Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/51608f-fd4b-4268-a6e3-5ecb21fcfa75/1/IsgfmzBuqJDiqWtKq9s6eT_2c_A.roa
File: IsgfmzBuqJDiqWtKq9s6eT_2c_A.roa (raw, json)
Hash identifier: w0IVfMOTudY1G9SyCcD6LLrDqH+4dyUmJhO1XhTukcc=
Subject key identifier: 22:C8:1F:9B:30:6E:A8:90:E2:A9:6B:4A:AB:DB:3A:79:3F:F6:73:F0
Certificate issuer: /CN=f25d9db2448fe97b9d17a44be5d644848fa018e1
Certificate serial: 018CC5DC309D544291FAF78C9988E5082D1B
Authority key identifier: F2:5D:9D:B2:44:8F:E9:7B:9D:17:A4:4B:E5:D6:44:84:8F:A0:18:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8l2dskSP6XudF6RL5dZEhI-gGOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/51608f-fd4b-4268-a6e3-5ecb21fcfa75/1/IsgfmzBuqJDiqWtKq9s6eT_2c_A.roa
Signing time: Mon 01 Jan 2024 16:29:51 +0000
ROA not before: Mon 01 Jan 2024 16:29:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57090
IP address blocks: 194.53.208.0/22 maxlen: 24
194.53.209.0/24 maxlen: 24
194.53.210.0/23 maxlen: 24
194.53.211.0/24 maxlen: 24
185.143.30.0/23 maxlen: 24
185.143.31.0/24 maxlen: 24
185.143.28.0/22 maxlen: 24
185.143.29.0/24 maxlen: 24
2a03:a8e0::/32 maxlen: 48
2001:67c:28f0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/51608f-fd4b-4268-a6e3-5ecb21fcfa75/1/8l2dskSP6XudF6RL5dZEhI-gGOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/51608f-fd4b-4268-a6e3-5ecb21fcfa75/1/8l2dskSP6XudF6RL5dZEhI-gGOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8l2dskSP6XudF6RL5dZEhI-gGOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 15:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:30:9d:54:42:91:fa:f7:8c:99:88:e5:08:2d:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f25d9db2448fe97b9d17a44be5d644848fa018e1
Validity
Not Before: Jan 1 16:29:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=22c81f9b306ea890e2a96b4aabdb3a793ff673f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:6a:d8:94:67:23:5b:3c:ae:28:fb:b2:d8:45:
e0:51:4e:65:07:a3:63:6f:f9:02:1b:fa:58:21:9a:
93:ac:29:73:9f:6e:6f:2d:7b:57:e1:c6:b7:d9:17:
61:31:6c:39:2e:26:6a:83:82:f8:39:15:57:46:7f:
33:1b:4a:69:c5:f3:2c:a1:69:2f:f7:0e:dd:c6:5e:
fe:d7:da:84:d2:4f:79:a8:34:53:01:4f:79:30:03:
d2:11:36:77:10:3d:ef:41:91:3d:2e:2a:3b:b5:9f:
54:86:46:02:78:73:4e:e1:26:2c:dc:26:b6:2c:4b:
98:e2:13:a5:f3:75:60:84:85:2c:60:16:c6:db:8c:
c3:09:77:e8:ce:08:5a:97:3a:4e:3c:b5:27:58:21:
da:98:5c:7e:f0:3f:5f:8d:f5:4f:23:ae:3c:d9:db:
6a:6a:26:0e:ea:26:e6:f7:b8:21:27:8f:ac:20:8b:
90:98:30:33:66:1e:1b:0b:37:3f:fe:98:67:39:34:
0f:21:c2:44:62:41:68:0a:8e:ab:4b:95:1a:b5:c2:
e8:b0:d6:6b:2e:81:78:88:52:1e:2c:7c:9d:ef:53:
a2:09:a2:ba:2b:cd:61:97:25:18:af:9e:11:77:ae:
41:a5:64:f3:58:49:a5:00:1a:a7:2c:0a:99:05:b7:
72:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:C8:1F:9B:30:6E:A8:90:E2:A9:6B:4A:AB:DB:3A:79:3F:F6:73:F0
X509v3 Authority Key Identifier:
keyid:F2:5D:9D:B2:44:8F:E9:7B:9D:17:A4:4B:E5:D6:44:84:8F:A0:18:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8l2dskSP6XudF6RL5dZEhI-gGOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/51608f-fd4b-4268-a6e3-5ecb21fcfa75/1/IsgfmzBuqJDiqWtKq9s6eT_2c_A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/51608f-fd4b-4268-a6e3-5ecb21fcfa75/1/8l2dskSP6XudF6RL5dZEhI-gGOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.143.28.0/22
194.53.208.0/22
IPv6:
2001:67c:28f0::/48
2a03:a8e0::/32
Signature Algorithm: sha256WithRSAEncryption
72:c3:a3:8d:7a:5d:65:9d:72:73:cd:76:78:05:70:b4:15:49:
91:e8:16:03:74:11:41:02:08:85:62:67:a7:43:6e:2b:a6:dc:
8c:04:9a:23:3e:26:64:a2:2d:b9:00:c1:98:c6:52:65:86:81:
51:e3:5b:bc:f0:28:bb:d8:aa:db:73:71:23:8f:5f:1a:a0:b6:
58:a6:de:c3:01:0a:88:63:fc:9d:bb:1a:8d:4a:8f:b2:e8:a9:
60:96:19:58:51:40:4c:f5:9f:8c:6c:b1:46:14:65:d8:59:27:
d2:0f:b5:e2:e0:6d:97:66:09:a1:c9:1b:66:4b:35:15:cc:c9:
ec:9e:6c:55:80:d4:cf:3d:ad:25:69:fc:40:fe:7a:2b:6c:42:
2b:a8:70:63:02:03:71:80:b7:0d:f2:12:bf:02:c2:03:70:f7:
01:17:cc:38:e3:b4:19:b3:e6:64:be:a2:88:2f:25:1d:17:82:
12:94:26:b8:c8:62:9a:da:87:e6:8c:d5:a6:2e:11:5d:3b:f3:
b5:02:a1:32:ba:2e:43:0e:79:9c:97:ed:62:89:03:ff:36:42:
a9:82:51:b0:98:8a:cb:ea:57:55:62:ef:1a:2c:88:44:fa:a3:
21:06:06:bc:68:5e:f5:82:bd:bd:02:c9:83:b3:28:5f:06:b1:
5c:c9:58:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 20:56:39 2024 by rpki-client on console-ams.rpki-client.org