7f:b1:dd:bd:42:67:61:
e0:9f:10:3a:69:e6:c0:40:01:0a:8e:b7:38:61:3a:
4a:42:bd:84:f6:d5:90:b3:68:60:e9:33:ae:26:aa:
53:50:02:9b:ad:65:17:ae:8a:9e:66:96:5d:4a:ef:
c5:47:42:23:05:be:76:89:58:32:12:25:97:cc:c6:
0c:d8:3a:75:d4:db:49:d7:17:7c:e1:69:03:c3:49:
dc:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:A7:6E:38:05:A8:5B:DE:BF:92:0D:E9:94:BB:7D:7B:9C:00:6E:26
X509v3 Authority Key Identifier:
keyid:BA:79:66:EC:FD:8B:C2:D3:18:33:F7:0A:FB:A4:F7:F8:A1:5B:24:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/unlm7P2LwtMYM_cK-6T3-KFbJKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/86f350-94df-4830-8e9b-fb0443b8d9be/1/4qduOAWoW96_kg3plLt9e5wAbiY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/86f350-94df-4830-8e9b-fb0443b8d9be/1/unlm7P2LwtMYM_cK-6T3-KFbJKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.215.225.0-185.215.226.255
IPv6:
2a0b:ae40:5::-2a0b:ae40:8:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
26:24:e0:56:af:21:3b:f8:4f:fa:55:23:00:4d:5b:45:dc:48:
0c:f2:c1:10:e9:aa:fd:7d:0e:25:a9:35:7d:28:9d:df:a6:27:
58:79:be:e9:1b:04:c1:58:4b:ad:13:e8:f1:9e:34:0c:c0:28:
be:7e:19:81:6c:8d:a0:89:ee:13:d3:25:1f:7f:ac:7a:ea:2a:
4f:f8:b1:5f:44:07:b5:24:8b:95:48:03:07:f3:23:f1:2d:8a:
07:3d:d8:18:b6:1e:82:41:e5:a8:05:ae:c8:58:61:b8:7c:09:
39:63:0c:b8:b7:6e:50:37:71:cd:d6:7c:01:e1:c0:17:0f:8d:
99:8c:f7:32:f8:39:aa:5f:c2:d1:ca:2a:51:86:88:8c:1d:02:
00:ba:77:4d:0b:84:87:2a:90:be:38:e3:89:2d:06:e8:bb:bb:
e3:1c:a1:8b:09:66:c4:0a:51:97:b4:e5:25:34:9b:a4:87:33:
1d:5a:f4:fb:53:63:c3:3b:c5:3e:a6:60:af:19:e0:4d:9e:fb:
f9:e0:a0:e3:31:e7:ff:0a:26:e5:32:df:46:f6:d0:3c:5e:21:
28:4a:42:33:55:42:6b:21:d9:d2:8f:f0:b6:f9:20:a1:a4:bb:
f9:cc:16:11:9d:3c:8b:6c:ef:3d:c9:44:e9:3a:fb:58:65:c9:
d8:bc:92:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 06:19:08 2024 by rpki-client on console-fra.rpki-client.org