Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/778ce0-2cc2-490b-a6e2-6020e8a56556/1/2c2AgHpGt8fDyotDjvhpSOqR-G0.roa
File: 2c2AgHpGt8fDyotDjvhpSOqR-G0.roa (raw, json)
Hash identifier: l7cb4Rc5liz06vITxqBo2Ktwj7Yo0uZx1DIJfHT8zCo=
Subject key identifier: D9:CD:80:80:7A:46:B7:C7:C3:CA:8B:43:8E:F8:69:48:EA:91:F8:6D
Certificate issuer: /CN=8dac679b480a78ead797f2e0b7779e58f2271f24
Certificate serial: 018CCA2A870A8568EF19D0B4240530E9CBAE
Authority key identifier: 8D:AC:67:9B:48:0A:78:EA:D7:97:F2:E0:B7:77:9E:58:F2:27:1F:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/778ce0-2cc2-490b-a6e2-6020e8a56556/1/2c2AgHpGt8fDyotDjvhpSOqR-G0.roa
Signing time: Tue 02 Jan 2024 12:33:53 +0000
ROA not before: Tue 02 Jan 2024 12:33:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31549
IP address blocks: 185.110.245.0/24 maxlen: 24
185.110.244.0/24 maxlen: 24
185.110.246.0/24 maxlen: 24
185.110.247.0/24 maxlen: 24
87.236.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/778ce0-2cc2-490b-a6e2-6020e8a56556/1/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/778ce0-2cc2-490b-a6e2-6020e8a56556/1/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Jun 2024 08:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:87:0a:85:68:ef:19:d0:b4:24:05:30:e9:cb:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dac679b480a78ead797f2e0b7779e58f2271f24
Validity
Not Before: Jan 2 12:33:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d9cd80807a46b7c7c3ca8b438ef86948ea91f86d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:80:35:d4:0a:c0:d9:b4:01:6e:ca:8c:23:ba:
f0:af:45:ea:0a:8e:97:34:49:38:31:71:3f:55:49:
9a:f8:31:4a:a4:2e:bf:ee:7a:cb:f3:93:a4:e5:93:
f4:88:56:09:fa:ab:a7:83:10:80:94:09:81:75:fd:
82:be:67:d5:8c:40:b5:d8:6d:b6:8e:64:b3:e5:f1:
1b:96:ff:f8:db:49:b3:0f:08:ce:89:86:66:63:71:
c0:dc:29:f8:7c:86:cb:00:1d:7b:e3:bf:fe:c8:2d:
92:7d:18:bf:4c:49:73:74:22:2b:bc:74:d9:a2:e0:
3f:24:bc:ea:a5:12:86:61:b5:c6:a7:44:b1:0c:66:
5e:08:6c:be:10:d8:f8:ce:1a:c7:50:be:8b:d3:57:
4b:8e:06:ab:b6:1c:d7:b7:78:bb:88:b2:b7:f4:15:
f9:fe:73:5a:94:be:0a:eb:f7:d7:62:ea:bb:fa:97:
8a:7c:1b:17:12:56:40:e4:c7:be:0b:6e:97:db:43:
b7:bf:aa:85:08:df:3d:d7:a7:a1:e5:e6:c5:ab:82:
af:f4:af:3c:2f:b0:0a:7e:cc:54:9c:57:25:42:46:
c7:47:2e:b6:10:ab:15:dc:17:17:1b:ad:b1:9b:c1:
af:6a:f6:12:2a:55:f2:28:ad:99:0d:d9:50:a7:17:
53:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:CD:80:80:7A:46:B7:C7:C3:CA:8B:43:8E:F8:69:48:EA:91:F8:6D
X509v3 Authority Key Identifier:
keyid:8D:AC:67:9B:48:0A:78:EA:D7:97:F2:E0:B7:77:9E:58:F2:27:1F:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/778ce0-2cc2-490b-a6e2-6020e8a56556/1/2c2AgHpGt8fDyotDjvhpSOqR-G0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/778ce0-2cc2-490b-a6e2-6020e8a56556/1/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.236.39.0/24
185.110.244.0/22
Signature Algorithm: sha256WithRSAEncryption
04:7f:fb:de:b2:a4:56:3d:60:bb:e0:da:00:a3:c0:68:ea:ec:
f9:2d:7a:6f:1a:be:48:2e:30:06:b0:24:88:b2:e0:6f:6c:7c:
a0:53:11:a8:b9:9d:42:7b:38:98:d5:99:14:05:ec:d2:40:2a:
5e:cb:20:93:b6:d8:86:48:2e:ca:8d:6b:ac:9f:1f:52:a0:30:
cc:29:43:d7:00:a1:25:4b:99:51:75:9d:e9:fc:58:6b:d9:d6:
6f:71:19:81:52:61:b8:25:9e:92:3c:3f:30:d2:3c:59:25:2b:
e3:ef:61:d9:4c:2c:24:a6:d9:f8:6a:67:2c:76:b2:e1:34:b0:
bf:9b:f4:54:14:b4:0c:4a:19:5b:96:3b:0f:9d:7f:41:6a:9a:
f3:35:89:f2:61:48:25:b3:84:4c:e8:b4:71:6b:56:ad:d3:d9:
15:2c:c0:52:72:98:f8:6b:f4:56:0c:22:1b:e9:8a:26:d0:28:
77:80:b8:ee:27:7a:0b:bc:4d:b2:58:46:da:f1:68:21:aa:29:
5a:52:98:76:0c:78:68:6c:63:f2:87:3c:3d:f9:75:21:14:5e:
00:fd:61:73:f5:fe:97:83:50:d4:8f:b5:b4:73:b8:15:a0:36:
bf:6f:0b:7c:d2:de:1f:ea:2a:37:80:0f:81:0b:53:0b:95:4b:
2d:02:a4:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 17:48:30 2024 by rpki-client on console-ams.rpki-client.org