Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/6bcac1-e30f-4ba7-a74e-741d55c99802/1/8VVJoWARvHNZx02MlhauYdlcGGw.roa
File: 8VVJoWARvHNZx02MlhauYdlcGGw.roa (raw, json)
Hash identifier: X55xAP4iFJAtnZIWj1NcNVcXja3Q9mdDO8mPT5hr4x4=
Subject key identifier: F1:55:49:A1:60:11:BC:73:59:C7:4D:8C:96:16:AE:61:D9:5C:18:6C
Certificate issuer: /CN=cc13be84718f551c241477f22a041c734eb97dc5
Certificate serial: 018F1F6384FA0E54BB0D2251D833127A3B4E
Authority key identifier: CC:13:BE:84:71:8F:55:1C:24:14:77:F2:2A:04:1C:73:4E:B9:7D:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zBO-hHGPVRwkFHfyKgQcc065fcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/6bcac1-e30f-4ba7-a74e-741d55c99802/1/8VVJoWARvHNZx02MlhauYdlcGGw.roa
Signing time: Sat 27 Apr 2024 11:49:26 +0000
ROA not before: Sat 27 Apr 2024 11:49:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199274
IP address blocks: 91.239.26.0/23 maxlen: 24
176.112.192.0/19 maxlen: 24
185.22.60.0/22 maxlen: 24
194.177.20.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/6bcac1-e30f-4ba7-a74e-741d55c99802/1/zBO-hHGPVRwkFHfyKgQcc065fcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/6bcac1-e30f-4ba7-a74e-741d55c99802/1/zBO-hHGPVRwkFHfyKgQcc065fcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/zBO-hHGPVRwkFHfyKgQcc065fcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:1f:63:84:fa:0e:54:bb:0d:22:51:d8:33:12:7a:3b:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc13be84718f551c241477f22a041c734eb97dc5
Validity
Not Before: Apr 27 11:49:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f15549a16011bc7359c74d8c9616ae61d95c186c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:29:d2:a6:29:0d:94:17:71:08:36:37:39:19:
e3:4f:fc:63:f3:9b:f6:47:00:de:e2:3b:76:b5:af:
d8:c1:44:b5:b1:57:d5:e7:a7:f4:ae:cf:44:c5:56:
7a:73:70:a9:36:10:9a:8d:ba:00:e1:c6:49:26:7c:
90:2c:a6:9b:15:a7:f8:73:fc:4e:04:bf:3d:db:3c:
df:c1:e1:25:cd:c3:49:2e:43:a5:75:9c:d8:bd:30:
66:7f:28:82:ac:d1:7b:45:0a:1d:d5:e9:83:04:71:
8c:d8:9a:b1:ef:e0:c7:4b:b8:39:9e:78:ed:0e:07:
1f:08:02:40:a0:5a:84:3b:7e:f7:25:27:f9:00:ee:
fa:9c:83:53:26:19:b8:9a:4f:3d:8d:df:31:e1:aa:
b2:31:55:e2:a0:73:0f:9e:8e:4d:bc:65:fe:5d:ac:
b3:35:fe:64:45:9e:73:62:bc:ed:1a:00:23:94:86:
c7:47:40:19:ae:01:dc:41:16:c0:6e:3c:0f:c8:05:
2b:75:eb:6a:cb:92:ad:12:dc:a2:40:05:b1:5d:f3:
e3:43:d0:19:29:70:6c:f2:ba:98:b3:35:06:6c:3a:
98:58:fc:cc:94:14:9d:7d:e8:9b:57:1a:7c:bc:7b:
87:7f:74:ad:d5:4a:f7:30:ee:a6:76:5b:1c:c4:b6:
a7:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:55:49:A1:60:11:BC:73:59:C7:4D:8C:96:16:AE:61:D9:5C:18:6C
X509v3 Authority Key Identifier:
keyid:CC:13:BE:84:71:8F:55:1C:24:14:77:F2:2A:04:1C:73:4E:B9:7D:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zBO-hHGPVRwkFHfyKgQcc065fcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/6bcac1-e30f-4ba7-a74e-741d55c99802/1/8VVJoWARvHNZx02MlhauYdlcGGw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/6bcac1-e30f-4ba7-a74e-741d55c99802/1/zBO-hHGPVRwkFHfyKgQcc065fcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.239.26.0/23
176.112.192.0/19
185.22.60.0/22
194.177.20.0/22
Signature Algorithm: sha256WithRSAEncryption
50:e3:d5:89:59:ed:74:ba:6f:f6:94:1f:d0:f2:37:98:f5:ff:
02:c3:ac:c1:d6:70:38:cb:3b:75:0e:17:e3:e6:9b:6f:bc:e5:
4e:eb:01:6c:53:e8:fc:a2:57:11:4e:b9:02:03:32:4e:61:77:
4b:8c:76:34:01:08:04:d6:4f:e6:d7:9f:e5:6a:22:5d:b3:2f:
22:39:24:be:0e:c5:73:2d:f8:39:d8:cf:d2:6c:f6:9e:e0:59:
0f:d8:38:1d:5c:67:17:96:1f:bb:d4:ed:93:81:9a:2b:46:be:
a7:90:2c:83:ab:83:b1:ef:c2:cb:f9:aa:3e:52:c0:b8:9a:f5:
08:aa:68:a6:6d:bb:f4:0d:02:77:53:d8:3d:18:7b:45:5f:99:
16:61:10:17:36:57:12:73:c9:28:0b:c2:e2:9c:8e:c3:b9:6f:
f4:82:82:49:d3:40:72:c9:f9:98:29:07:5f:33:e0:8d:9c:c6:
9f:61:7f:78:62:d7:21:0f:37:6a:83:b9:56:57:da:ea:5b:e5:
fe:c3:ba:16:28:4b:6e:e9:37:d6:dd:78:54:b3:15:7d:ce:7e:
11:b0:15:f4:01:30:22:ad:2d:60:f6:32:ee:48:58:27:08:03:
05:87:34:f1:11:60:a5:5b:48:e2:a8:42:df:de:09:f9:ba:75:
8d:4c:e8:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 09:33:08 2024 by rpki-client on console-ams.rpki-client.org