Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/wV6q1sZiksTDQhNJQ3crRvbxxUQ.roa
File: wV6q1sZiksTDQhNJQ3crRvbxxUQ.roa (download)
Hash identifier: wO/eAom9ltoGC58t/+eguZAXbhvEPqRjaH9Ki1y5iYo=
Subject key identifier: C1:5E:AA:D6:C6:62:92:C4:C3:42:13:49:43:77:2B:46:F6:F1:C5:44
Certificate issuer: /CN=9295b1f1dcd8fa6ac1ef788278c489e15eacae70
Certificate serial: 0185DE3D99EBAC6EBF616193B07EB4DC3E8D
Authority key identifier: 92:95:B1:F1:DC:D8:FA:6A:C1:EF:78:82:78:C4:89:E1:5E:AC:AE:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kpWx8dzY-mrB73iCeMSJ4V6srnA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/wV6q1sZiksTDQhNJQ3crRvbxxUQ.roa
ROA valid until: Mon 01 Jul 2024 00:00:00 +0000
asID: 8560
IP address blocks:
1: 195.20.224.0/19 maxlen: 24
2: 217.72.192.0/20 maxlen: 24
3: 87.106.0.0/16 maxlen: 24
4: 81.173.112.0/22 maxlen: 24
5: 82.165.0.0/16 maxlen: 24
6: 217.160.0.0/16 maxlen: 24
7: 212.227.0.0/16 maxlen: 24
8: 157.97.105.0/24 maxlen: 32
9: 157.97.104.0/24 maxlen: 32
10: 217.160.150.0/23 maxlen: 32
11: 213.165.64.0/19 maxlen: 24
12: 2001:8d8::/32 maxlen: 48
Validation: OK
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:de:3d:99:eb:ac:6e:bf:61:61:93:b0:7e:b4:dc:3e:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9295b1f1dcd8fa6ac1ef788278c489e15eacae70
Validity
Not Before: Jan 23 10:47:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c15eaad6c66292c4c342134943772b46f6f1c544
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:67:27:70:b9:69:a1:f6:86:57:81:67:ea:84:
d7:fc:4e:ce:b2:04:44:ad:0b:a7:2d:47:12:47:17:
ba:e3:62:fc:85:2f:d1:0f:b6:55:ef:5b:ad:40:78:
14:ab:9a:3c:55:18:97:37:59:5b:e8:9f:79:10:84:
9a:9b:63:bd:d1:64:56:90:72:e3:c8:37:24:c7:91:
2d:67:57:16:40:98:6e:ce:1e:68:0a:d5:e2:ec:cb:
41:bf:7e:f4:46:bd:d2:39:0b:d8:09:79:ba:9b:bf:
32:f7:0d:b4:48:0a:7a:1b:c6:a3:f6:e5:18:ba:e5:
9c:bf:c5:c0:c0:b9:bf:31:54:fc:ee:8e:32:54:c8:
b5:33:65:f0:e7:8a:4b:88:0f:6c:98:4d:e9:6c:37:
83:ee:58:d4:1a:e8:33:3c:86:f1:97:c2:0e:a3:67:
ae:52:13:75:15:7d:b7:4f:ee:58:cc:0e:7c:68:e9:
ed:5a:2f:d5:72:6c:cf:9a:81:6f:8e:5a:a8:0d:72:
3b:93:94:57:b3:4a:64:c4:f1:e0:1a:57:33:a7:a1:
66:d7:ca:98:96:93:d0:f1:a9:77:69:b4:d2:f9:1e:
ec:72:9f:f5:7c:2b:bc:65:5e:f1:10:b4:91:3f:17:
c7:dd:45:83:73:45:c8:0f:0e:f2:d3:49:3b:98:03:
f6:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:5E:AA:D6:C6:62:92:C4:C3:42:13:49:43:77:2B:46:F6:F1:C5:44
X509v3 Authority Key Identifier:
keyid:92:95:B1:F1:DC:D8:FA:6A:C1:EF:78:82:78:C4:89:E1:5E:AC:AE:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kpWx8dzY-mrB73iCeMSJ4V6srnA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/wV6q1sZiksTDQhNJQ3crRvbxxUQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/kpWx8dzY-mrB73iCeMSJ4V6srnA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.173.112.0/22
82.165.0.0/16
87.106.0.0/16
157.97.104.0/23
195.20.224.0/19
212.227.0.0/16
213.165.64.0/19
217.72.192.0/20
217.160.0.0/16
IPv6:
2001:8d8::/32
Signature Algorithm: sha256WithRSAEncryption
12:87:42:6a:16:ec:f5:0c:09:f7:44:78:10:e5:2c:3e:79:d1:
17:13:fe:47:3e:f4:5c:6e:07:45:ab:77:6f:77:47:c2:03:2b:
67:05:95:94:19:67:e1:e2:16:16:09:df:5f:98:71:a8:0f:e6:
8f:97:23:9b:b7:51:7f:3e:9e:8a:f7:d0:6d:57:86:e6:ce:dc:
a8:29:a1:30:be:bf:81:e3:c0:61:54:fa:13:ce:d7:6b:72:0d:
e4:01:d5:71:8c:ab:04:7e:f1:a2:96:ae:4a:ae:14:54:a8:e8:
d4:2d:7c:a4:1f:1e:82:5e:d9:a0:d3:d0:94:59:f2:9b:00:bf:
08:1b:d6:fc:94:44:17:de:72:a1:82:84:43:10:6d:aa:23:b0:
2e:fd:3a:0c:da:18:a9:c1:af:73:4f:34:24:12:6b:fb:ba:8a:
2f:f7:ba:8b:a2:d4:b8:a7:8d:6b:38:5d:e5:ec:d7:89:03:17:
31:61:4c:ba:2d:9b:93:a7:16:69:a9:87:10:8b:6b:bb:11:b4:
72:a6:52:eb:25:d1:03:70:59:40:d4:b0:d2:49:9a:88:71:98:
31:e0:55:62:d6:6f:c9:44:55:ca:06:3b:7e:bd:c3:00:70:0a:
89:84:71:0c:dd:5a:7b:b2:ce:df:e1:50:52:ac:78:a0:4a:25:
32:cb:d5:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 23 13:38:14 2023 by rpki-client.