Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/49dfea-c789-4401-a251-e2533cdd25af/1/ac8tZbXtHmxYz4P6_YzunXvwN5w.roa
File: ac8tZbXtHmxYz4P6_YzunXvwN5w.roa (raw, json)
Hash identifier: HFZVmWoiKxQf4elZn8IcrqeVgZLlVOxJdEGv182Ymgs=
Subject key identifier: 69:CF:2D:65:B5:ED:1E:6C:58:CF:83:FA:FD:8C:EE:9D:7B:F0:37:9C
Certificate issuer: /CN=a4c93ab364c87832e7776226eee6c131dbe153bb
Certificate serial: 018CC500BDF412B2682286FF1D922761643B
Authority key identifier: A4:C9:3A:B3:64:C8:78:32:E7:77:62:26:EE:E6:C1:31:DB:E1:53:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pMk6s2TIeDLnd2Im7ubBMdvhU7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/49dfea-c789-4401-a251-e2533cdd25af/1/ac8tZbXtHmxYz4P6_YzunXvwN5w.roa
Signing time: Mon 01 Jan 2024 12:30:09 +0000
ROA not before: Mon 01 Jan 2024 12:30:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197830
IP address blocks: 185.52.128.0/22 maxlen: 22
5.44.34.0/23 maxlen: 23
5.44.33.0/24 maxlen: 24
5.44.36.0/24 maxlen: 24
5.44.32.0/24 maxlen: 24
5.44.32.0/21 maxlen: 21
5.44.38.0/23 maxlen: 23
176.28.83.0/24 maxlen: 24
176.28.80.0/21 maxlen: 21
176.28.84.0/24 maxlen: 24
2a04:c840::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/49dfea-c789-4401-a251-e2533cdd25af/1/pMk6s2TIeDLnd2Im7ubBMdvhU7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/49dfea-c789-4401-a251-e2533cdd25af/1/pMk6s2TIeDLnd2Im7ubBMdvhU7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/pMk6s2TIeDLnd2Im7ubBMdvhU7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 09 Jun 2024 03:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:bd:f4:12:b2:68:22:86:ff:1d:92:27:61:64:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4c93ab364c87832e7776226eee6c131dbe153bb
Validity
Not Before: Jan 1 12:30:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=69cf2d65b5ed1e6c58cf83fafd8cee9d7bf0379c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e1:9f:6a:19:51:e1:52:b9:c7:a3:ab:4b:0c:
20:8f:fa:5c:3f:f4:86:76:84:2a:66:bb:29:b4:c5:
02:7e:27:6d:31:28:86:c0:9f:0d:fd:87:43:13:7e:
23:a2:1f:6d:95:ea:f1:65:36:71:59:19:7f:30:88:
d7:d3:04:4e:a9:69:25:47:1f:01:d7:08:d2:e0:9e:
29:b4:42:01:be:14:32:a4:05:d0:a0:3d:f6:4b:74:
5b:f8:37:81:08:fa:ba:2b:54:9c:7b:ab:c2:8d:66:
40:d2:21:2b:ef:76:2d:d5:8e:dd:f7:a6:2d:26:08:
d5:33:5c:20:57:c4:75:5f:a4:e6:62:1d:99:c1:95:
21:11:c9:23:58:54:b6:1e:2f:9e:a3:0d:02:d2:02:
b6:7b:7e:ca:71:ad:ac:4c:9e:5a:72:c5:f3:07:ea:
50:f5:ce:a3:67:f3:a4:43:2e:cc:99:76:10:ca:69:
14:f3:7d:6a:81:63:84:67:5a:c6:67:80:4b:e0:85:
27:7c:a9:b9:4d:7e:e0:f1:16:da:6f:11:27:c5:51:
ab:cf:f0:27:f7:5b:0c:ca:57:64:05:d9:64:c9:0b:
ba:a5:3a:a2:7f:8c:c0:aa:b1:48:45:60:7a:f1:bc:
5e:f8:76:e1:22:67:31:22:ba:e5:69:02:86:5b:d7:
bb:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:CF:2D:65:B5:ED:1E:6C:58:CF:83:FA:FD:8C:EE:9D:7B:F0:37:9C
X509v3 Authority Key Identifier:
keyid:A4:C9:3A:B3:64:C8:78:32:E7:77:62:26:EE:E6:C1:31:DB:E1:53:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pMk6s2TIeDLnd2Im7ubBMdvhU7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/49dfea-c789-4401-a251-e2533cdd25af/1/ac8tZbXtHmxYz4P6_YzunXvwN5w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/49dfea-c789-4401-a251-e2533cdd25af/1/pMk6s2TIeDLnd2Im7ubBMdvhU7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.44.32.0/21
176.28.80.0/21
185.52.128.0/22
IPv6:
2a04:c840::/29
Signature Algorithm: sha256WithRSAEncryption
63:8a:50:8e:1d:60:17:10:b1:f8:ae:27:d4:c9:3a:e0:69:4a:
1c:b9:28:45:79:cf:80:c7:a9:37:25:84:09:89:13:10:49:22:
30:d5:7f:5b:1c:2f:40:62:07:eb:74:5c:8a:9f:fd:be:e7:2b:
e6:37:f2:54:2a:cd:af:df:91:54:80:87:ef:61:72:f4:49:e0:
f2:c1:88:ed:f2:3f:fb:6d:3b:79:dc:16:ab:be:6e:a9:39:24:
03:79:51:bb:db:00:e9:4d:df:d5:67:b5:fc:6d:65:55:8a:66:
56:c9:bc:a7:5c:d1:e7:76:50:6f:b0:04:d6:98:f1:cf:b8:88:
a4:33:ef:df:66:ee:c1:f1:cb:68:af:b3:01:fa:72:33:9c:99:
4f:38:d9:68:99:5a:a6:9d:0b:71:17:d5:15:9d:58:b6:7e:56:
06:80:2c:44:b0:ff:21:4b:f8:99:58:bb:d6:44:02:e3:f6:be:
7a:de:3d:d7:79:43:54:44:0f:dd:e4:54:11:3e:08:fb:de:fd:
2e:87:34:f6:97:5c:f5:4b:3a:55:60:01:53:b3:4e:11:ec:fc:
da:9c:3b:1a:8f:80:70:ee:3c:9d:67:a1:ab:78:fd:a1:94:64:
67:52:04:6c:0f:40:93:70:f2:56:17:0b:f7:d1:03:84:7d:83:
95:4a:e5:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 11:26:27 2024 by rpki-client on console-ams.rpki-client.org