Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/6GQf7v-X_lr2kQugc8Z26HWVBic.roa
File: 6GQf7v-X_lr2kQugc8Z26HWVBic.roa (raw, json)
Hash identifier: Q/YRh1qNO23Zk0HAFV0/Fzlnvd79pQpO1L3QF4Gf9C4=
Subject key identifier: E8:64:1F:EE:FF:97:FE:5A:F6:91:0B:A0:73:C6:76:E8:75:95:06:27
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018E76305EDA4A95ABE70F29DCA31AF3A20D
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/6GQf7v-X_lr2kQugc8Z26HWVBic.roa
Signing time: Mon 25 Mar 2024 15:17:45 +0000
ROA not before: Mon 25 Mar 2024 15:17:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61317
IP address blocks: 185.121.12.0/22 maxlen: 24
185.199.159.0/24 maxlen: 24
185.206.248.0/24 maxlen: 24
185.206.249.0/24 maxlen: 24
185.206.251.0/24 maxlen: 24
185.209.36.0/23 maxlen: 24
185.209.74.0/24 maxlen: 24
185.210.152.0/24 maxlen: 24
185.210.153.0/24 maxlen: 24
185.210.154.0/24 maxlen: 24
185.210.155.0/24 maxlen: 24
185.218.101.0/24 maxlen: 24
185.218.102.0/24 maxlen: 24
185.223.76.0/24 maxlen: 24
185.223.80.0/24 maxlen: 24
185.225.2.0/24 maxlen: 24
185.226.107.0/24 maxlen: 24
185.227.145.0/24 maxlen: 24
185.234.20.0/22 maxlen: 24
185.234.23.0/24 maxlen: 24
185.238.228.0/22 maxlen: 24
185.240.120.0/23 maxlen: 24
185.251.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:76:30:5e:da:4a:95:ab:e7:0f:29:dc:a3:1a:f3:a2:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Mar 25 15:17:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e8641feeff97fe5af6910ba073c676e875950627
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:08:7a:6e:4a:9d:c5:be:53:24:6c:4c:e7:67:
4e:8a:f7:29:ce:18:c2:9f:91:94:54:7c:df:98:77:
c3:43:4e:9a:c1:43:95:37:3e:53:33:ed:8b:1d:cd:
bf:10:f0:11:ba:79:74:6d:5d:f6:7e:bb:9a:2a:2a:
c0:9b:d3:28:2a:17:16:ca:58:d7:76:70:2b:62:7d:
f8:2a:e8:45:4a:50:b4:33:52:41:94:e6:26:cd:80:
af:14:6b:5e:ec:50:10:8a:a5:95:fc:d7:43:37:ec:
9b:79:af:81:e8:f3:1a:bd:72:be:47:47:d9:d7:ee:
f3:71:5f:36:e2:99:2e:13:82:9a:37:b8:9a:55:03:
70:e1:40:54:8c:5d:16:48:40:0f:2b:a3:b2:0d:65:
f7:16:30:34:41:e9:96:2a:e4:b6:d8:88:2c:34:a3:
7c:40:ed:48:a1:9b:a2:6e:ca:c1:59:82:c3:49:fa:
1e:7e:ef:c8:8b:9e:25:25:6f:51:41:4d:cf:da:47:
04:f5:12:be:9c:a1:d2:38:25:ba:f6:ff:23:e0:b6:
7d:56:7e:45:3a:75:82:af:95:83:38:a9:55:03:67:
0b:e8:ff:d7:b5:26:92:99:03:c0:40:9e:15:f9:45:
b4:3c:4c:c4:7d:ef:79:34:03:16:f9:8e:a3:e5:d7:
60:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:64:1F:EE:FF:97:FE:5A:F6:91:0B:A0:73:C6:76:E8:75:95:06:27
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/6GQf7v-X_lr2kQugc8Z26HWVBic.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.121.12.0/22
185.199.159.0/24
185.206.248.0/23
185.206.251.0/24
185.209.36.0/23
185.209.74.0/24
185.210.152.0/22
185.218.101.0-185.218.102.255
185.223.76.0/24
185.223.80.0/24
185.225.2.0/24
185.226.107.0/24
185.227.145.0/24
185.234.20.0/22
185.238.228.0/22
185.240.120.0/23
185.251.231.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:b9:4c:75:08:56:76:94:34:45:ce:4c:fb:4c:de:3d:8b:1b:
3a:6e:dc:6e:73:25:5f:ea:84:c3:6f:28:00:81:05:9b:be:db:
95:e4:e0:9e:1e:71:d2:70:91:3b:33:ca:90:b1:82:c5:b9:7a:
52:2f:58:77:a1:83:3c:53:18:be:3a:43:3c:56:f0:96:72:af:
f7:fd:f0:b6:f1:e4:54:6e:55:ee:66:6f:bf:2d:28:73:d0:94:
aa:f8:b1:a6:a6:e4:7f:4c:81:03:12:ce:70:19:c4:f1:a8:f1:
a5:26:08:f7:81:8d:3d:e5:e3:65:ff:db:6f:c1:3c:be:e7:9e:
43:b5:8e:e8:d3:a1:6b:e0:07:06:f4:cf:d0:c7:e6:b2:b8:21:
d5:2f:ca:0c:07:a2:ff:cc:cf:46:e2:f5:3d:32:ed:1d:d4:b2:
9b:3a:72:3e:4e:71:e4:15:35:a2:a2:b7:d5:72:95:2c:6b:76:
be:4b:1f:fd:ce:98:17:3c:62:25:fa:c8:64:a6:4c:df:cc:6b:
fd:d7:d1:af:05:c2:66:0f:a4:73:dc:1f:21:0b:d8:7b:36:e1:
e9:88:7e:9d:57:aa:72:f1:da:b3:38:f0:95:cd:25:5f:50:4e:
4f:4e:44:7c:72:c8:57:ce:15:74:1b:d7:dc:f1:78:66:1b:c1:
b7:0b:cb:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 12:55:31 2024 by rpki-client on console-fra.rpki-client.org