Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/cc1ab9-febe-4422-8b32-92d94cd7b024/1/by-wLUNNihC4Hb_uDZQssxnsRyw.roa
File: by-wLUNNihC4Hb_uDZQssxnsRyw.roa (raw, json)
Hash identifier: jYa3e4ItypYJiozGZrbGLe90DjxGQc1Yo3etcVuJCqE=
Subject key identifier: 6F:2F:B0:2D:43:4D:8A:10:B8:1D:BF:EE:0D:94:2C:B3:19:EC:47:2C
Certificate issuer: /CN=8cee8804ff70376e2afe21abf93e228d5afdd509
Certificate serial: 018CC870BD5AE73038D60AB0EA9FA84B8801
Authority key identifier: 8C:EE:88:04:FF:70:37:6E:2A:FE:21:AB:F9:3E:22:8D:5A:FD:D5:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jO6IBP9wN24q_iGr-T4ijVr91Qk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/cc1ab9-febe-4422-8b32-92d94cd7b024/1/by-wLUNNihC4Hb_uDZQssxnsRyw.roa
Signing time: Tue 02 Jan 2024 04:31:20 +0000
ROA not before: Tue 02 Jan 2024 04:31:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204649
IP address blocks: 185.244.12.0/22 maxlen: 22
80.73.208.0/21 maxlen: 21
80.73.216.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/cc1ab9-febe-4422-8b32-92d94cd7b024/1/jO6IBP9wN24q_iGr-T4ijVr91Qk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/cc1ab9-febe-4422-8b32-92d94cd7b024/1/jO6IBP9wN24q_iGr-T4ijVr91Qk.mft
rsync://rpki.ripe.net/repository/DEFAULT/jO6IBP9wN24q_iGr-T4ijVr91Qk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 07:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:70:bd:5a:e7:30:38:d6:0a:b0:ea:9f:a8:4b:88:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cee8804ff70376e2afe21abf93e228d5afdd509
Validity
Not Before: Jan 2 04:31:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6f2fb02d434d8a10b81dbfee0d942cb319ec472c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:1b:be:6a:de:9f:27:2a:96:78:24:17:ed:b6:
d2:e0:0f:e8:16:8c:82:a0:d3:8f:5f:bd:e3:5d:37:
01:87:65:28:e3:f6:f6:c8:f1:67:6d:a9:57:80:2d:
85:af:dc:23:52:2f:6f:df:4c:a6:e8:b0:58:34:60:
f4:f9:50:ec:f4:2b:9a:5b:51:81:c1:b5:90:63:20:
2f:4a:93:9f:15:db:67:03:a3:9e:88:d1:fa:6d:16:
8b:e5:8b:90:22:f0:c5:8d:c9:9f:40:fd:af:9f:a8:
98:e0:12:26:99:21:79:e2:21:47:96:e6:e9:33:b1:
85:cf:93:ad:a1:ff:e0:58:cd:9a:a9:be:16:1c:18:
53:fb:80:a1:b0:5a:bb:4a:10:8f:c8:ef:4c:e8:54:
f0:16:a6:ce:69:14:5a:f0:1e:8b:fc:34:84:b5:5a:
6d:cf:b5:d5:88:40:78:fe:37:50:59:6d:5f:f0:29:
ff:e5:20:f6:9d:f8:cd:17:97:31:72:19:e8:df:bc:
aa:82:2e:fb:11:86:fc:e1:a7:c6:f5:44:62:3f:f8:
b0:58:9d:5c:3b:aa:5a:b3:ae:3e:6d:30:89:46:c5:
b9:eb:f2:c8:64:80:c5:0b:85:2b:e3:6d:d5:70:cc:
63:3a:f6:1d:c0:d2:47:bc:e8:de:37:4e:1e:30:4c:
fe:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:2F:B0:2D:43:4D:8A:10:B8:1D:BF:EE:0D:94:2C:B3:19:EC:47:2C
X509v3 Authority Key Identifier:
keyid:8C:EE:88:04:FF:70:37:6E:2A:FE:21:AB:F9:3E:22:8D:5A:FD:D5:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jO6IBP9wN24q_iGr-T4ijVr91Qk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/cc1ab9-febe-4422-8b32-92d94cd7b024/1/by-wLUNNihC4Hb_uDZQssxnsRyw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/cc1ab9-febe-4422-8b32-92d94cd7b024/1/jO6IBP9wN24q_iGr-T4ijVr91Qk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.73.208.0-80.73.217.255
185.244.12.0/22
Signature Algorithm: sha256WithRSAEncryption
88:e6:e1:b5:25:1a:c3:28:9c:47:36:60:0d:47:89:a3:a5:8a:
a1:44:d8:ce:f3:7a:8c:fe:9f:a7:35:77:84:71:05:d5:48:76:
c2:2f:ad:90:1d:1d:53:cc:dc:51:67:76:ac:dc:85:7c:dc:ca:
43:74:0e:75:44:67:1b:0a:93:f2:b2:b0:df:5d:98:40:9c:af:
39:d0:64:80:bc:30:63:b5:99:7c:4f:d8:a8:c3:c5:db:0d:fa:
26:13:2a:04:86:a1:7c:42:50:f7:67:31:e1:5d:77:08:5b:fa:
05:23:6d:7e:f3:1e:52:bd:37:42:71:55:98:ad:14:f0:b5:9b:
f6:02:27:48:a5:7a:a5:bd:24:3b:20:4c:fd:7c:16:40:b5:6d:
c4:85:b3:5d:e1:9d:29:a3:c7:88:d8:c0:e2:48:ff:61:cd:a7:
b1:9d:8b:98:fc:51:45:76:93:af:31:b7:20:c2:a3:ff:d0:30:
b6:3d:73:44:58:4e:06:e4:f9:41:f9:14:c0:6f:ad:a9:86:87:
de:7f:6b:25:93:06:1c:db:a2:0a:94:83:79:34:c8:ea:66:d5:
20:27:59:38:45:dc:46:ca:8c:76:da:a5:2c:01:a7:68:6d:4d:
e6:29:09:d3:e9:e6:75:d9:8a:2d:4b:96:1e:fd:35:ad:3b:fb:
d2:18:5c:bd
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jun 7 17:46:06 2024 by rpki-client on console-ams.rpki-client.org