Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/329d41-f4ad-413c-bc07-38953f9ad057/1/imCYlRaCyfKuy5Q539GtdWXw3QA.roa
File: imCYlRaCyfKuy5Q539GtdWXw3QA.roa (raw, json)
Hash identifier: J4HDqNzRX/yccTHRsQpDeoTA11SJE4g1fkphHChLR+M=
Subject key identifier: 8A:60:98:95:16:82:C9:F2:AE:CB:94:39:DF:D1:AD:75:65:F0:DD:00
Certificate issuer: /CN=c30d03e64676e720a4ff55179e196fec6591886b
Certificate serial: 018FCF1BF7C731ACB197C88D6019F14E92A3
Authority key identifier: C3:0D:03:E6:46:76:E7:20:A4:FF:55:17:9E:19:6F:EC:65:91:88:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ww0D5kZ25yCk_1UXnhlv7GWRiGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/329d41-f4ad-413c-bc07-38953f9ad057/1/imCYlRaCyfKuy5Q539GtdWXw3QA.roa
Signing time: Fri 31 May 2024 14:44:27 +0000
ROA not before: Fri 31 May 2024 14:44:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50840
IP address blocks: 85.204.27.0/24 maxlen: 24
86.106.91.0/24 maxlen: 24
185.41.70.0/24 maxlen: 24
194.59.140.0/24 maxlen: 24
194.59.141.0/24 maxlen: 24
194.59.158.0/24 maxlen: 24
194.59.159.0/24 maxlen: 24
2a07:9380::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/329d41-f4ad-413c-bc07-38953f9ad057/1/ww0D5kZ25yCk_1UXnhlv7GWRiGs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/329d41-f4ad-413c-bc07-38953f9ad057/1/ww0D5kZ25yCk_1UXnhlv7GWRiGs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ww0D5kZ25yCk_1UXnhlv7GWRiGs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Sep 2024 20:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:cf:1b:f7:c7:31:ac:b1:97:c8:8d:60:19:f1:4e:92:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c30d03e64676e720a4ff55179e196fec6591886b
Validity
Not Before: May 31 14:44:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8a6098951682c9f2aecb9439dfd1ad7565f0dd00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:5d:ed:e7:63:e5:e9:4f:7b:4f:44:a5:4d:b5:
51:00:c7:48:a9:85:79:05:ab:59:e2:72:ad:9d:cd:
f3:ee:9a:3d:d7:f2:85:70:ca:74:ce:c0:c7:14:e7:
7a:49:d9:81:54:0b:86:ed:8e:6c:19:ce:2c:3c:4d:
74:9c:2a:7c:b3:3f:7b:87:2c:aa:17:38:b3:91:c6:
85:1f:2d:0e:fe:b1:15:34:f4:74:88:8d:70:cf:16:
4b:69:67:ce:62:6a:e3:5c:dd:4f:ae:de:00:bd:15:
a4:19:1b:d2:5d:a6:d8:9f:4a:9f:e9:68:9a:c9:d9:
5c:77:4c:1f:4d:ab:f8:fb:a5:92:0d:f0:8e:68:9e:
9b:d6:53:aa:c1:10:7b:30:15:1f:41:f5:94:5b:36:
9e:7f:ca:83:7a:a2:d2:e5:4f:41:47:c3:5f:f3:97:
f7:6e:80:31:80:2a:1c:d4:b1:68:64:5c:de:c9:90:
91:ca:79:fb:e5:1f:6c:91:c8:72:e5:eb:0c:12:e3:
68:d4:88:2c:7c:f6:2e:d3:ac:99:18:77:57:76:83:
a3:a0:55:36:8e:f3:04:83:b5:e4:81:76:33:fc:27:
76:73:60:eb:a0:25:6b:56:af:06:8a:74:37:93:9e:
95:94:b1:a2:34:9d:eb:4d:af:3b:2a:52:4d:d9:0f:
3c:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:60:98:95:16:82:C9:F2:AE:CB:94:39:DF:D1:AD:75:65:F0:DD:00
X509v3 Authority Key Identifier:
keyid:C3:0D:03:E6:46:76:E7:20:A4:FF:55:17:9E:19:6F:EC:65:91:88:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ww0D5kZ25yCk_1UXnhlv7GWRiGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/329d41-f4ad-413c-bc07-38953f9ad057/1/imCYlRaCyfKuy5Q539GtdWXw3QA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/329d41-f4ad-413c-bc07-38953f9ad057/1/ww0D5kZ25yCk_1UXnhlv7GWRiGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.204.27.0/24
86.106.91.0/24
185.41.70.0/24
194.59.140.0/23
194.59.158.0/23
IPv6:
2a07:9380::/32
Signature Algorithm: sha256WithRSAEncryption
8c:3d:c6:93:06:c3:c2:81:c9:f4:7a:8d:d6:c1:bd:44:ac:f5:
5c:4f:db:8c:73:5d:df:13:ad:cb:c0:94:ff:e5:3c:73:55:4a:
2f:12:69:44:11:a3:32:2f:ce:85:c9:2e:1c:0b:e1:e7:b2:55:
80:a1:02:45:de:35:30:b8:51:58:8e:ee:d6:e6:a4:82:a0:17:
08:d8:ad:15:88:60:5b:d1:87:74:9b:96:26:52:7e:42:16:0b:
7b:11:e9:0a:a4:2a:3c:32:29:35:c4:55:7f:67:ad:62:24:01:
c7:85:e7:69:cf:4a:98:ba:42:03:08:70:0c:bc:0b:7e:33:4a:
70:d0:a5:18:c2:e9:86:9a:4a:b6:03:c4:2e:59:23:9c:08:29:
ec:05:4e:81:8a:44:72:5e:38:03:80:c9:d3:58:d8:68:c6:91:
63:18:48:38:f4:4e:56:20:e0:ce:9d:3c:ff:bf:48:59:48:c9:
19:a5:07:f5:32:92:1a:0d:53:21:7f:53:7b:2d:b9:9f:34:05:
63:5c:8f:20:86:64:1d:12:5a:73:75:96:8a:b6:d4:16:09:94:
ac:92:e2:3c:b0:dc:d8:cf:a7:37:26:22:83:28:d2:14:0a:b1:
96:93:fb:fc:a5:1a:c1:8b:06:dd:24:be:79:ab:6e:f1:79:c8:
d2:fe:21:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 18 23:56:39 2024 by rpki-client on console-fra.rpki-client.org