Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/344d24-2e11-466d-8ade-38e846148c78/1/fe6Yy9korup9F2kMZiiTL7BvA3M.roa
File: fe6Yy9korup9F2kMZiiTL7BvA3M.roa (raw, json)
Hash identifier: qqRxkLVN8S1ZpqkTvz7EZDtPY7vfUE+45rJQBLBdb7A=
Subject key identifier: 7D:EE:98:CB:D9:28:AE:EA:7D:17:69:0C:66:28:93:2F:B0:6F:03:73
Certificate issuer: /CN=1aa0a328c6fe0f1bca5e6599042dff59e513b25d
Certificate serial: 018CC4939B34774E1B73E6976FCF2EA5F7DD
Authority key identifier: 1A:A0:A3:28:C6:FE:0F:1B:CA:5E:65:99:04:2D:FF:59:E5:13:B2:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GqCjKMb-DxvKXmWZBC3_WeUTsl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/344d24-2e11-466d-8ade-38e846148c78/1/fe6Yy9korup9F2kMZiiTL7BvA3M.roa
Signing time: Mon 01 Jan 2024 10:30:57 +0000
ROA not before: Mon 01 Jan 2024 10:30:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210771
IP address blocks: 185.252.6.0/24 maxlen: 24
185.252.7.0/24 maxlen: 24
185.252.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/344d24-2e11-466d-8ade-38e846148c78/1/GqCjKMb-DxvKXmWZBC3_WeUTsl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/344d24-2e11-466d-8ade-38e846148c78/1/GqCjKMb-DxvKXmWZBC3_WeUTsl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/GqCjKMb-DxvKXmWZBC3_WeUTsl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Jun 2024 09:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:9b:34:77:4e:1b:73:e6:97:6f:cf:2e:a5:f7:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1aa0a328c6fe0f1bca5e6599042dff59e513b25d
Validity
Not Before: Jan 1 10:30:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7dee98cbd928aeea7d17690c6628932fb06f0373
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ae:37:be:96:62:3d:5e:dd:e6:f6:7f:d3:b2:
95:39:15:a4:c6:45:49:29:c7:1f:88:31:a1:e7:98:
1a:9a:ad:99:34:47:37:40:02:2f:cd:85:e5:16:a2:
16:7e:53:a3:74:49:04:b4:0c:ce:cd:88:37:14:f9:
bf:5c:94:f5:6e:57:43:7b:46:5f:9a:96:7f:2a:71:
e2:5d:29:66:36:d7:33:2c:7c:4e:5b:6c:f7:f9:f2:
2d:72:01:93:44:19:3e:7d:e9:ac:59:51:10:36:03:
04:22:87:fc:6e:23:39:de:15:b6:1d:bc:1e:01:c6:
ea:3b:c6:cd:c8:d7:a4:c9:2f:63:a9:0a:9c:33:03:
cd:72:db:ad:13:ec:b9:b1:ce:e0:17:1d:f1:c0:eb:
32:ef:13:c9:c9:7a:94:3d:93:df:ba:f5:60:7e:34:
6a:73:57:15:28:7c:a9:a8:f7:04:77:4a:a5:67:85:
ec:f6:14:a0:48:70:12:bc:1d:cf:8f:96:07:60:4d:
11:0d:97:15:ae:6f:ff:c5:fa:ae:ed:a8:17:1c:c3:
d2:17:2b:8a:ea:98:ce:f2:39:18:96:13:e5:5c:9c:
13:b0:87:09:c8:ea:fa:98:f4:55:a9:ba:95:5e:7f:
13:b1:c9:67:5c:9f:71:d8:88:45:9b:8c:f3:42:93:
62:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:EE:98:CB:D9:28:AE:EA:7D:17:69:0C:66:28:93:2F:B0:6F:03:73
X509v3 Authority Key Identifier:
keyid:1A:A0:A3:28:C6:FE:0F:1B:CA:5E:65:99:04:2D:FF:59:E5:13:B2:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GqCjKMb-DxvKXmWZBC3_WeUTsl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/344d24-2e11-466d-8ade-38e846148c78/1/fe6Yy9korup9F2kMZiiTL7BvA3M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/344d24-2e11-466d-8ade-38e846148c78/1/GqCjKMb-DxvKXmWZBC3_WeUTsl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.252.5.0-185.252.7.255
Signature Algorithm: sha256WithRSAEncryption
18:00:fa:61:46:74:22:8b:98:24:10:e8:c4:c7:81:81:2f:40:
d8:13:b1:55:ca:8d:1e:70:53:5d:ae:fe:7f:b1:50:be:af:56:
c9:41:db:25:e4:7b:24:26:7e:01:c1:1f:d0:f8:7e:ee:09:be:
8e:a2:c3:62:f0:a3:82:8d:59:83:ab:df:fc:91:22:b6:0e:51:
cb:ee:aa:5f:e3:ed:ba:55:fb:bc:d1:88:d1:27:ef:4e:aa:40:
6f:6d:a6:64:69:28:ea:d9:6f:e5:6d:a6:d3:51:ca:e8:dc:75:
b7:48:d2:df:58:3d:4c:2a:ba:fc:e2:64:db:b3:9f:3b:3e:ce:
00:77:5a:13:4c:94:fe:1e:eb:0a:ef:6b:aa:f8:c3:0a:ce:6b:
70:8d:a5:f0:0d:9c:22:34:39:c5:02:8a:23:d6:0d:11:26:9d:
bd:06:16:2b:a0:9e:60:71:aa:bf:dd:7d:39:1e:e7:6a:dc:84:
eb:93:d5:27:c1:e8:67:41:d5:e5:85:db:94:30:10:0c:12:ca:
0f:5f:3c:08:51:12:5b:85:8a:5f:8e:f2:b2:f6:05:f7:fd:d5:
a7:c4:0c:dc:dc:fd:f7:15:16:59:17:7f:24:08:d3:5e:20:f2:
96:13:8f:43:19:c1:23:76:a9:ea:21:26:b6:39:c5:f3:c1:03:
9e:a3:98:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 16:47:13 2024 by rpki-client on console-fra.rpki-client.org