Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/w8GLGjX9MmXZPLa9f7tK4so6-dg.roa
File: w8GLGjX9MmXZPLa9f7tK4so6-dg.roa (raw, json)
Hash identifier: bdDx32ZtGTgax1RhgCUjcdrdx3dATwZ9Fx4SmLBPyoY=
Subject key identifier: C3:C1:8B:1A:35:FD:32:65:D9:3C:B6:BD:7F:BB:4A:E2:CA:3A:F9:D8
Certificate issuer: /CN=9a526a73ce8f9f62c14a11a2ea913ec273d58c46
Certificate serial: 018CC56E3C75F22C43F914953CF3DEC100B5
Authority key identifier: 9A:52:6A:73:CE:8F:9F:62:C1:4A:11:A2:EA:91:3E:C2:73:D5:8C:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mlJqc86Pn2LBShGi6pE-wnPVjEY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/w8GLGjX9MmXZPLa9f7tK4so6-dg.roa
Signing time: Mon 01 Jan 2024 14:29:45 +0000
ROA not before: Mon 01 Jan 2024 14:29:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35237
IP address blocks: 185.157.96.0/23 maxlen: 24
84.252.144.0/24 maxlen: 24
84.252.144.0/23 maxlen: 24
84.252.145.0/24 maxlen: 24
185.157.99.0/24 maxlen: 24
84.252.149.0/24 maxlen: 24
84.252.150.0/24 maxlen: 24
84.252.147.0/24 maxlen: 24
84.252.146.0/24 maxlen: 24
91.217.194.0/24 maxlen: 24
194.54.15.0/24 maxlen: 24
194.54.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/mlJqc86Pn2LBShGi6pE-wnPVjEY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/mlJqc86Pn2LBShGi6pE-wnPVjEY.mft
rsync://rpki.ripe.net/repository/DEFAULT/mlJqc86Pn2LBShGi6pE-wnPVjEY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:3c:75:f2:2c:43:f9:14:95:3c:f3:de:c1:00:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a526a73ce8f9f62c14a11a2ea913ec273d58c46
Validity
Not Before: Jan 1 14:29:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c3c18b1a35fd3265d93cb6bd7fbb4ae2ca3af9d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:9e:23:30:21:23:d0:99:73:bb:3d:39:c9:ca:
0f:79:c8:8f:56:b9:40:13:99:ea:16:8f:8b:a1:bd:
21:69:c4:4e:8c:61:bd:02:ca:47:e0:67:e2:da:ef:
6b:12:1f:90:4c:dd:2b:2c:8d:69:f0:9e:ac:94:d0:
4d:a8:e3:a2:b7:1f:42:7a:fb:c3:72:c3:da:d4:39:
36:31:fa:ce:1c:27:1d:c7:57:34:cd:17:4c:36:ec:
33:06:0c:28:38:38:ab:05:66:e6:14:9b:eb:4e:09:
ef:17:b7:02:ec:8a:c4:c2:23:84:a4:ac:9c:82:a3:
80:fd:ea:73:7d:ae:5a:00:36:26:ff:3c:c5:e1:0a:
fc:9d:1e:e5:b6:32:02:0b:cd:1f:a3:77:93:14:d6:
2e:84:54:44:b5:3d:6a:3a:40:43:28:dc:5a:06:8a:
de:a1:84:08:8f:13:d6:e4:c4:d0:87:35:71:e4:24:
5f:90:c8:0d:52:7b:d0:e6:43:87:7a:1d:46:68:3a:
88:29:a0:b7:f6:f5:ce:0d:74:70:21:2b:3a:ae:51:
52:f2:e0:97:d2:45:1b:d3:9f:36:5c:25:e1:bf:61:
ec:db:fe:c4:43:7f:0e:5e:51:a7:fc:b8:3d:b1:22:
73:8e:44:ba:5c:d2:94:de:b8:c6:91:2d:1c:76:56:
47:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:C1:8B:1A:35:FD:32:65:D9:3C:B6:BD:7F:BB:4A:E2:CA:3A:F9:D8
X509v3 Authority Key Identifier:
keyid:9A:52:6A:73:CE:8F:9F:62:C1:4A:11:A2:EA:91:3E:C2:73:D5:8C:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mlJqc86Pn2LBShGi6pE-wnPVjEY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/w8GLGjX9MmXZPLa9f7tK4so6-dg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/mlJqc86Pn2LBShGi6pE-wnPVjEY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.252.144.0/22
84.252.149.0-84.252.150.255
91.217.194.0/24
185.157.96.0/23
185.157.99.0/24
194.54.14.0/23
Signature Algorithm: sha256WithRSAEncryption
6f:72:e4:25:d5:5f:a3:79:1a:b9:ad:d3:c7:b8:da:29:26:55:
53:d5:79:c5:de:04:1a:ff:bd:63:e9:6c:4a:f0:1d:27:35:01:
2a:47:2c:37:44:e1:1f:98:d0:4e:ae:1a:32:e4:2b:b1:1a:35:
74:7f:4a:68:d6:bd:54:5f:c9:b2:01:84:9a:cc:70:f7:20:a8:
78:9d:8f:09:0f:9f:09:09:3c:8a:63:fc:fc:58:ca:d6:61:4d:
d7:5c:5a:f2:fb:08:1a:7b:9c:35:60:3c:cd:a6:e8:af:8d:5e:
65:65:94:62:d1:88:fa:8b:51:90:ec:48:48:c5:31:86:97:f4:
ec:66:f3:e8:d1:05:77:64:55:6e:54:c5:c7:7e:94:0e:82:31:
3f:54:f9:cd:95:c3:9b:2e:79:bc:f0:41:6d:49:9d:f6:93:fb:
42:c0:27:e5:2f:90:7e:59:fd:59:c5:fb:83:34:d3:33:64:98:
0b:e9:22:1f:0e:77:54:46:a8:a1:65:06:8a:a4:ce:ad:bc:cd:
e9:fb:fb:00:f7:e1:6f:7c:f1:bb:24:12:f7:65:22:7c:75:7c:
f4:7a:d5:a6:06:27:f3:ed:5f:ca:86:7a:a8:2a:9b:a3:b0:c8:
f3:6d:b3:15:24:65:b9:65:c4:31:34:f2:46:2c:13:a8:23:13:
30:3f:44:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 16:59:44 2024 by rpki-client on console-ams.rpki-client.org