Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/c5f714-472c-4856-aa4b-9b21b6f6679a/1/lCoolx4zClFJoN68_wU2eL8s_ec.roa
File: lCoolx4zClFJoN68_wU2eL8s_ec.roa (raw, json)
Hash identifier: TgxfQ8bHPF58WiQDWxAFyLyj1pPzSeAl55PGRLvDJnc=
Subject key identifier: 94:2A:28:97:1E:33:0A:51:49:A0:DE:BC:FF:05:36:78:BF:2C:FD:E7
Certificate issuer: /CN=f4c6b7dd5175be8db7a0522f7d4e41c5c42c6b29
Certificate serial: 018FC402A928E0DEDFA796B03D80A8C3EC4C
Authority key identifier: F4:C6:B7:DD:51:75:BE:8D:B7:A0:52:2F:7D:4E:41:C5:C4:2C:6B:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Ma33VF1vo23oFIvfU5BxcQsayk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/c5f714-472c-4856-aa4b-9b21b6f6679a/1/lCoolx4zClFJoN68_wU2eL8s_ec.roa
Signing time: Wed 29 May 2024 11:00:59 +0000
ROA not before: Wed 29 May 2024 11:00:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212136
IP address blocks: 5.172.178.0/24 maxlen: 24
81.22.46.0/24 maxlen: 24
81.22.47.0/24 maxlen: 24
185.228.248.0/24 maxlen: 24
185.247.187.0/24 maxlen: 24
194.31.9.0/24 maxlen: 24
213.232.254.0/24 maxlen: 24
2a10:aa80::/30 maxlen: 30
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/c5f714-472c-4856-aa4b-9b21b6f6679a/1/9Ma33VF1vo23oFIvfU5BxcQsayk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/c5f714-472c-4856-aa4b-9b21b6f6679a/1/9Ma33VF1vo23oFIvfU5BxcQsayk.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Ma33VF1vo23oFIvfU5BxcQsayk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 14:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:c4:02:a9:28:e0:de:df:a7:96:b0:3d:80:a8:c3:ec:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4c6b7dd5175be8db7a0522f7d4e41c5c42c6b29
Validity
Not Before: May 29 11:00:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=942a28971e330a5149a0debcff053678bf2cfde7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:b6:dd:03:ac:60:4d:cb:fb:1d:57:aa:98:57:
c6:e1:33:3c:b9:6c:8e:aa:f9:7c:68:ac:e9:3b:2d:
6f:d3:dc:22:45:c0:7d:1e:2b:ff:25:85:27:ff:9a:
69:70:9e:47:12:cf:13:5a:32:90:59:da:1d:38:02:
de:c6:e6:70:3d:a8:ad:34:25:38:b5:91:8c:17:a9:
2c:85:47:93:ec:41:f5:cc:3c:4d:e8:0f:c4:84:3c:
50:a4:17:b2:53:38:43:60:73:69:a5:aa:7d:b0:3c:
24:9c:6f:1b:7f:d3:62:26:dc:87:5f:fc:5e:e1:e3:
c4:59:67:59:65:61:ef:b2:bc:6d:f5:be:53:6a:5e:
1e:09:10:32:80:b6:8f:cd:c4:3e:f1:da:b9:81:e5:
96:ec:ed:37:ea:22:4b:48:1b:0f:c6:94:79:87:af:
29:63:7c:b4:a1:d6:2a:a0:0e:ff:4d:9f:62:9e:66:
8a:75:aa:86:39:ca:43:4f:de:c9:89:cf:88:01:37:
ab:d8:a0:b7:4b:5d:77:f8:bd:84:49:d4:23:6a:13:
e1:e4:88:86:45:91:d1:a2:88:0a:17:32:6f:04:12:
99:e0:79:cf:60:4a:e0:dd:a4:39:78:92:fe:51:d2:
92:a4:f5:d9:f2:a7:d9:fd:31:c7:b9:d1:d4:34:09:
0e:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:2A:28:97:1E:33:0A:51:49:A0:DE:BC:FF:05:36:78:BF:2C:FD:E7
X509v3 Authority Key Identifier:
keyid:F4:C6:B7:DD:51:75:BE:8D:B7:A0:52:2F:7D:4E:41:C5:C4:2C:6B:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Ma33VF1vo23oFIvfU5BxcQsayk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c5f714-472c-4856-aa4b-9b21b6f6679a/1/lCoolx4zClFJoN68_wU2eL8s_ec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c5f714-472c-4856-aa4b-9b21b6f6679a/1/9Ma33VF1vo23oFIvfU5BxcQsayk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.172.178.0/24
81.22.46.0/23
185.228.248.0/24
185.247.187.0/24
194.31.9.0/24
213.232.254.0/24
IPv6:
2a10:aa80::/30
Signature Algorithm: sha256WithRSAEncryption
8c:5f:44:b7:6e:5d:fd:ad:d0:a9:27:3f:42:4d:eb:93:fc:96:
c4:ef:aa:79:ea:bd:a3:d2:52:b4:d6:9c:bf:f7:25:82:e0:e9:
e6:e2:56:92:c0:e7:57:6c:05:21:62:34:60:70:4b:9b:fe:8a:
de:66:af:8b:80:1f:69:61:5a:68:a4:61:c5:e6:b3:fb:58:a1:
f4:d2:ab:34:46:e2:73:36:1c:55:86:43:9d:09:8b:4b:dc:83:
9e:c3:8f:f1:b4:38:ac:69:40:49:c2:08:54:b3:32:f8:e3:7d:
95:23:38:cf:d3:1f:f5:69:a1:5d:82:dd:ad:1b:45:67:bf:a7:
e1:03:c4:7b:81:af:47:f9:50:46:9f:9d:e7:c0:f3:ff:48:96:
bb:d1:0e:54:b7:84:79:2b:1a:3d:25:ce:e5:29:db:99:7c:e7:
82:4b:a8:7f:de:07:b7:49:62:dc:80:0d:52:93:17:63:5f:0a:
6a:4e:3d:ad:c0:9f:0e:3a:57:ae:db:7b:c1:f5:10:3e:65:16:
2d:a1:ee:df:88:bb:6f:ed:0d:6b:0f:8e:43:fc:0f:94:ed:ea:
56:26:be:55:a2:3a:75:24:35:3c:14:98:5c:49:67:57:84:21:
16:ba:d2:09:7d:79:81:ef:98:50:b1:74:63:57:e4:a5:98:7e:
42:0a:1d:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 17:55:04 2024 by rpki-client on console-ams.rpki-client.org