Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/a5ce7e-7d1d-48ef-8f36-0b740a36a8ee/1/6IG-kJgB3qdeIXEaT0_i2dETOjo.roa
File: 6IG-kJgB3qdeIXEaT0_i2dETOjo.roa (raw, json)
Hash identifier: ziouFjR5QzkvWNzoHhdWPW84ucq+NkSgz0mffjAfxko=
Subject key identifier: E8:81:BE:90:98:01:DE:A7:5E:21:71:1A:4F:4F:E2:D9:D1:13:3A:3A
Certificate issuer: /CN=72c6460b4fb1ef46bc7457ff0cf463bdc4e03fa9
Certificate serial: 018CC8DE52A8024A4D11EEBB1E90C02B6E50
Authority key identifier: 72:C6:46:0B:4F:B1:EF:46:BC:74:57:FF:0C:F4:63:BD:C4:E0:3F:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/csZGC0-x70a8dFf_DPRjvcTgP6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/a5ce7e-7d1d-48ef-8f36-0b740a36a8ee/1/6IG-kJgB3qdeIXEaT0_i2dETOjo.roa
Signing time: Tue 02 Jan 2024 06:31:02 +0000
ROA not before: Tue 02 Jan 2024 06:31:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 396982
IP address blocks: 185.81.121.0/24 maxlen: 24
185.81.120.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/a5ce7e-7d1d-48ef-8f36-0b740a36a8ee/1/csZGC0-x70a8dFf_DPRjvcTgP6k.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/a5ce7e-7d1d-48ef-8f36-0b740a36a8ee/1/csZGC0-x70a8dFf_DPRjvcTgP6k.mft
rsync://rpki.ripe.net/repository/DEFAULT/csZGC0-x70a8dFf_DPRjvcTgP6k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:52:a8:02:4a:4d:11:ee:bb:1e:90:c0:2b:6e:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72c6460b4fb1ef46bc7457ff0cf463bdc4e03fa9
Validity
Not Before: Jan 2 06:31:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e881be909801dea75e21711a4f4fe2d9d1133a3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:66:37:da:29:ae:58:ad:03:80:98:36:8d:52:
eb:77:dd:da:8d:05:6d:ee:76:7c:d3:5f:70:50:95:
ce:80:2e:b3:68:a4:eb:d6:0a:b7:f8:25:62:08:4f:
36:2a:bf:32:40:85:d4:0c:08:9d:77:70:48:9f:7e:
1c:22:44:fd:36:51:0a:3b:2b:dd:00:bc:51:fa:f0:
e9:44:ec:4d:50:37:f7:3e:4d:91:b7:ee:51:be:07:
40:9b:0d:7a:19:01:f0:9d:c9:e9:14:7e:cf:31:41:
0b:cc:6f:6f:37:03:f2:c0:c5:6f:eb:8d:25:a2:be:
54:ff:69:b6:8d:16:a2:a7:85:2a:dc:0c:d8:2a:af:
0d:f9:32:f8:63:55:d3:32:7d:43:3b:d5:fe:74:ff:
12:b3:67:fb:11:50:1c:1e:ba:97:ba:26:cd:3e:bf:
50:e4:f8:da:3f:3b:f6:7e:49:86:67:9d:20:d6:e8:
71:32:f7:05:19:56:d8:2b:ab:05:fd:4e:88:2d:59:
ab:1f:63:f6:af:f9:4c:d8:b2:1b:dd:79:83:89:bd:
80:bd:d8:4c:f2:5d:75:f3:38:64:aa:c0:72:07:41:
97:73:14:30:35:45:80:12:44:1f:ef:ee:6a:91:5f:
10:bf:32:59:75:ab:cb:1c:62:05:e8:83:30:08:50:
8f:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:81:BE:90:98:01:DE:A7:5E:21:71:1A:4F:4F:E2:D9:D1:13:3A:3A
X509v3 Authority Key Identifier:
keyid:72:C6:46:0B:4F:B1:EF:46:BC:74:57:FF:0C:F4:63:BD:C4:E0:3F:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/csZGC0-x70a8dFf_DPRjvcTgP6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a5ce7e-7d1d-48ef-8f36-0b740a36a8ee/1/6IG-kJgB3qdeIXEaT0_i2dETOjo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a5ce7e-7d1d-48ef-8f36-0b740a36a8ee/1/csZGC0-x70a8dFf_DPRjvcTgP6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.81.120.0/23
