Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/1dc5f4-ff5d-45d8-91cd-80532dd74d4d/1/x6c1W3kCWJ8cfEwRVYapdxumIYk.roa
File: x6c1W3kCWJ8cfEwRVYapdxumIYk.roa (raw, json)
Hash identifier: rrNsVR0a7ChanEPuXqDSEPISqIuMbZPoLBXKKWGvSuo=
Subject key identifier: C7:A7:35:5B:79:02:58:9F:1C:7C:4C:11:55:86:A9:77:1B:A6:21:89
Certificate issuer: /CN=67c008dc0bf0ad2233f4e0d658a714a45b48a1c4
Certificate serial: 0190F7DC3E234A7E2932DC74FB555423A08B
Authority key identifier: 67:C0:08:DC:0B:F0:AD:22:33:F4:E0:D6:58:A7:14:A4:5B:48:A1:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z8AI3AvwrSIz9ODWWKcUpFtIocQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/1dc5f4-ff5d-45d8-91cd-80532dd74d4d/1/x6c1W3kCWJ8cfEwRVYapdxumIYk.roa
Signing time: Sun 28 Jul 2024 05:42:04 +0000
ROA not before: Sun 28 Jul 2024 05:42:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3311
IP address blocks: 185.106.244.0/24 maxlen: 24
185.106.245.0/24 maxlen: 24
185.106.246.0/24 maxlen: 24
185.106.247.0/24 maxlen: 24
185.118.120.0/24 maxlen: 24
185.118.121.0/24 maxlen: 24
185.118.122.0/24 maxlen: 24
185.118.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/1dc5f4-ff5d-45d8-91cd-80532dd74d4d/1/Z8AI3AvwrSIz9ODWWKcUpFtIocQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/1dc5f4-ff5d-45d8-91cd-80532dd74d4d/1/Z8AI3AvwrSIz9ODWWKcUpFtIocQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z8AI3AvwrSIz9ODWWKcUpFtIocQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 06:21:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:f7:dc:3e:23:4a:7e:29:32:dc:74:fb:55:54:23:a0:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67c008dc0bf0ad2233f4e0d658a714a45b48a1c4
Validity
Not Before: Jul 28 05:42:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c7a7355b7902589f1c7c4c115586a9771ba62189
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:0f:72:e9:33:15:71:ab:ae:ee:f7:e5:53:b8:
b5:1c:e0:92:8f:2b:8c:39:8f:b8:fa:5f:64:68:79:
2e:39:7a:2b:f0:84:06:9e:cc:bb:4f:c9:08:94:a6:
03:6e:fd:19:fb:95:7f:a4:75:dc:5a:78:aa:2e:4f:
61:50:f5:45:56:43:cb:8d:05:95:5d:fe:bc:20:52:
02:3f:c6:f9:73:59:19:37:2c:d3:51:01:83:08:e6:
31:5a:8b:30:62:82:04:13:ab:6e:d0:1c:7c:9e:f6:
73:8e:b4:18:80:14:2e:d3:d2:0c:7c:8c:03:b7:5c:
99:49:0e:a5:5d:a9:96:c3:28:81:9e:c3:24:3b:a7:
34:72:66:05:45:39:9f:90:4b:d4:71:f3:f8:17:20:
4c:b2:da:89:3b:94:25:4d:5e:25:18:f6:03:af:0b:
53:42:ee:06:74:e5:aa:52:79:31:fc:16:32:de:41:
93:f6:56:a7:e3:66:32:be:27:9e:f4:fd:92:06:e4:
ca:92:f8:d3:36:22:a1:4c:c1:9f:51:50:51:39:b4:
b3:db:58:05:1d:26:d3:e2:1e:d1:90:63:d2:82:c1:
7f:c2:3a:c6:7a:f6:ca:10:15:ac:94:8b:6a:10:87:
4f:d4:b4:99:7a:9f:a7:52:8a:e8:03:be:9d:8f:23:
ec:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:A7:35:5B:79:02:58:9F:1C:7C:4C:11:55:86:A9:77:1B:A6:21:89
X509v3 Authority Key Identifier:
