Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/93620e-7528-4aac-9212-c7857a033962/1/0V79tDwbUbNIRH-XfiKISqqsO78.roa
File: 0V79tDwbUbNIRH-XfiKISqqsO78.roa (raw, json)
Hash identifier: 0naL9uOTVozdGKtxKP3j3i46PAdO+n32jCqeSaXpD48=
Subject key identifier: D1:5E:FD:B4:3C:1B:51:B3:48:44:7F:97:7E:22:88:4A:AA:AC:3B:BF
Certificate issuer: /CN=c3a882b10f1ba9ea4ba1fa7706db64747e62a413
Certificate serial: 018CC42538BEF1ED492A1E7BF5FE01281729
Authority key identifier: C3:A8:82:B1:0F:1B:A9:EA:4B:A1:FA:77:06:DB:64:74:7E:62:A4:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w6iCsQ8bqepLofp3BttkdH5ipBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/93620e-7528-4aac-9212-c7857a033962/1/0V79tDwbUbNIRH-XfiKISqqsO78.roa
Signing time: Mon 01 Jan 2024 08:30:22 +0000
ROA not before: Mon 01 Jan 2024 08:30:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 19905
IP address blocks: 185.220.160.0/22 maxlen: 24
2a0b:f940:1af2::/48 maxlen: 48
2a0b:f940:2af2::/48 maxlen: 48
2a0b:f940:3af2::/48 maxlen: 48
2a0b:f940:4af2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/93620e-7528-4aac-9212-c7857a033962/1/w6iCsQ8bqepLofp3BttkdH5ipBM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/93620e-7528-4aac-9212-c7857a033962/1/w6iCsQ8bqepLofp3BttkdH5ipBM.mft
rsync://rpki.ripe.net/repository/DEFAULT/w6iCsQ8bqepLofp3BttkdH5ipBM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:38:be:f1:ed:49:2a:1e:7b:f5:fe:01:28:17:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3a882b10f1ba9ea4ba1fa7706db64747e62a413
Validity
Not Before: Jan 1 08:30:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d15efdb43c1b51b348447f977e22884aaaac3bbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:19:8c:60:02:48:c0:61:1d:01:0e:59:ae:d2:
e5:61:0e:ef:21:db:5c:b5:ef:57:49:03:4c:0d:41:
cf:1c:cd:a9:a2:ba:06:f6:8b:ae:9b:1c:75:b9:df:
82:e9:36:27:36:c9:23:58:ea:55:3d:e1:ac:5e:69:
b3:39:6d:1b:7f:73:8e:50:f9:60:70:74:96:5a:14:
27:2a:b5:49:8e:9f:59:de:34:fd:7a:4a:d5:ce:b9:
e6:88:9f:72:ee:a4:97:ff:e2:1a:5e:b9:d5:da:09:
99:a1:bb:7d:45:47:1a:6a:ee:8b:e2:23:2c:9b:44:
ab:30:18:6e:a7:01:3f:57:e4:a6:8e:3d:60:3c:cc:
6f:12:d7:7c:1e:0c:0c:c5:b3:27:97:e6:37:0d:20:
62:18:a7:e2:05:90:84:73:4b:43:dc:6f:78:6d:36:
6c:36:46:bf:9a:fb:e1:da:12:3c:b1:73:ef:f5:2b:
ef:62:4a:f7:e4:fc:7e:a9:57:ba:86:0a:c2:fe:c2:
ff:d2:dc:07:44:3a:25:2b:39:d0:87:ab:77:48:fc:
06:4e:be:ac:6f:bd:52:45:07:f5:8c:06:87:c2:9f:
99:e3:17:7d:d1:4c:0c:23:01:ca:22:19:7a:da:dc:
19:10:ec:d3:af:a9:eb:d2:44:ce:eb:19:67:f9:82:
2e:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:5E:FD:B4:3C:1B:51:B3:48:44:7F:97:7E:22:88:4A:AA:AC:3B:BF
X509v3 Authority Key Identifier:
keyid:C3:A8:82:B1:0F:1B:A9:EA:4B:A1:FA:77:06:DB:64:74:7E:62:A4:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w6iCsQ8bqepLofp3BttkdH5ipBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/93620e-7528-4aac-9212-c7857a033962/1/0V79tDwbUbNIRH-XfiKISqqsO78.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/93620e-7528-4aac-9212-c7857a033962/1/w6iCsQ8bqepLofp3BttkdH5ipBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.220.160.0/22
IPv6:
2a0b:f940:1af2::/48
2a0b:f940:2af2::/48
2a0b:f940:3af2::/48
2a0b:f940:4af2::/48
Signature Algorithm: sha256WithRSAEncryption
8f:61:e9:02:90:6b:da:43:2d:3b:b7:47:e4:04:89:2a:b9:c0:
aa:17:f6:5d:3a:bd:92:e5:2c:a1:d7:e1:cf:49:24:80:42:9a:
c3:94:a2:72:7c:11:d0:dd:fd:5f:d9:5a:c5:ba:15:aa:c1:31:
cf:2b:21:88:75:d7:5f:f0:a3:9b:5a:4c:84:d9:2b:93:f9:8c:
8d:59:7b:39:22:6b:d2:67:4d:65:aa:40:71:ac:af:c7:66:11:
a9:b3:38:08:40:5f:d7:8c:e1:1d:69:d9:b4:19:9c:09:4e:68:
ec:4c:e5:7f:86:1c:b6:8a:ea:ea:ee:23:c3:82:e2:bc:cc:e9:
41:c8:24:cd:a7:64:23:6c:00:2e:4f:54:95:e9:42:c8:fd:32:
3f:48:d7:0a:53:db:12:7e:93:20:dc:1b:37:b1:c6:1c:59:4f:
8d:74:ba:ab:a1:e3:1b:5e:fd:9b:e6:b8:9b:67:3a:a6:de:1d:
89:30:89:59:80:a9:0d:e6:c2:6c:f2:61:2e:7c:a5:d4:3c:43:
af:1e:eb:9e:62:ff:34:6d:e0:50:c9:fe:0e:25:21:92:3d:a8:
f2:8a:5e:22:f6:8d:2b:09:f0:ee:8c:9d:3a:02:03:c0:3c:9f:
a5:1d:5b:2c:95:27:f4:28:32:0b:34:59:dc:2c:dc:2b:a2:95:
3c:f5:a0:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:07:34 2024 by rpki-client on console-ams.rpki-client.org