Signature Algorithm: sha256WithRSAEncryption
46:ea:00:b4:db:2d:47:fb:07:e9:c6:f8:bc:8d:f2:8e:77:ed:
90:e8:e0:3c:03:d8:15:bb:4c:1b:5d:84:b0:08:c1:9c:88:b4:
bc:4a:c7:f0:38:0e:b2:5b:6e:47:c9:f9:39:f3:ea:45:a8:34:
9d:67:90:84:b8:a6:03:95:a1:e6:eb:16:b7:1c:52:24:a2:93:
d9:c3:ee:79:b7:e0:68:4e:2a:b4:9d:04:ab:aa:bf:a0:8c:71:
07:a8:fa:1f:fa:aa:82:aa:8f:1d:af:fe:c5:95:87:86:d8:4a:
1a:67:a2:93:b3:30:52:8e:6e:71:b6:ab:81:7d:d9:38:3a:62:
c3:2c:d6:1a:fd:33:4a:c3:70:7f:3c:0a:6b:16:b3:20:b1:84:
52:e3:82:76:29:b3:5a:b0:4d:8a:b6:88:b8:2b:f8:43:ee:e9:
9a:95:0d:3d:9d:bb:4f:b4:71:75:37:57:a0:1d:35:a0:6d:9a:
f9:c3:0b:b8:a0:58:9d:e2:97:ea:88:53:59:d0:16:b3:f2:34:
15:35:1a:cb:67:46:b6:5f:71:c6:fa:13:2b:a4:47:56:40:72:
c5:4d:b6:46:23:c7:7c:83:c2:43:b7:5d:30:4e:e8:95:c6:93:
31:e9:c1:44:b9:e8:fd:66:c3:ce:93:ba:02:ad:d0:a3:5d:0e:
ce:17:1b:fc
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzI3lKoAkpNEe67HpDAK25QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyYzY0NjBiNGZiMWVmNDZiYzc0NTdmZjBjZjQ2M2JkYzRl
MDNmYTkwHhcNMjQwMTAyMDYzMTAyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlODgxYmU5MDk4MDFkZWE3NWUyMTcxMWE0ZjRmZTJkOWQxMTMzYTNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjWY32imuWK0DgJg2jVLrd93ajQVt
7nZ8019wUJXOgC6zaKTr1gq3+CViCE82Kr8yQIXUDAidd3BIn34cIkT9NlEKOyvd
ALxR+vDpROxNUDf3Pk2Rt+5RvgdAmw16GQHwncnpFH7PMUELzG9vNwPywMVv640l
or5U/2m2jRaip4Uq3AzYKq8N+TL4Y1XTMn1DO9X+dP8Ss2f7EVAcHrqXuibNPr9Q
5PjaPzv2fkmGZ50g1uhxMvcFGVbYK6sF/U6ILVmrH2P2r/lM2LIb3XmDib2AvdhM
8l118zhkqsByB0GXcxQwNUWAEkQf7+5qkV8QvzJZdavLHGIF6IMwCFCP4wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOiBvpCYAd6nXiFxGk9P4tnREzo6MB8GA1UdIwQY
MBaAFHLGRgtPse9GvHRX/wz0Y73E4D+pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3NaR0MwLXg3MGE4ZEZmX0RQUmp2Y1RnUDZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS9hNWNlN2UtN2QxZC00OGVmLThmMzYt
MGI3NDBhMzZhOGVlLzEvNklHLWtKZ0IzcWRlSVhFYVQwX2kyZEVUT2pvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS9hNWNlN2UtN2QxZC00OGVmLThmMzYtMGI3NDBhMzZhOGVl
LzEvY3NaR0MwLXg3MGE4ZEZmX0RQUmp2Y1RnUDZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuVF4MA0G
CSqGSIb3DQEBCwUAA4IBAQBG6gC02y1H+wfpxvi8jfKOd+2Q6OA8A9gVu0wbXYSw
CMGciLS8SsfwOA6yW25Hyfk58+pFqDSdZ5CEuKYDlaHm6xa3HFIkopPZw+55t+Bo
Tiq0nQSrqr+gjHEHqPof+qqCqo8dr/7FlYeG2EoaZ6KTszBSjm5xtquBfdk4OmLD
LNYa/TNKw3B/PAprFrMgsYRS44J2KbNasE2Ktoi4K/hD7umalQ09nbtPtHF1N1eg
HTWgbZr5wwu4oFid4pfqiFNZ0Baz8jQVNRrLZ0a2X3HG+hMrpEdWQHLFTbZGI8d8
g8JDt10wTuiVxpMx6cFEuej9ZsPOk7oCrdCjXQ7OFxv8
-----END CERTIFICATE-----
Generated at Mon May 6 04:11:25 2024 by rpki-client on console-ams.rpki-client.org