Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/41c111-6505-41a4-9e67-3b91ff9a1acd/1/R4hRYfpOK-d5o8jG0_EdRBQyvdg.roa
File: R4hRYfpOK-d5o8jG0_EdRBQyvdg.roa (raw, json)
Hash identifier: zXwiOBlGRztJJQZ1KW3qBcoNR45+mqFJY5uuXF7gnfU=
Subject key identifier: 47:88:51:61:FA:4E:2B:E7:79:A3:C8:C6:D3:F1:1D:44:14:32:BD:D8
Certificate issuer: /CN=bea7b67777b9a6832933576497b46a9b16304cd9
Certificate serial: 018CC424AF86C40C891A71A0C099A8D5E3C2
Authority key identifier: BE:A7:B6:77:77:B9:A6:83:29:33:57:64:97:B4:6A:9B:16:30:4C:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vqe2d3e5poMpM1dkl7RqmxYwTNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/41c111-6505-41a4-9e67-3b91ff9a1acd/1/R4hRYfpOK-d5o8jG0_EdRBQyvdg.roa
Signing time: Mon 01 Jan 2024 08:29:47 +0000
ROA not before: Mon 01 Jan 2024 08:29:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197008
IP address blocks: 185.207.16.0/22 maxlen: 22
178.251.116.0/23 maxlen: 23
178.251.118.0/23 maxlen: 23
2a00:ee40:2::/48 maxlen: 48
2a00:ee40:4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/41c111-6505-41a4-9e67-3b91ff9a1acd/1/vqe2d3e5poMpM1dkl7RqmxYwTNk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/41c111-6505-41a4-9e67-3b91ff9a1acd/1/vqe2d3e5poMpM1dkl7RqmxYwTNk.mft
rsync://rpki.ripe.net/repository/DEFAULT/vqe2d3e5poMpM1dkl7RqmxYwTNk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 07:02:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:af:86:c4:0c:89:1a:71:a0:c0:99:a8:d5:e3:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bea7b67777b9a6832933576497b46a9b16304cd9
Validity
Not Before: Jan 1 08:29:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=47885161fa4e2be779a3c8c6d3f11d441432bdd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:0c:01:d3:de:55:12:6a:dc:bf:10:06:ec:84:
b4:05:8e:76:2a:ab:db:91:c5:60:4d:f8:49:b0:64:
7a:b3:06:21:b7:3d:df:20:0b:d4:3d:ee:5f:42:11:
f8:49:de:23:86:e0:c6:bd:27:59:e2:42:b0:d6:4e:
e1:9a:46:c8:49:24:e1:16:54:fb:bd:15:9a:d2:35:
7b:f5:d1:87:c1:de:55:e9:79:a3:38:c0:89:13:39:
c0:69:be:0d:c9:3e:d0:7d:cf:e2:2a:ec:39:28:70:
a1:ad:0f:3f:07:c8:20:80:8e:52:c0:78:12:ac:36:
eb:28:d5:c4:c7:ca:03:33:68:27:d5:17:bc:b7:dd:
67:55:a1:11:94:ee:95:d2:0d:fb:c7:29:31:2c:4b:
72:44:c8:1d:b5:b7:39:ef:cc:ae:8a:c1:03:95:bc:
68:18:21:88:68:ab:96:c4:98:8e:89:1d:87:cd:ad:
7f:e8:92:c3:60:7f:d3:8e:fa:3c:a4:e1:4b:a3:ff:
5a:31:7c:58:75:28:ea:0d:6f:c0:3a:21:e5:33:8a:
97:d4:61:2f:bf:81:97:2d:ba:23:fe:e9:49:6b:4e:
14:30:46:89:23:91:6e:bb:6c:85:80:f4:4a:9a:28:
37:d3:8a:8d:de:ef:c8:5c:57:1b:64:36:6f:f5:88:
8d:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:88:51:61:FA:4E:2B:E7:79:A3:C8:C6:D3:F1:1D:44:14:32:BD:D8
X509v3 Authority Key Identifier:
keyid:BE:A7:B6:77:77:B9:A6:83:29:33:57:64:97:B4:6A:9B:16:30:4C:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vqe2d3e5poMpM1dkl7RqmxYwTNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/41c111-6505-41a4-9e67-3b91ff9a1acd/1/R4hRYfpOK-d5o8jG0_EdRBQyvdg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/41c111-6505-41a4-9e67-3b91ff9a1acd/1/vqe2d3e5poMpM1dkl7RqmxYwTNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.251.116.0/22
185.207.16.0/22
IPv6:
2a00:ee40:2::/48
2a00:ee40:4::/48
Signature Algorithm: sha256WithRSAEncryption
37:96:c1:6f:94:9d:40:7f:11:fe:3a:54:e1:bf:79:44:73:2b:
58:3f:76:c3:81:fe:cc:39:6b:bd:f0:3f:98:a2:77:58:d1:6e:
94:db:7d:ac:77:b1:37:0a:54:7d:00:0c:a1:4d:17:20:80:85:
56:cd:9a:ab:72:8d:f5:a5:03:0f:41:dc:bd:18:9c:c5:3b:39:
8c:7d:ba:80:af:8e:f5:d7:f6:a6:44:9c:b0:d9:4f:cf:42:b5:
91:2d:2a:34:63:ee:21:4b:e6:2e:a2:a4:17:04:f7:2c:9c:fd:
ad:fc:53:73:3b:09:70:de:79:db:48:ae:62:fc:ea:82:ad:38:
b5:7a:5f:fd:3e:02:3a:a7:e7:00:69:72:e6:f3:c9:53:1f:3b:
a5:44:97:24:bd:24:10:50:cf:7f:64:e6:97:f1:62:f8:65:1e:
29:18:1f:6f:66:fe:3e:19:56:a4:f0:67:6b:02:06:c6:43:e7:
6e:39:2a:aa:ba:f2:c7:bc:20:0c:b7:b8:5b:a3:70:b8:25:a0:
89:76:d0:70:5d:3c:94:4a:ca:6d:ad:30:a6:3f:b7:97:31:a7:
0d:9a:3c:2f:b1:ef:8b:02:43:0a:89:c5:38:63:a5:21:2e:a2:
7c:db:ed:89:35:f0:09:64:b2:e4:ac:84:f1:f4:96:dc:af:47:
20:da:fa:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 17:54:31 2024 by rpki-client on console-ams.rpki-client.org