Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/a56723-d37c-417b-a8a1-6e22bf436304/1/6hrV9nDSCYtERzCmY6qJtWEU7mI.roa
File: 6hrV9nDSCYtERzCmY6qJtWEU7mI.roa (raw, json)
Hash identifier: rvb2OuNpD/hZE98z7TOJx9aAMFdorVWpuqrxnTfZpHY=
Subject key identifier: EA:1A:D5:F6:70:D2:09:8B:44:47:30:A6:63:AA:89:B5:61:14:EE:62
Certificate issuer: /CN=1bfe6b9a0e6898a7a2e9d84d3dbf6327b453e662
Certificate serial: 018CC49312AB4F4105B353163CC07625C04E
Authority key identifier: 1B:FE:6B:9A:0E:68:98:A7:A2:E9:D8:4D:3D:BF:63:27:B4:53:E6:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G_5rmg5omKei6dhNPb9jJ7RT5mI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/a56723-d37c-417b-a8a1-6e22bf436304/1/6hrV9nDSCYtERzCmY6qJtWEU7mI.roa
Signing time: Mon 01 Jan 2024 10:30:22 +0000
ROA not before: Mon 01 Jan 2024 10:30:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202753
IP address blocks: 185.133.25.0/24 maxlen: 24
185.133.26.0/23 maxlen: 23
2a00:6700::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/a56723-d37c-417b-a8a1-6e22bf436304/1/G_5rmg5omKei6dhNPb9jJ7RT5mI.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/a56723-d37c-417b-a8a1-6e22bf436304/1/G_5rmg5omKei6dhNPb9jJ7RT5mI.mft
rsync://rpki.ripe.net/repository/DEFAULT/G_5rmg5omKei6dhNPb9jJ7RT5mI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Jun 2024 01:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:12:ab:4f:41:05:b3:53:16:3c:c0:76:25:c0:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bfe6b9a0e6898a7a2e9d84d3dbf6327b453e662
Validity
Not Before: Jan 1 10:30:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ea1ad5f670d2098b444730a663aa89b56114ee62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:ad:b8:92:63:4c:f1:38:b6:2e:cb:45:f6:24:
c1:31:db:09:9d:0c:5f:ce:ac:75:4a:d0:77:3f:2d:
fb:25:76:32:d2:31:b3:32:85:d6:7b:66:fe:60:3a:
e5:d9:63:cb:0c:39:59:61:fa:00:e7:eb:fe:ea:7d:
d6:71:35:ad:50:74:37:38:f9:03:8f:38:9a:1b:fe:
a5:f7:87:66:41:57:e9:78:23:28:3f:9d:ae:5e:de:
93:16:61:a4:08:6e:f9:f5:5f:a4:90:7b:3c:1b:5d:
53:3b:8e:60:a5:4f:43:1c:47:24:e7:26:71:1c:8e:
d7:df:70:76:76:eb:64:29:49:67:b3:78:1e:f5:62:
4d:79:57:d9:c2:53:da:b7:c9:d1:9f:25:5c:6e:b1:
68:aa:e6:13:36:61:34:f9:83:ac:3f:53:ad:0a:34:
df:5d:a2:3a:8d:04:01:8e:6c:c0:46:fc:e5:74:5d:
fe:f2:49:d5:1c:d7:fb:ad:23:4f:70:39:23:e5:49:
4e:98:8e:18:03:25:02:36:e1:9b:ec:fd:54:2f:81:
aa:ed:11:cd:b5:19:b1:7e:02:02:9a:29:f2:81:1e:
7d:f1:55:b0:26:a8:d3:80:8d:32:d0:74:57:1f:14:
cf:c3:5d:10:f4:5e:93:10:c7:07:22:39:0f:7d:e6:
97:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:1A:D5:F6:70:D2:09:8B:44:47:30:A6:63:AA:89:B5:61:14:EE:62
X509v3 Authority Key Identifier:
keyid:1B:FE:6B:9A:0E:68:98:A7:A2:E9:D8:4D:3D:BF:63:27:B4:53:E6:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G_5rmg5omKei6dhNPb9jJ7RT5mI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/a56723-d37c-417b-a8a1-6e22bf436304/1/6hrV9nDSCYtERzCmY6qJtWEU7mI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/a56723-d37c-417b-a8a1-6e22bf436304/1/G_5rmg5omKei6dhNPb9jJ7RT5mI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.133.25.0-185.133.27.255
IPv6:
2a00:6700::/48
Signature Algorithm: sha256WithRSAEncryption
27:3c:ac:42:52:80:0f:e2:7c:79:06:37:32:77:57:d8:18:40:
a6:fe:17:26:74:c3:80:72:41:42:7b:50:40:a6:4a:93:ec:a1:
44:1c:52:6f:6a:49:ce:a3:bf:04:1b:c7:c2:4a:2e:26:60:a2:
2f:d2:e3:76:a6:dc:a9:b2:5e:27:c1:88:1f:d3:8f:95:96:bf:
b7:ac:d4:4c:50:50:36:90:8a:8c:59:87:d4:70:48:a6:b7:50:
2c:76:41:44:72:da:39:45:fe:50:b8:ba:1f:e7:6e:aa:1a:3b:
0d:7a:63:16:3f:db:a1:d3:d0:2d:19:18:97:22:63:9c:3f:54:
63:69:51:0d:63:e1:78:8d:53:1c:22:1d:6e:a4:f2:ea:7a:9b:
77:64:8e:cd:0a:3d:32:aa:14:6a:2c:e6:e1:49:93:bb:21:52:
3c:16:14:0a:b3:48:73:05:53:94:6c:04:39:98:bd:19:10:2c:
d4:7c:48:f9:af:30:7c:72:7a:3e:3d:6d:b8:33:46:33:fe:77:
e5:ee:7b:43:0b:b4:a5:db:94:48:e1:01:8e:77:2e:05:48:c7:
a0:6a:77:cd:e1:d7:04:86:7c:a0:16:89:c6:f9:63:39:4e:4b:
40:36:6d:d5:60:1c:66:e6:c4:34:60:0e:06:d8:1f:d1:2e:02:
9e:38:10:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 20 10:37:08 2024 by rpki-client on console-ams.rpki-client.org