Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/yZHIdZfFuaVCulfq88wbMbXMCSw.roa
File: yZHIdZfFuaVCulfq88wbMbXMCSw.roa (raw, json)
Hash identifier: Q5ukTJik/08YFPQ8SCymMlZaZ/6hEU3+CPemiOMbPUE=
Subject key identifier: C9:91:C8:75:97:C5:B9:A5:42:BA:57:EA:F3:CC:1B:31:B5:CC:09:2C
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 018CC501184F5A8AC6305932AB337496F92A
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/yZHIdZfFuaVCulfq88wbMbXMCSw.roa
Signing time: Mon 01 Jan 2024 12:30:32 +0000
ROA not before: Mon 01 Jan 2024 12:30:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58073
IP address blocks: 188.215.229.0/24 maxlen: 24
185.214.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:18:4f:5a:8a:c6:30:59:32:ab:33:74:96:f9:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jan 1 12:30:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c991c87597c5b9a542ba57eaf3cc1b31b5cc092c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:3a:fd:8f:db:57:11:a7:14:8f:2e:d8:71:8b:
20:c7:45:9a:38:ef:ed:94:8b:cf:9b:d7:e1:30:8d:
a4:d9:69:6b:b2:e7:94:ba:73:cd:a4:40:2d:dc:f7:
af:69:7d:22:08:5e:11:83:8c:22:4c:0d:35:f9:7b:
1d:1b:10:0c:10:58:09:33:21:5d:8e:f5:b0:65:28:
cd:63:78:a5:86:c0:41:92:22:8c:5b:70:31:4f:ae:
95:81:40:93:73:ba:e0:fb:65:e5:ca:92:7d:43:93:
5d:2e:0f:65:63:1a:c7:91:ca:f4:de:8c:57:75:92:
a6:b0:63:15:d4:fd:10:d4:ab:ec:c7:7d:ba:2b:ed:
6c:2e:2c:26:b2:3f:ef:20:29:34:42:73:04:d4:15:
74:09:3d:00:6a:87:d4:31:53:78:48:1b:d1:00:ff:
c5:4e:44:c5:46:64:a0:1b:83:5f:6e:9f:57:6e:ed:
a2:39:8a:69:b9:56:e9:37:36:dd:6e:ab:2e:58:85:
08:05:0e:5a:7e:93:7c:a2:ca:44:be:f4:bf:85:f1:
5c:47:7d:bc:14:a3:09:b1:8f:e3:b5:cc:31:5f:e3:
35:d9:7a:05:f7:a4:a2:e9:9f:41:d1:04:b8:e3:c5:
9f:26:07:05:d2:b8:96:2b:aa:65:71:cd:a2:47:7e:
e9:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:91:C8:75:97:C5:B9:A5:42:BA:57:EA:F3:CC:1B:31:B5:CC:09:2C
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/yZHIdZfFuaVCulfq88wbMbXMCSw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.214.10.0/24
188.215.229.0/24
Signature Algorithm: sha256WithRSAEncryption
37:bb:c4:d2:f2:b5:fb:8f:e6:a1:b4:b2:8f:08:5d:38:f5:16:
76:42:bd:e1:5d:15:82:8f:d9:e2:aa:93:4f:2b:65:2c:99:4d:
7a:5b:c0:38:77:7e:7c:e5:5f:13:70:61:7e:1a:86:de:0d:1f:
c1:31:c1:02:5b:f2:74:d8:29:82:fc:b3:83:e8:82:f8:10:ed:
2d:19:01:1b:50:f1:66:ce:c7:08:71:02:66:73:7a:55:dd:f6:
d3:d9:1b:42:96:23:cf:2d:bb:a7:11:a7:8f:42:57:c9:f0:81:
3e:01:71:f4:f1:9c:18:e6:49:8d:cf:64:d3:e8:f1:0c:d6:c8:
b5:91:e4:e9:28:8a:c2:7b:34:88:a2:b9:9b:ab:e9:42:b3:c6:
14:5a:ca:78:72:98:40:04:e5:43:ef:07:f2:12:ba:cc:0e:80:
13:de:04:f5:91:7e:a9:a0:9f:07:5b:70:b7:14:1d:e0:33:b5:
2c:9f:26:18:c1:83:4b:7a:b5:99:66:d8:66:5a:de:48:b0:22:
7c:04:f3:ff:cc:6f:53:3c:a3:ef:a4:dd:02:3b:53:fa:e2:55:
74:1f:a2:39:30:9f:e0:f4:41:9e:a8:8b:87:fa:0f:a4:4e:5d:
4c:99:2c:2a:ed:af:c5:a8:89:26:b0:58:e5:84:cb:60:c7:76:
f0:22:39:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:08:05 2024 by rpki-client on console-fra.rpki-client.org