Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/9778b6-dc2b-4586-91de-53a07368b9ea/1/VfMJmUHJmY6PDaRrd2MRLveDtjw.roa
File: VfMJmUHJmY6PDaRrd2MRLveDtjw.roa (raw, json)
Hash identifier: gLm8rO+e4m0pXUlM29Bj1nLrgpjpx+/46irZcnaE9eI=
Subject key identifier: 55:F3:09:99:41:C9:99:8E:8F:0D:A4:6B:77:63:11:2E:F7:83:B6:3C
Certificate issuer: /CN=7171d8b4cf6773b59f0732e0e9e8d25a9b773fae
Certificate serial: 018CC9BC7FA030E2305EF6E2A778D2401BC7
Authority key identifier: 71:71:D8:B4:CF:67:73:B5:9F:07:32:E0:E9:E8:D2:5A:9B:77:3F:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cXHYtM9nc7WfBzLg6ejSWpt3P64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/9778b6-dc2b-4586-91de-53a07368b9ea/1/VfMJmUHJmY6PDaRrd2MRLveDtjw.roa
Signing time: Tue 02 Jan 2024 10:33:42 +0000
ROA not before: Tue 02 Jan 2024 10:33:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42567
IP address blocks: 185.7.96.0/22 maxlen: 24
217.22.16.0/21 maxlen: 24
185.94.236.0/22 maxlen: 24
217.22.24.0/22 maxlen: 24
2a05:22c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/9778b6-dc2b-4586-91de-53a07368b9ea/1/cXHYtM9nc7WfBzLg6ejSWpt3P64.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/9778b6-dc2b-4586-91de-53a07368b9ea/1/cXHYtM9nc7WfBzLg6ejSWpt3P64.mft
rsync://rpki.ripe.net/repository/DEFAULT/cXHYtM9nc7WfBzLg6ejSWpt3P64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:7f:a0:30:e2:30:5e:f6:e2:a7:78:d2:40:1b:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7171d8b4cf6773b59f0732e0e9e8d25a9b773fae
Validity
Not Before: Jan 2 10:33:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=55f3099941c9998e8f0da46b7763112ef783b63c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:91:5f:d5:e5:f5:8c:75:f4:3b:28:21:32:ad:
94:a5:a5:a9:14:e9:82:80:3d:11:37:09:60:ee:60:
50:80:8a:cf:16:7b:94:9c:f8:ef:c5:d0:1b:e7:ad:
dd:d5:dd:66:6c:82:ee:10:de:09:50:d0:70:62:6d:
f8:12:fc:c8:c2:78:c6:20:55:de:19:9d:9b:81:fa:
e4:75:b4:d8:74:2b:5a:a4:42:45:82:90:5e:a1:25:
44:31:47:e1:ed:ee:7d:e7:83:b3:80:cc:63:62:d6:
6c:6c:6f:6e:fb:99:30:ef:55:40:b8:aa:7c:a0:50:
59:b3:bb:56:69:a3:7b:ed:b2:6d:1b:c9:6e:5c:86:
04:f8:c8:c4:98:04:c9:b8:0b:00:3d:bf:2f:41:04:
a2:46:a3:7c:48:52:24:77:d4:a5:2d:87:fc:b1:ab:
fe:69:bb:11:26:be:18:f5:00:e8:38:bd:c7:c2:73:
92:ab:77:29:00:e3:99:a1:22:d3:5b:a4:6b:24:c0:
c8:68:ea:d1:df:90:31:b7:ba:3e:d7:a1:1b:e0:a7:
f1:9a:0c:f2:da:9e:bd:ab:64:48:de:43:d9:4a:4c:
8d:c0:6c:b3:07:a6:43:6a:3d:3c:34:b0:6a:8f:28:
99:78:45:61:6d:d5:66:3a:7a:de:ff:6f:fb:65:24:
94:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:F3:09:99:41:C9:99:8E:8F:0D:A4:6B:77:63:11:2E:F7:83:B6:3C
X509v3 Authority Key Identifier:
keyid:71:71:D8:B4:CF:67:73:B5:9F:07:32:E0:E9:E8:D2:5A:9B:77:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cXHYtM9nc7WfBzLg6ejSWpt3P64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/9778b6-dc2b-4586-91de-53a07368b9ea/1/VfMJmUHJmY6PDaRrd2MRLveDtjw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/9778b6-dc2b-4586-91de-53a07368b9ea/1/cXHYtM9nc7WfBzLg6ejSWpt3P64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.7.96.0/22
185.94.236.0/22
217.22.16.0-217.22.27.255
IPv6:
2a05:22c0::/29
Signature Algorithm: sha256WithRSAEncryption
d3:d8:0a:27:b1:1a:b5:38:69:ae:80:73:52:c9:d6:82:04:5d:
91:16:a7:e0:6c:76:e7:8f:d1:b2:f2:d3:2a:15:b8:c6:13:5b:
8f:d8:e0:e4:75:05:6c:81:4a:63:96:f1:5d:32:66:13:96:cf:
53:c6:4b:bf:ba:26:21:cc:51:07:b8:dd:6a:08:12:17:cf:88:
25:99:4c:0c:88:b3:df:98:b5:c3:59:83:b0:c4:c6:16:fd:94:
14:d6:f0:bc:07:a4:51:2c:7f:f6:61:aa:15:33:a7:03:7b:5a:
2c:77:b1:d2:c7:88:7a:07:97:56:00:a1:81:ac:a4:20:20:36:
c1:bf:00:09:80:4b:54:60:ad:f9:9b:92:f0:c7:dd:d8:33:a4:
86:3f:66:c2:4e:66:86:91:72:20:68:7c:61:21:d9:42:45:a7:
83:58:2a:8d:57:cd:98:b5:c3:64:80:0b:47:80:4d:0c:d4:13:
64:21:f7:0c:f0:9b:2e:b1:9d:98:37:4a:cb:65:11:b3:bc:b3:
ef:60:45:7b:d2:24:6c:43:8c:e2:7a:2e:18:43:f7:c5:9a:f5:
26:c2:ca:01:23:2d:50:0d:4f:c5:9e:f7:68:81:25:a5:70:ab:
87:a8:a8:61:48:e4:20:18:70:03:10:c7:d6:5e:54:64:a6:91:
b6:23:da:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:58:26 2024 by rpki-client on console-ams.rpki-client.org