keyid:67:C0:08:DC:0B:F0:AD:22:33:F4:E0:D6:58:A7:14:A4:5B:48:A1:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z8AI3AvwrSIz9ODWWKcUpFtIocQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/1dc5f4-ff5d-45d8-91cd-80532dd74d4d/1/x6c1W3kCWJ8cfEwRVYapdxumIYk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/1dc5f4-ff5d-45d8-91cd-80532dd74d4d/1/Z8AI3AvwrSIz9ODWWKcUpFtIocQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.106.244.0/22
185.118.120.0/22
Signature Algorithm: sha256WithRSAEncryption
42:33:fa:dc:36:a6:6e:69:f7:24:40:ee:f7:98:ec:03:0c:c3:
cd:fd:e3:ab:3f:6e:41:75:f5:b3:83:af:a1:ae:45:38:81:41:
ae:5a:59:d3:72:e2:10:91:0e:bf:eb:87:4d:3f:53:e8:22:41:
ab:5e:cb:83:6a:3e:54:22:6b:4a:ef:d6:86:04:a9:9e:a2:f2:
cd:74:73:8c:bb:d7:d8:72:ba:52:5e:3a:86:26:d8:4a:e5:82:
e9:29:52:61:a3:96:a7:27:8f:9a:3f:9b:de:a7:45:dd:41:00:
39:46:43:d2:0c:2f:ee:04:a1:2d:25:c2:72:0c:58:fe:b6:c6:
53:ae:40:54:9b:54:dc:8c:96:48:e5:68:f6:56:a4:52:f3:6f:
cc:e4:5c:cf:ea:3c:2c:1d:fc:c2:48:71:ff:f4:a3:2f:4e:1d:
0b:a0:62:b6:2b:24:04:0c:f2:cb:42:cb:c2:30:7d:f8:66:a7:
27:1e:9c:cb:17:4f:9b:db:2e:bd:b9:3b:fb:f3:f2:37:45:58:
5b:a5:4a:f8:91:5c:3a:9c:6e:dd:d5:a0:12:b8:df:94:a0:c4:
5b:ba:d3:72:31:de:55:f7:de:a9:5c:81:bc:d4:26:c9:4e:3d:
05:4e:05:5d:eb:e7:d8:b2:32:43:34:01:be:80:17:e8:12:30:
7f:3d:32:8d
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZD33D4jSn4pMtx0+1VUI6CLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3YzAwOGRjMGJmMGFkMjIzM2Y0ZTBkNjU4YTcxNGE0NWI0
OGExYzQwHhcNMjQwNzI4MDU0MjA0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjN2E3MzU1Yjc5MDI1ODlmMWM3YzRjMTE1NTg2YTk3NzFiYTYyMTg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsw9y6TMVcauu7vflU7i1HOCSjyuM
OY+4+l9kaHkuOXor8IQGnsy7T8kIlKYDbv0Z+5V/pHXcWniqLk9hUPVFVkPLjQWV
Xf68IFICP8b5c1kZNyzTUQGDCOYxWoswYoIEE6tu0Bx8nvZzjrQYgBQu09IMfIwD
t1yZSQ6lXamWwyiBnsMkO6c0cmYFRTmfkEvUcfP4FyBMstqJO5QlTV4lGPYDrwtT
Qu4GdOWqUnkx/BYy3kGT9lan42Yyviee9P2SBuTKkvjTNiKhTMGfUVBRObSz21gF
HSbT4h7RkGPSgsF/wjrGevbKEBWslItqEIdP1LSZep+nUoroA76djyPsnwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFMenNVt5AlifHHxMEVWGqXcbpiGJMB8GA1UdIwQY
MBaAFGfACNwL8K0iM/Tg1linFKRbSKHEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjhBSTNBdndyU0l6OU9EV1dLY1VwRnRJb2NRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8xZGM1ZjQtZmY1ZC00NWQ4LTkxY2Qt
ODA1MzJkZDc0ZDRkLzEveDZjMVcza0NXSjhjZkV3UlZZYXBkeHVtSVlrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi8xZGM1ZjQtZmY1ZC00NWQ4LTkxY2QtODA1MzJkZDc0ZDRk
LzEvWjhBSTNBdndyU0l6OU9EV1dLY1VwRnRJb2NRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCuWr0AwQC
uXZ4MA0GCSqGSIb3DQEBCwUAA4IBAQBCM/rcNqZuafckQO73mOwDDMPN/eOrP25B
dfWzg6+hrkU4gUGuWlnTcuIQkQ6/64dNP1PoIkGrXsuDaj5UImtK79aGBKmeovLN
dHOMu9fYcrpSXjqGJthK5YLpKVJho5anJ4+aP5vep0XdQQA5RkPSDC/uBKEtJcJy
DFj+tsZTrkBUm1TcjJZI5Wj2VqRS82/M5FzP6jwsHfzCSHH/9KMvTh0LoGK2KyQE
DPLLQsvCMH34ZqcnHpzLF0+b2y69uTv78/I3RVhbpUr4kVw6nG7d1aASuN+UoMRb
utNyMd5V996pXIG81CbJTj0FTgVd6+fYsjJDNAG+gBfoEjB/PTKN
-----END CERTIFICATE-----
Generated at Sat Sep 28 12:39:00 2024 by rpki-client on console-ams.rpki-client.org