Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/w9rdqWNlvGTJoFcY7uWtD_NAReo.roa
File: w9rdqWNlvGTJoFcY7uWtD_NAReo.roa (raw, json)
Hash identifier: LtQKi+RfuURNtP6WNT22UHelD96t1xeYOnjEKOGUy4o=
Subject key identifier: C3:DA:DD:A9:63:65:BC:64:C9:A0:57:18:EE:E5:AD:0F:F3:40:45:EA
Certificate issuer: /CN=0c90c356e2864f43894857443555d8b5c0352819
Certificate serial: 018CC802464CC2D14699DF4C1FFA8839973F
Authority key identifier: 0C:90:C3:56:E2:86:4F:43:89:48:57:44:35:55:D8:B5:C0:35:28:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/w9rdqWNlvGTJoFcY7uWtD_NAReo.roa
Signing time: Tue 02 Jan 2024 02:30:41 +0000
ROA not before: Tue 02 Jan 2024 02:30:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197834
IP address blocks: 185.13.196.0/22 maxlen: 24
176.32.192.0/21 maxlen: 21
176.32.192.0/23 maxlen: 24
176.32.194.0/23 maxlen: 24
176.32.198.0/23 maxlen: 24
176.32.196.0/23 maxlen: 24
176.32.192.236/32 maxlen: 32
109.75.32.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 May 2024 23:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:02:46:4c:c2:d1:46:99:df:4c:1f:fa:88:39:97:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c90c356e2864f43894857443555d8b5c0352819
Validity
Not Before: Jan 2 02:30:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c3dadda96365bc64c9a05718eee5ad0ff34045ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:08:55:4f:ec:e9:30:d8:0a:e1:e6:a0:a0:13:
47:b5:7b:da:45:af:37:63:92:ff:6b:5c:d5:a6:c6:
2c:ba:70:32:19:5e:5c:b4:f8:61:57:66:6d:ee:4b:
dc:ca:5f:a0:d4:94:2e:ba:f8:e8:cf:a9:07:e0:c8:
87:9f:7d:21:4b:ba:b8:0f:2a:5b:56:a0:a0:11:58:
0f:38:4a:86:cd:ce:64:00:de:70:19:35:07:c0:36:
41:44:b5:b2:39:2b:b5:5b:4f:55:b9:d1:14:00:b9:
42:c7:ee:8b:c8:c5:aa:a2:08:02:47:df:e3:3d:70:
41:84:f2:40:e5:68:73:11:ee:7f:89:65:14:e0:5f:
9a:36:04:7e:27:7e:d1:ce:e8:62:1b:12:a0:95:4e:
a7:25:ee:ec:1e:ba:09:5e:7a:84:19:ce:37:22:90:
a1:3f:2a:0d:82:bc:04:74:64:a2:8e:e3:a0:14:7b:
7e:aa:cd:73:cd:78:40:3e:e2:9c:96:83:85:73:c4:
4a:f4:c5:9f:4d:17:01:87:6b:ae:c9:bc:ee:d5:d4:
f2:5c:8a:26:80:e7:1b:c6:31:a2:bc:68:5b:d5:6b:
32:6e:16:e7:fe:d5:f4:b9:d6:80:54:38:9c:40:f8:
63:db:eb:75:df:3b:d1:3d:d5:7b:af:05:27:05:4c:
50:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:DA:DD:A9:63:65:BC:64:C9:A0:57:18:EE:E5:AD:0F:F3:40:45:EA
X509v3 Authority Key Identifier:
keyid:0C:90:C3:56:E2:86:4F:43:89:48:57:44:35:55:D8:B5:C0:35:28:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/w9rdqWNlvGTJoFcY7uWtD_NAReo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.75.32.0/23
176.32.192.0/21
185.13.196.0/22
Signature Algorithm: sha256WithRSAEncryption
40:c3:e7:ab:c4:76:00:53:fa:27:4b:a2:5a:81:0c:39:ec:53:
d4:1d:fa:17:99:44:7f:61:67:41:c4:32:f8:16:78:0b:6d:25:
d2:92:b3:5d:33:93:b7:94:57:76:e0:c8:b7:d0:ab:e3:29:25:
29:2c:d1:aa:47:a6:24:82:41:dc:a6:38:65:6d:1b:f2:28:01:
27:0d:c9:1e:23:2a:58:ea:a7:00:af:8d:70:b6:b6:6d:61:af:
1c:28:c8:d6:db:d4:23:55:76:79:ff:ed:99:75:01:d4:88:50:
ea:e8:ce:e5:fd:e2:3b:2a:54:0d:7b:22:c8:f2:ad:01:c1:75:
38:f2:6c:38:cc:31:0f:05:52:d0:8e:8f:df:03:fb:84:64:43:
3b:c4:10:f6:38:08:e8:74:20:ce:82:4b:8f:57:c2:d7:52:2f:
7d:33:8f:92:0c:b2:52:84:8b:42:5b:fa:29:c6:70:04:f5:0a:
24:43:78:a7:24:1a:41:e5:e4:95:8d:46:ce:55:10:8f:f5:fd:
79:06:5c:b6:75:c0:24:1b:4e:dc:20:3e:77:99:4d:25:d3:3d:
f5:46:46:2d:5c:50:dc:32:1a:9b:82:d2:bf:25:1c:93:a6:c1:
9a:12:8d:0f:dc:1f:d5:8f:42:a7:7c:1c:44:c5:af:49:48:fa:
9c:2c:e2:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 06:49:42 2024 by rpki-client on console-fra.rpki-client.org