Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/9f9858-6209-4cf5-b541-a26050ef047e/1/R9gXxxia-Kyo6Lx4zwwcEBIRSjA.roa
File: R9gXxxia-Kyo6Lx4zwwcEBIRSjA.roa (raw, json)
Hash identifier: WDT7vIyGkStdwLTFXtWEG+ywBX0tZfiTjFaUjf7I0jM=
Subject key identifier: 47:D8:17:C7:18:9A:F8:AC:A8:E8:BC:78:CF:0C:1C:10:12:11:4A:30
Certificate issuer: /CN=82e635fecef17109e1ac78b2fb722410d8477a9c
Certificate serial: 018CC726D88C287C06D8B5368717CAEF991F
Authority key identifier: 82:E6:35:FE:CE:F1:71:09:E1:AC:78:B2:FB:72:24:10:D8:47:7A:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/guY1_s7xcQnhrHiy-3IkENhHepw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/9f9858-6209-4cf5-b541-a26050ef047e/1/R9gXxxia-Kyo6Lx4zwwcEBIRSjA.roa
Signing time: Mon 01 Jan 2024 22:31:00 +0000
ROA not before: Mon 01 Jan 2024 22:31:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201873
IP address blocks: 185.142.252.0/22 maxlen: 22
185.143.104.0/22 maxlen: 22
185.61.52.0/22 maxlen: 22
2a02:7820::/32 maxlen: 32
2a07:3200::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/9f9858-6209-4cf5-b541-a26050ef047e/1/guY1_s7xcQnhrHiy-3IkENhHepw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/9f9858-6209-4cf5-b541-a26050ef047e/1/guY1_s7xcQnhrHiy-3IkENhHepw.mft
rsync://rpki.ripe.net/repository/DEFAULT/guY1_s7xcQnhrHiy-3IkENhHepw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 05:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:26:d8:8c:28:7c:06:d8:b5:36:87:17:ca:ef:99:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82e635fecef17109e1ac78b2fb722410d8477a9c
Validity
Not Before: Jan 1 22:31:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=47d817c7189af8aca8e8bc78cf0c1c1012114a30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:7a:1d:95:15:81:98:51:48:dc:8d:21:f5:50:
cc:f4:cf:37:70:66:7d:44:29:73:db:e3:78:98:c2:
66:a0:4b:db:29:e4:dc:66:69:b2:1c:f9:3b:42:0b:
cc:c2:91:8e:86:29:b7:a8:5b:e5:43:0a:1a:7e:3f:
78:5c:0b:0c:45:b1:59:7d:16:e1:08:63:a9:ad:2d:
31:5d:32:59:7b:be:c2:da:a1:9a:5d:1c:68:53:53:
37:a5:37:09:0b:54:3c:11:0d:3d:55:d9:f8:bf:02:
ab:cb:bf:1e:dd:24:95:f0:d2:a5:79:ca:b8:8e:ed:
e7:fb:8f:3f:70:67:81:d7:38:6f:ef:0c:2f:b7:af:
80:7c:81:f0:5a:c4:6b:64:71:ae:ce:c4:6b:1c:63:
7c:a6:f1:f2:34:b2:6d:c2:50:04:ce:a2:0e:37:0f:
e3:94:7f:6c:fc:7d:df:60:53:01:9c:0e:63:22:eb:
72:cf:90:27:01:20:bd:ae:33:62:0f:88:b9:35:cd:
0b:b0:0d:ca:cf:be:4d:71:72:b5:08:b2:f0:4e:dc:
5f:36:2f:20:b1:52:71:79:d8:ee:e4:55:f9:15:ec:
84:74:3a:cd:ed:f1:22:6d:1d:c1:c2:7c:84:eb:e8:
53:89:d4:38:f2:8a:4e:ff:63:8e:9c:8b:28:9b:75:
48:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:D8:17:C7:18:9A:F8:AC:A8:E8:BC:78:CF:0C:1C:10:12:11:4A:30
X509v3 Authority Key Identifier:
keyid:82:E6:35:FE:CE:F1:71:09:E1:AC:78:B2:FB:72:24:10:D8:47:7A:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/guY1_s7xcQnhrHiy-3IkENhHepw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/9f9858-6209-4cf5-b541-a26050ef047e/1/R9gXxxia-Kyo6Lx4zwwcEBIRSjA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/9f9858-6209-4cf5-b541-a26050ef047e/1/guY1_s7xcQnhrHiy-3IkENhHepw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.61.52.0/22
185.142.252.0/22
185.143.104.0/22
IPv6:
2a02:7820::/32
2a07:3200::/29
Signature Algorithm: sha256WithRSAEncryption
7f:96:f8:97:b9:67:89:6d:fa:d2:2a:cb:56:44:ea:95:87:47:
4b:40:e7:83:4b:14:02:b1:f9:87:c1:1d:ec:cf:27:e5:1a:f0:
25:13:e0:92:eb:d1:62:48:43:98:32:b6:61:8c:80:ff:a3:75:
6c:b9:39:08:ba:8d:45:54:72:3a:9e:7b:30:7e:7d:c0:3f:9c:
b4:b2:cd:69:e1:4c:34:cd:94:2d:3e:0a:2b:d8:70:73:6d:ea:
18:f9:74:5c:a9:9e:3e:d8:db:69:17:9c:84:4b:18:25:c6:b9:
9a:0c:57:46:d2:e3:08:17:a1:f7:1f:04:7e:95:30:51:df:ad:
10:af:fc:9c:a4:1a:46:5d:99:37:4d:14:28:5d:ec:72:2b:4e:
fc:09:19:91:a1:19:1d:c0:d8:7d:3b:b7:a3:54:cf:4f:79:24:
87:8a:95:d2:4f:7a:dc:17:01:65:5b:6e:25:22:34:e3:56:d9:
8e:a4:8f:fe:b5:1b:0e:6f:78:1d:e5:78:91:3a:d1:85:2d:27:
a4:d8:3e:be:67:b9:35:1f:8c:a3:19:2e:34:85:09:82:2b:cd:
b2:5d:fb:11:bc:14:73:78:54:6e:28:94:9e:a4:15:19:30:f1:
2a:e5:29:48:67:57:5c:40:7a:d9:24:35:5d:05:37:0c:6a:cc:
b4:fe:93:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 14:21:18 2024 by rpki-client on console-fra.rpki-client.org