Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/7b0b9b-1bb9-4cf7-a3f4-7ef17d911e0c/1/ajIbzlG24lYu2Ol0w_PcX_aL7GQ.roa
File: ajIbzlG24lYu2Ol0w_PcX_aL7GQ.roa (raw, json)
Hash identifier: w9QD0cu2xxttciwtMoKgRn4VgvOEHxcdtrWynEFjQq8=
Subject key identifier: 6A:32:1B:CE:51:B6:E2:56:2E:D8:E9:74:C3:F3:DC:5F:F6:8B:EC:64
Certificate issuer: /CN=e25cdd5073aa543df4489280f67dae53fac26179
Certificate serial: 018CC8DF6B442EC1D3E73A6B7C161E96AC51
Authority key identifier: E2:5C:DD:50:73:AA:54:3D:F4:48:92:80:F6:7D:AE:53:FA:C2:61:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4lzdUHOqVD30SJKA9n2uU_rCYXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/7b0b9b-1bb9-4cf7-a3f4-7ef17d911e0c/1/ajIbzlG24lYu2Ol0w_PcX_aL7GQ.roa
Signing time: Tue 02 Jan 2024 06:32:14 +0000
ROA not before: Tue 02 Jan 2024 06:32:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59829
IP address blocks: 185.131.206.0/24 maxlen: 24
2a12:b340::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/7b0b9b-1bb9-4cf7-a3f4-7ef17d911e0c/1/4lzdUHOqVD30SJKA9n2uU_rCYXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/7b0b9b-1bb9-4cf7-a3f4-7ef17d911e0c/1/4lzdUHOqVD30SJKA9n2uU_rCYXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/4lzdUHOqVD30SJKA9n2uU_rCYXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 06:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:6b:44:2e:c1:d3:e7:3a:6b:7c:16:1e:96:ac:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e25cdd5073aa543df4489280f67dae53fac26179
Validity
Not Before: Jan 2 06:32:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6a321bce51b6e2562ed8e974c3f3dc5ff68bec64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:21:7d:42:7b:e1:93:53:34:f0:ed:4f:05:e7:
03:a8:2c:69:d6:c0:73:5a:3f:23:37:1b:f2:01:17:
53:c2:55:9b:52:a8:4d:b0:8f:c9:da:b1:ed:03:70:
55:26:56:c1:3d:ea:b0:54:44:ff:07:04:4a:f2:6b:
93:76:af:fd:eb:00:ff:3c:2e:ea:07:78:c8:c2:8b:
f9:d6:3b:fc:9b:11:d1:7b:29:39:77:ef:dd:d6:71:
e6:c3:bc:01:65:57:a5:97:60:fc:9f:bf:2f:7e:97:
23:37:2a:20:65:f4:c9:e9:fe:fe:fa:af:22:2b:c7:
43:58:ed:f0:0d:7b:8a:f6:cb:f4:15:0b:6d:89:c5:
64:ff:80:fa:dc:6f:51:53:12:de:02:a9:80:4e:d4:
91:8c:c9:a6:2c:6b:0f:d4:ad:b8:2a:f0:ef:11:41:
b1:9e:cb:e9:0f:17:df:98:0f:00:4a:af:d3:23:b5:
d4:2e:51:e9:3f:de:10:86:ea:bb:67:47:93:80:bf:
19:ca:9c:83:20:6b:67:74:73:11:57:8a:b2:99:46:
1b:2e:bb:95:c9:e5:67:2e:e9:f9:23:7d:50:b0:5c:
8e:f1:9c:79:5b:86:3d:b0:6b:97:93:50:17:08:f9:
14:69:3a:1a:89:b0:29:a1:17:76:98:31:9c:57:a3:
c1:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:32:1B:CE:51:B6:E2:56:2E:D8:E9:74:C3:F3:DC:5F:F6:8B:EC:64
X509v3 Authority Key Identifier:
keyid:E2:5C:DD:50:73:AA:54:3D:F4:48:92:80:F6:7D:AE:53:FA:C2:61:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4lzdUHOqVD30SJKA9n2uU_rCYXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/7b0b9b-1bb9-4cf7-a3f4-7ef17d911e0c/1/ajIbzlG24lYu2Ol0w_PcX_aL7GQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/7b0b9b-1bb9-4cf7-a3f4-7ef17d911e0c/1/4lzdUHOqVD30SJKA9n2uU_rCYXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.131.206.0/24
IPv6:
2a12:b340::/29
Signature Algorithm: sha256WithRSAEncryption
8e:2a:a4:ff:18:08:47:81:29:93:a7:04:06:06:e3:80:aa:58:
25:32:7e:a8:7a:4a:4b:97:58:da:6b:a2:73:d1:cc:27:b2:60:
6f:7f:b1:a0:73:c7:c5:fd:43:bf:09:ff:0d:11:da:38:b2:63:
f5:68:43:ac:7e:37:97:f6:46:ad:fb:a1:e9:17:28:4c:89:a4:
e3:3b:44:33:2e:19:21:44:a2:e9:7e:cc:cc:c5:fb:6c:ee:02:
37:08:2e:99:83:43:1a:c1:07:b9:69:09:11:54:dd:30:70:8a:
5c:22:ad:ac:f3:7f:54:1d:04:14:bb:7c:17:38:3e:4b:11:4b:
fa:d7:d2:a5:d6:b7:fd:ec:14:ba:11:94:3c:43:e2:38:29:d3:
b6:0a:f3:63:94:43:a1:af:4d:a1:5a:31:fc:e7:bc:38:c7:20:
31:29:be:33:f4:f3:05:f0:90:fb:f2:08:07:a9:a4:6a:52:00:
88:8d:25:f8:aa:75:28:e5:33:9d:49:18:ed:3e:73:f7:b5:e9:
16:b8:99:21:96:6c:32:a1:4f:f5:91:73:5e:2d:8c:fd:96:57:
7d:e4:00:c1:48:87:33:f1:f6:78:b9:0d:bb:d6:b0:fe:86:0c:
c3:05:09:c5:e9:4a:cd:0f:21:49:fb:30:1a:cf:e6:db:26:61:
36:c6:dc:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 08:23:04 2024 by rpki-client on console-fra.rpki-client.org