Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/e5124f-1369-4901-9f56-2bb82a837b7b/1/6wWoZs5RLt_I2DhhrLEGczBEMzU.roa
File: 6wWoZs5RLt_I2DhhrLEGczBEMzU.roa (raw, json)
Hash identifier: a9vG/goMYlc30oktf27BvAO4drB2ejkVF+THKX94kk0=
Subject key identifier: EB:05:A8:66:CE:51:2E:DF:C8:D8:38:61:AC:B1:06:73:30:44:33:35
Certificate issuer: /CN=abcdfc1a7c520cf8d17729208e85e8b197c4adff
Certificate serial: 018CC50042B25679F3BC1C97A035B1D06AAB
Authority key identifier: AB:CD:FC:1A:7C:52:0C:F8:D1:77:29:20:8E:85:E8:B1:97:C4:AD:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q838GnxSDPjRdykgjoXosZfErf8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/e5124f-1369-4901-9f56-2bb82a837b7b/1/6wWoZs5RLt_I2DhhrLEGczBEMzU.roa
Signing time: Mon 01 Jan 2024 12:29:37 +0000
ROA not before: Mon 01 Jan 2024 12:29:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 209.127.220.0/24 maxlen: 24
185.44.176.0/24 maxlen: 24
185.44.177.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/e5124f-1369-4901-9f56-2bb82a837b7b/1/q838GnxSDPjRdykgjoXosZfErf8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/e5124f-1369-4901-9f56-2bb82a837b7b/1/q838GnxSDPjRdykgjoXosZfErf8.mft
rsync://rpki.ripe.net/repository/DEFAULT/q838GnxSDPjRdykgjoXosZfErf8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:42:b2:56:79:f3:bc:1c:97:a0:35:b1:d0:6a:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abcdfc1a7c520cf8d17729208e85e8b197c4adff
Validity
Not Before: Jan 1 12:29:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=eb05a866ce512edfc8d83861acb1067330443335
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:99:92:46:7e:b4:2e:b2:0b:ca:9c:56:ef:f3:
38:13:a7:27:e4:b4:40:bc:3d:b4:76:80:9d:9a:81:
ec:ad:73:b1:fb:10:40:0b:6e:72:89:ae:f6:5f:37:
fb:81:87:ba:9c:08:63:57:87:a2:d3:c5:4d:a6:fa:
eb:66:a4:06:22:df:28:70:dd:e3:f6:f5:6e:e6:41:
9e:29:fb:05:09:74:ef:1b:c3:bb:5a:d9:97:2b:db:
c9:b8:f1:aa:61:fe:fe:36:25:6e:bf:24:27:2b:27:
08:f8:82:7d:b1:ba:0a:77:5f:96:78:5c:9a:1a:1d:
ef:4e:d9:c1:44:de:47:82:9b:90:36:d4:d3:87:30:
a2:7c:30:7d:c9:87:22:8d:71:d2:22:73:5f:ab:b9:
1f:8c:d7:20:2d:fc:5f:4d:1d:1c:ae:da:e0:9e:3d:
d1:7a:87:5d:5c:99:71:54:74:1e:9a:75:05:cd:13:
82:b9:b2:66:ca:b8:38:52:10:3f:31:0d:50:54:31:
c8:69:91:ec:32:14:a2:10:43:47:e9:f7:f6:5c:5d:
68:99:4c:62:3c:04:4e:2a:7e:2d:77:06:d7:54:50:
13:df:29:26:ea:6b:ef:22:90:31:d2:b3:4c:6c:8e:
25:fc:c9:7c:bd:87:08:06:08:e5:29:db:e1:1c:35:
37:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:05:A8:66:CE:51:2E:DF:C8:D8:38:61:AC:B1:06:73:30:44:33:35
X509v3 Authority Key Identifier:
keyid:AB:CD:FC:1A:7C:52:0C:F8:D1:77:29:20:8E:85:E8:B1:97:C4:AD:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q838GnxSDPjRdykgjoXosZfErf8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/e5124f-1369-4901-9f56-2bb82a837b7b/1/6wWoZs5RLt_I2DhhrLEGczBEMzU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/e5124f-1369-4901-9f56-2bb82a837b7b/1/q838GnxSDPjRdykgjoXosZfErf8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.44.176.0/23
209.127.220.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:1f:a8:a0:6c:13:a9:79:5c:92:86:fa:ab:bd:3a:ec:24:60:
0c:4e:54:73:04:bb:a9:02:5e:1c:39:5f:e1:ee:1d:af:a3:cb:
7c:03:1c:63:0c:bb:b6:2d:f3:36:75:ea:f7:2d:96:9e:08:b7:
03:1a:3d:24:96:bd:d7:1a:b5:38:be:a2:25:2e:8d:9d:64:b0:
26:b3:9e:7c:ed:f6:2a:0d:91:46:97:af:9c:74:e1:fc:84:95:
d2:2f:0e:b6:d8:8c:f1:e3:77:89:0f:b2:81:bf:d9:26:6b:9b:
0f:f2:44:9c:b0:38:7b:d8:7e:52:dc:a4:19:53:60:0d:3e:a6:
dc:4d:95:56:71:19:bf:b0:82:4c:f7:61:0a:3c:16:ee:21:16:
98:a4:64:47:89:2f:d3:49:17:21:00:d1:74:f7:c1:15:cc:c0:
5c:be:87:02:bd:11:fb:14:f3:ae:c4:b6:75:18:9d:bb:4b:4d:
e9:69:a3:50:e1:76:10:a8:a1:02:e0:d4:43:54:2d:6c:b3:60:
e4:b9:70:2c:7e:08:6e:28:05:73:13:0e:71:e2:77:51:7d:bc:
95:9b:e4:5e:c2:c2:13:4f:fe:5d:34:fd:9d:e1:85:19:c0:0f:
bf:b9:7b:34:56:27:01:fd:7d:72:59:14:23:25:59:1b:67:22:
32:bc:b4:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 16:23:26 2024 by rpki-client on console-fra.rpki-client.org