Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/dgjz6xetoJ2HDng9m0qxp0Hkhgo.roa
File: dgjz6xetoJ2HDng9m0qxp0Hkhgo.roa (raw, json)
Hash identifier: WJjxzMMWguqsOyUM0crOoioMtp83MQLfsaJMjrmFCEE=
Subject key identifier: 76:08:F3:EB:17:AD:A0:9D:87:0E:78:3D:9B:4A:B1:A7:41:E4:86:0A
Certificate issuer: /CN=ad9681f144db1430ac315c8306e1c14730c5fec2
Certificate serial: 018CC6B91B799F9823DB22C117F1E3302692
Authority key identifier: AD:96:81:F1:44:DB:14:30:AC:31:5C:83:06:E1:C1:47:30:C5:FE:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rZaB8UTbFDCsMVyDBuHBRzDF_sI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/dgjz6xetoJ2HDng9m0qxp0Hkhgo.roa
Signing time: Mon 01 Jan 2024 20:31:09 +0000
ROA not before: Mon 01 Jan 2024 20:31:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39164
IP address blocks: 185.222.210.0/24 maxlen: 24
2a10:8180::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/rZaB8UTbFDCsMVyDBuHBRzDF_sI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/rZaB8UTbFDCsMVyDBuHBRzDF_sI.mft
rsync://rpki.ripe.net/repository/DEFAULT/rZaB8UTbFDCsMVyDBuHBRzDF_sI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Oct 2024 17:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:1b:79:9f:98:23:db:22:c1:17:f1:e3:30:26:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad9681f144db1430ac315c8306e1c14730c5fec2
Validity
Not Before: Jan 1 20:31:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7608f3eb17ada09d870e783d9b4ab1a741e4860a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:28:25:7a:5c:2a:8b:46:f0:db:01:5b:3b:e1:
b6:dd:0d:2c:3d:6d:59:83:7d:08:95:28:3b:8e:7f:
d4:7d:34:9a:25:f1:7e:da:6a:59:6a:c2:d0:c3:1d:
06:ce:9e:15:43:0a:9f:b6:1e:46:f0:c6:58:3d:46:
6b:8e:5c:5f:04:3a:fc:57:fc:60:05:94:4d:9b:97:
70:4e:49:23:9c:8d:60:80:18:29:08:8b:f6:23:e0:
c3:a4:2b:a3:c4:08:5a:99:81:85:3f:51:2f:a3:1e:
60:a3:6d:b8:4b:4d:dc:2e:ca:38:44:18:d9:68:23:
a1:71:93:c3:c6:73:b0:ce:79:2b:c0:2c:e9:d1:92:
64:00:30:95:77:58:b8:d5:1e:3d:60:47:f1:1d:08:
41:d8:1d:b5:e1:f8:1a:05:58:e5:4b:0a:a9:88:f9:
c8:20:c0:96:f9:5c:45:ca:d3:51:e6:75:c9:2c:09:
4c:be:c5:66:9d:cc:30:46:d0:a8:d0:ca:4d:cc:5a:
50:49:5c:1d:ff:0d:1a:ba:52:42:56:ac:c8:03:06:
37:ec:95:02:af:4e:4d:28:5a:84:21:42:40:b0:30:
90:3a:8a:0b:47:ab:10:87:95:d7:3a:0d:8a:c6:2a:
a8:b4:db:6b:a1:8e:b5:65:bb:b5:cd:51:7b:1f:35:
3f:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:08:F3:EB:17:AD:A0:9D:87:0E:78:3D:9B:4A:B1:A7:41:E4:86:0A
X509v3 Authority Key Identifier:
keyid:AD:96:81:F1:44:DB:14:30:AC:31:5C:83:06:E1:C1:47:30:C5:FE:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rZaB8UTbFDCsMVyDBuHBRzDF_sI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/dgjz6xetoJ2HDng9m0qxp0Hkhgo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/rZaB8UTbFDCsMVyDBuHBRzDF_sI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.222.210.0/24
IPv6:
2a10:8180::/29
Signature Algorithm: sha256WithRSAEncryption
bb:75:f6:10:6f:80:b9:8f:99:f8:cc:05:9a:2a:78:bf:f0:96:
a9:41:ae:01:9c:ae:03:0b:7d:f6:92:7e:14:a5:6d:95:e2:ab:
f6:ff:43:16:29:d2:f9:e4:2c:35:fd:0b:4c:df:0c:67:6f:92:
2e:bf:ed:a4:82:f2:26:09:d7:40:15:9a:af:b3:0d:9e:34:ed:
3d:9d:d3:57:64:29:00:66:86:39:e9:6d:41:33:99:39:ce:36:
b1:95:3b:d8:d6:21:b9:1c:14:de:5f:80:ed:51:12:09:65:33:
ed:4a:bd:8b:d7:fb:16:02:65:6f:f0:11:e3:1a:54:58:69:19:
56:5e:c6:6a:bd:a5:4d:28:f8:3f:36:2c:83:ed:fd:d8:47:ce:
3a:c4:65:28:20:02:51:21:c4:42:75:2f:1e:da:c6:3d:20:18:
b0:59:38:0b:68:19:eb:f1:73:21:f3:72:28:d0:74:58:f5:03:
35:bd:34:c7:86:42:c8:5d:aa:27:0b:a1:6d:7a:d2:0f:2f:99:
a8:44:78:79:2b:53:96:cb:0b:b1:12:ca:ba:37:39:b4:a0:a9:
7d:6c:ac:3b:6a:dd:f7:14:8c:a1:85:3e:54:cd:f8:ab:ce:a9:
ed:ba:f9:cd:92:08:49:9f:82:03:73:b1:fb:ea:a2:18:95:0b:
08:13:62:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 5 00:15:34 2024 by rpki-client on console-ams.rpki-client.org