Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/d06f5f-ad69-4885-8c71-aace70abc6a0/1/34mBfBSBhY2znZv2Eq8OmXwS0oQ.roa
File: 34mBfBSBhY2znZv2Eq8OmXwS0oQ.roa (raw, json)
Hash identifier: 196/1w/got0RbLGOKsyvH8ZVKpPQBGOnhKCsDOVW7EI=
Subject key identifier: DF:89:81:7C:14:81:85:8D:B3:9D:9B:F6:12:AF:0E:99:7C:12:D2:84
Certificate issuer: /CN=d70b07459e2f116fb5a97f11bae75c0db491c196
Certificate serial: 018CC42453DB5567F0DFD7B5F5A4879086A6
Authority key identifier: D7:0B:07:45:9E:2F:11:6F:B5:A9:7F:11:BA:E7:5C:0D:B4:91:C1:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1wsHRZ4vEW-1qX8RuudcDbSRwZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/d06f5f-ad69-4885-8c71-aace70abc6a0/1/34mBfBSBhY2znZv2Eq8OmXwS0oQ.roa
Signing time: Mon 01 Jan 2024 08:29:24 +0000
ROA not before: Mon 01 Jan 2024 08:29:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204760
IP address blocks: 185.241.64.0/22 maxlen: 24
185.22.0.0/22 maxlen: 22
2a0c:9c80::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/d06f5f-ad69-4885-8c71-aace70abc6a0/1/1wsHRZ4vEW-1qX8RuudcDbSRwZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/d06f5f-ad69-4885-8c71-aace70abc6a0/1/1wsHRZ4vEW-1qX8RuudcDbSRwZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1wsHRZ4vEW-1qX8RuudcDbSRwZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 May 2024 19:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:53:db:55:67:f0:df:d7:b5:f5:a4:87:90:86:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d70b07459e2f116fb5a97f11bae75c0db491c196
Validity
Not Before: Jan 1 08:29:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=df89817c1481858db39d9bf612af0e997c12d284
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:9a:4d:cf:97:48:f5:d6:90:c2:98:fd:99:d6:
cf:c4:e0:b0:43:7f:8b:cb:c0:1b:a4:d8:1f:d5:ba:
ee:1b:9c:2f:41:b1:4e:c9:ac:ef:8e:50:45:2d:aa:
30:9b:09:d2:6c:97:54:8c:c4:8e:b8:f4:6b:b9:28:
6e:6d:59:ec:c5:e4:eb:af:97:51:c4:16:80:dd:e2:
12:56:3a:10:41:ed:26:e0:9c:0a:38:d3:d7:79:7b:
45:11:63:f1:9e:7a:ad:10:70:8b:23:a2:b6:f3:e5:
67:00:1a:a8:42:3f:38:be:5e:80:91:c8:16:86:2c:
c3:e0:26:49:6e:f8:4e:4e:11:12:f6:02:01:c2:d7:
3c:ba:a9:f0:2c:ee:94:6a:c3:58:28:88:7c:7e:6a:
d7:93:b1:20:7f:1c:2c:bd:6d:bf:ea:bb:9a:43:cb:
73:3a:4c:c3:60:d6:c0:5c:49:09:f1:c1:fa:80:ff:
e6:07:dc:b0:25:a2:de:a0:64:f3:5b:2b:78:ee:54:
29:b2:ae:d2:5f:fa:57:94:ba:dd:4b:3b:56:2b:5e:
a1:5f:0b:b7:90:8b:08:10:e5:50:b0:b5:f1:c9:3b:
c2:e0:fb:c3:bc:d2:5c:e6:31:f6:8c:11:41:81:c6:
1d:06:66:95:69:c9:ac:38:07:33:b8:a5:2a:e7:52:
41:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:89:81:7C:14:81:85:8D:B3:9D:9B:F6:12:AF:0E:99:7C:12:D2:84
X509v3 Authority Key Identifier:
keyid:D7:0B:07:45:9E:2F:11:6F:B5:A9:7F:11:BA:E7:5C:0D:B4:91:C1:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1wsHRZ4vEW-1qX8RuudcDbSRwZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/d06f5f-ad69-4885-8c71-aace70abc6a0/1/34mBfBSBhY2znZv2Eq8OmXwS0oQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/d06f5f-ad69-4885-8c71-aace70abc6a0/1/1wsHRZ4vEW-1qX8RuudcDbSRwZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.22.0.0/22
185.241.64.0/22
IPv6:
2a0c:9c80::/29
Signature Algorithm: sha256WithRSAEncryption
4d:d9:19:07:9f:48:dc:09:6c:df:04:bb:63:50:6e:48:f3:de:
fc:73:2d:44:3c:c1:1a:77:4c:0d:12:99:3d:38:3b:d2:64:f8:
17:7d:a9:1d:58:5d:6f:c7:62:a3:b3:f2:0e:e6:cc:7b:10:93:
de:1e:77:4e:e8:a9:89:2d:a7:44:72:53:64:13:54:f0:8a:76:
2f:a5:1b:82:5c:ee:6e:b2:e8:60:d0:66:ac:d9:ce:f5:b3:03:
62:e7:7d:36:92:d8:9e:99:1c:9d:4d:fd:a0:66:ac:3c:47:0b:
c6:93:14:27:c4:cc:87:20:94:f6:d3:55:5f:c2:c8:79:6c:48:
65:6c:16:6c:17:86:e3:09:ba:45:93:07:af:69:37:e7:fd:99:
0f:05:96:4c:4a:74:4d:ed:83:82:32:3c:a4:95:ba:c7:62:5d:
4c:5c:31:ba:df:92:6c:97:5c:d9:7e:c5:94:a7:22:c2:ec:f4:
0b:0c:2f:43:9f:58:f2:68:56:d1:55:f9:3a:01:46:bb:fb:57:
88:5a:ac:1a:b0:7f:dd:00:9b:fe:9c:c2:fa:02:56:b1:5e:72:
f6:ef:3f:2f:60:72:9f:fb:23:59:51:29:26:09:48:40:d8:66:
23:d0:77:5a:5e:e9:4a:88:36:ec:bb:92:a3:d8:d9:81:52:86:
0d:59:5d:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 22 04:36:29 2024 by rpki-client on console-ams.rpki-client.org