Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/83dGPuiVPDADeFAq2YH9dTTedjs.roa
File: 83dGPuiVPDADeFAq2YH9dTTedjs.roa (raw, json)
Hash identifier: RW7GdEIgwJt4li3TC2xJxYHGqCt6sXJcEEn1pvAABm0=
Subject key identifier: F3:77:46:3E:E8:95:3C:30:03:78:50:2A:D9:81:FD:75:34:DE:76:3B
Certificate issuer: /CN=a6785773df313b91711bf6bc5b149ecc246b9e89
Certificate serial: 018CC72692888EA5632DDCED131B3F17FC56
Authority key identifier: A6:78:57:73:DF:31:3B:91:71:1B:F6:BC:5B:14:9E:CC:24:6B:9E:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pnhXc98xO5FxG_a8WxSezCRrnok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/83dGPuiVPDADeFAq2YH9dTTedjs.roa
Signing time: Mon 01 Jan 2024 22:30:42 +0000
ROA not before: Mon 01 Jan 2024 22:30:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204798
IP address blocks: 185.239.178.0/24 maxlen: 24
185.239.177.0/24 maxlen: 24
185.239.179.0/24 maxlen: 24
185.239.176.0/24 maxlen: 24
2a0f:c9c0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/pnhXc98xO5FxG_a8WxSezCRrnok.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/pnhXc98xO5FxG_a8WxSezCRrnok.mft
rsync://rpki.ripe.net/repository/DEFAULT/pnhXc98xO5FxG_a8WxSezCRrnok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:26:92:88:8e:a5:63:2d:dc:ed:13:1b:3f:17:fc:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6785773df313b91711bf6bc5b149ecc246b9e89
Validity
Not Before: Jan 1 22:30:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f377463ee8953c300378502ad981fd7534de763b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:c3:53:3b:6c:c8:d4:6e:9e:07:be:ea:3b:96:
06:cb:c3:3b:1d:30:74:b0:49:e0:6a:0e:8a:ce:4c:
0b:b5:17:ab:4d:43:93:fd:5e:c1:08:50:0c:f7:06:
74:b6:a8:d2:61:9c:74:34:de:fd:7e:fa:bc:c4:3a:
4d:f9:b8:c9:62:00:e7:0a:eb:aa:13:fe:a6:87:67:
85:b1:52:a9:3d:8b:2e:0d:30:19:2c:2f:3f:9d:6e:
cd:99:72:10:e6:1c:26:7a:39:6c:c2:b6:3a:22:a3:
d4:cc:5f:56:af:38:bf:83:d4:ad:9a:87:58:eb:97:
dc:87:48:a8:b7:26:04:36:c0:81:79:49:f4:d5:54:
84:51:6f:a0:ad:77:dd:8f:7b:9d:d7:69:07:16:71:
da:6c:4b:f1:7f:d2:06:f8:6a:e0:7d:92:70:d3:fb:
01:25:87:1a:66:60:98:ed:2c:87:c5:de:41:f7:91:
49:6e:42:53:56:c1:3b:19:d3:8c:8c:7e:fb:f5:1d:
3c:a1:1b:9b:a2:71:7b:26:f7:c7:4b:8e:2f:90:8b:
96:72:4c:00:ab:e0:bf:a8:53:68:70:44:d1:7c:7b:
99:ba:90:90:1c:1f:2a:79:7e:1e:78:53:32:2a:71:
66:56:bc:30:77:32:f6:14:4f:65:98:32:55:ac:ec:
3c:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:77:46:3E:E8:95:3C:30:03:78:50:2A:D9:81:FD:75:34:DE:76:3B
X509v3 Authority Key Identifier:
keyid:A6:78:57:73:DF:31:3B:91:71:1B:F6:BC:5B:14:9E:CC:24:6B:9E:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pnhXc98xO5FxG_a8WxSezCRrnok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/83dGPuiVPDADeFAq2YH9dTTedjs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/pnhXc98xO5FxG_a8WxSezCRrnok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.239.176.0/22
IPv6:
2a0f:c9c0::/29
Signature Algorithm: sha256WithRSAEncryption
44:e2:f0:fa:17:c0:9a:0a:c4:8e:a9:28:64:d7:e0:ed:0a:cb:
72:f3:b8:fb:91:75:26:4c:9b:3a:5e:15:9a:6e:14:76:1b:cf:
ff:56:93:c2:cb:23:aa:cd:5c:70:0b:d8:85:e7:fd:17:ea:57:
81:19:6f:c4:31:7d:29:ce:48:0a:ab:54:0a:d5:a2:22:ff:b9:
1a:a9:cd:b8:9b:78:f1:35:b9:59:f8:57:19:6e:03:bc:5d:b6:
58:42:8a:90:4f:f5:ee:40:3d:1a:90:1c:e1:81:7c:f1:1e:de:
ca:ca:82:fb:97:aa:52:99:03:d4:89:a9:d1:42:0a:57:43:89:
1a:50:b7:4f:a8:a7:1c:77:6e:4f:80:ab:ea:8a:41:9b:7d:7b:
ca:89:8f:77:93:2f:d6:33:14:df:f3:12:1d:b0:63:eb:aa:85:
c9:9c:aa:ec:c2:da:95:6c:12:01:85:93:04:9b:3d:dc:69:8b:
89:06:c6:1e:79:fc:4a:df:a8:22:18:73:66:41:08:95:87:86:
0f:12:7f:83:e4:bd:93:7e:aa:95:a9:95:64:fe:16:8c:3f:91:
60:6a:09:51:1b:a9:b8:3f:b0:d3:2c:9c:f1:5e:a7:3e:fc:ce:
f6:7c:0a:db:36:a1:9d:ba:1d:e7:5c:0d:f3:86:d0:76:82:41:
6b:23:32:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 07:20:26 2024 by rpki-client on console-ams.rpki-client.org