Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/5ded6c-b469-420c-b15e-52b3f68dc0c2/1/lNbdYG0vEw5aI2Y8TZv5BWQqlu4.roa
File: lNbdYG0vEw5aI2Y8TZv5BWQqlu4.roa (raw, json)
Hash identifier: qmqIAoTYddYOuIvrQaw8qQfelXzkc/5wSuypSj1lYWQ=
Subject key identifier: 94:D6:DD:60:6D:2F:13:0E:5A:23:66:3C:4D:9B:F9:05:64:2A:96:EE
Certificate issuer: /CN=8bb773818512490a500ad843ea2ae717ef21b14c
Certificate serial: 018CC8DF299510F6622B5AFE78864A58CCD7
Authority key identifier: 8B:B7:73:81:85:12:49:0A:50:0A:D8:43:EA:2A:E7:17:EF:21:B1:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i7dzgYUSSQpQCthD6irnF-8hsUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/5ded6c-b469-420c-b15e-52b3f68dc0c2/1/lNbdYG0vEw5aI2Y8TZv5BWQqlu4.roa
Signing time: Tue 02 Jan 2024 06:31:57 +0000
ROA not before: Tue 02 Jan 2024 06:31:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48252
IP address blocks: 185.21.212.0/22 maxlen: 22
185.21.212.0/24 maxlen: 24
185.21.213.0/24 maxlen: 24
185.21.214.0/24 maxlen: 24
185.21.215.0/24 maxlen: 24
94.198.179.0/24 maxlen: 24
94.198.177.0/24 maxlen: 24
94.198.178.0/24 maxlen: 24
94.198.176.0/21 maxlen: 21
94.198.176.0/24 maxlen: 24
94.198.181.0/24 maxlen: 24
94.198.180.0/24 maxlen: 24
94.198.182.0/24 maxlen: 24
94.198.183.0/24 maxlen: 24
2a04:11c0::/29 maxlen: 29
2a04:11c1::/32 maxlen: 32
2a04:11c2::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/5ded6c-b469-420c-b15e-52b3f68dc0c2/1/i7dzgYUSSQpQCthD6irnF-8hsUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/5ded6c-b469-420c-b15e-52b3f68dc0c2/1/i7dzgYUSSQpQCthD6irnF-8hsUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/i7dzgYUSSQpQCthD6irnF-8hsUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:29:95:10:f6:62:2b:5a:fe:78:86:4a:58:cc:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bb773818512490a500ad843ea2ae717ef21b14c
Validity
Not Before: Jan 2 06:31:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=94d6dd606d2f130e5a23663c4d9bf905642a96ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:95:fb:ae:f5:4d:6b:16:d2:db:9a:81:63:5a:
87:74:7c:2f:a6:39:19:d6:23:67:0d:63:22:2e:b1:
01:eb:e2:86:d7:27:a4:ab:8e:7a:91:96:b2:92:c3:
8f:7b:38:6f:12:03:31:7b:4d:92:03:fb:cd:52:1c:
be:8c:fa:7e:ba:c9:54:0f:f0:50:93:80:d1:b4:56:
44:24:18:b8:1e:c1:46:81:80:d7:ce:f9:c1:ff:84:
16:64:ee:07:77:e0:66:75:30:a7:d0:37:8e:b8:2a:
dd:e6:42:b3:e8:91:c6:04:42:d8:65:31:e9:61:6c:
49:2c:37:ab:c3:78:a4:ef:7d:7a:9d:e6:67:d8:a9:
e4:a7:a7:7a:89:3c:39:9a:ad:0c:69:6d:32:19:c4:
e0:62:04:32:51:91:2e:29:6a:60:2f:2b:92:cd:bb:
9d:3a:b0:25:98:5b:28:8b:67:88:1d:bc:6f:07:ea:
28:0c:2b:56:42:10:64:c9:66:33:db:c9:de:07:96:
3c:76:b7:4c:93:16:09:9a:9a:ce:de:ab:ea:b6:0d:
c9:f4:1c:40:fb:c4:a3:f1:8e:c1:de:e7:1d:8e:04:
3b:9e:4e:12:d5:40:51:72:03:af:79:1d:0b:7b:80:
f3:aa:60:3d:b0:32:8d:c6:4b:8b:73:f3:db:dc:61:
75:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:D6:DD:60:6D:2F:13:0E:5A:23:66:3C:4D:9B:F9:05:64:2A:96:EE
X509v3 Authority Key Identifier:
keyid:8B:B7:73:81:85:12:49:0A:50:0A:D8:43:EA:2A:E7:17:EF:21:B1:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i7dzgYUSSQpQCthD6irnF-8hsUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/5ded6c-b469-420c-b15e-52b3f68dc0c2/1/lNbdYG0vEw5aI2Y8TZv5BWQqlu4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/5ded6c-b469-420c-b15e-52b3f68dc0c2/1/i7dzgYUSSQpQCthD6irnF-8hsUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.198.176.0/21
185.21.212.0/22
IPv6:
2a04:11c0::/29
Signature Algorithm: sha256WithRSAEncryption
61:63:31:1c:db:0c:0b:99:77:a8:00:87:4d:ee:6f:32:21:22:
8e:b3:79:2c:a7:e7:0f:62:a0:ea:46:d0:72:00:8e:a3:42:e5:
08:86:20:d1:03:d5:89:e1:97:82:8f:1a:7e:98:2a:02:bf:f3:
3c:1e:bd:57:16:eb:71:8e:0c:57:8d:73:44:e0:2b:e8:6a:ff:
20:47:47:c4:d2:7e:5a:74:88:ef:00:da:6c:ef:d1:40:49:88:
55:84:b9:8f:2f:14:32:2a:bd:c7:a7:84:71:a9:0f:17:34:d0:
93:e4:62:a4:c3:05:32:e8:c7:31:8c:8b:c2:3e:18:ff:a9:93:
82:a7:cb:ec:a2:60:76:9f:59:86:ac:de:0c:70:a7:fe:02:53:
c6:89:e5:5e:4e:7f:2e:be:c1:1e:2c:43:a9:ad:d5:0d:7d:d0:
30:81:c2:99:ce:13:b9:45:aa:f8:3c:90:98:3d:3a:d8:db:f5:
52:91:61:6b:f9:31:27:95:b7:dc:26:0f:70:21:31:6d:c2:aa:
20:09:4e:8a:78:d7:65:f6:72:67:57:65:03:94:e1:36:8f:33:
03:49:43:9d:76:3f:2f:c8:a0:03:2c:1b:8e:57:99:b4:62:aa:
83:af:28:7e:56:b3:c0:21:2d:92:74:64:3d:54:8e:34:5a:10:
84:04:ad:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:31:23 2024 by rpki-client on console-ams.rpki-client.org