Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/690409-019d-4812-930c-f926fabf7afa/1/hz6yq_AYwFHIpwKVi0zlJc1oTjM.roa
File: hz6yq_AYwFHIpwKVi0zlJc1oTjM.roa (raw, json)
Hash identifier: ASV3e6TnOv7m+SJ227P4LQL8MBEhcWWDFkymdWDygr4=
Subject key identifier: 87:3E:B2:AB:F0:18:C0:51:C8:A7:02:95:8B:4C:E5:25:CD:68:4E:33
Certificate issuer: /CN=6982f05132a9989507ebf6ee989518753ba2cdb5
Certificate serial: 018CCA99E6CD7EE743DF813AD46F083F458A
Authority key identifier: 69:82:F0:51:32:A9:98:95:07:EB:F6:EE:98:95:18:75:3B:A2:CD:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aYLwUTKpmJUH6_bumJUYdTuizbU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/690409-019d-4812-930c-f926fabf7afa/1/hz6yq_AYwFHIpwKVi0zlJc1oTjM.roa
Signing time: Tue 02 Jan 2024 14:35:32 +0000
ROA not before: Tue 02 Jan 2024 14:35:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208689
IP address blocks: 185.198.232.0/24 maxlen: 24
2a13:6600::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/690409-019d-4812-930c-f926fabf7afa/1/aYLwUTKpmJUH6_bumJUYdTuizbU.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/690409-019d-4812-930c-f926fabf7afa/1/aYLwUTKpmJUH6_bumJUYdTuizbU.mft
rsync://rpki.ripe.net/repository/DEFAULT/aYLwUTKpmJUH6_bumJUYdTuizbU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:99:e6:cd:7e:e7:43:df:81:3a:d4:6f:08:3f:45:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6982f05132a9989507ebf6ee989518753ba2cdb5
Validity
Not Before: Jan 2 14:35:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=873eb2abf018c051c8a702958b4ce525cd684e33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:5e:a3:bd:b7:ef:22:db:0f:33:28:a7:ba:d8:
b9:69:1e:f0:21:5b:57:fd:57:1f:64:c7:00:05:17:
7a:96:24:34:d0:19:f8:7d:d4:63:1a:a7:a3:30:a3:
26:23:6d:7e:72:12:8e:62:aa:f9:d3:46:2e:fe:4d:
83:1e:01:83:ce:bb:1f:21:00:49:19:ec:39:16:cb:
6d:55:ad:73:ee:e7:47:7a:d6:e4:8b:8e:75:5b:0e:
eb:3c:d5:33:61:35:8f:ca:52:8b:9e:34:e9:0d:e5:
89:41:9a:40:f3:97:5c:34:44:22:13:cf:45:28:cd:
9d:bc:dd:23:f3:79:54:20:45:dc:c5:82:4a:22:6e:
c1:77:51:b4:71:f5:0d:94:12:ab:6a:86:91:03:d4:
da:51:b7:76:2b:bc:cf:38:ea:a2:2d:69:01:7c:9a:
0b:a1:8e:57:7c:90:1c:fe:a2:c2:1c:b5:a9:74:5c:
21:c5:3c:07:14:d7:8d:3e:8d:5e:61:53:37:11:15:
77:ad:15:1f:bb:c4:1d:f3:45:a2:7d:53:99:6e:97:
ad:9a:e4:d6:89:c1:94:94:72:8c:a6:1b:d0:a5:e1:
6b:0b:04:b0:78:c6:27:13:4d:a0:15:7f:6f:c7:f4:
ee:5d:2a:1f:1d:56:54:f0:43:34:43:52:f0:ca:71:
a4:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:3E:B2:AB:F0:18:C0:51:C8:A7:02:95:8B:4C:E5:25:CD:68:4E:33
X509v3 Authority Key Identifier:
keyid:69:82:F0:51:32:A9:98:95:07:EB:F6:EE:98:95:18:75:3B:A2:CD:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aYLwUTKpmJUH6_bumJUYdTuizbU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/690409-019d-4812-930c-f926fabf7afa/1/hz6yq_AYwFHIpwKVi0zlJc1oTjM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/690409-019d-4812-930c-f926fabf7afa/1/aYLwUTKpmJUH6_bumJUYdTuizbU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.198.232.0/24
IPv6:
2a13:6600::/29
Signature Algorithm: sha256WithRSAEncryption
63:47:23:f2:c3:11:1f:bc:22:c9:73:24:f5:85:e4:e1:f4:d2:
a3:02:b2:8a:0a:90:98:d8:99:61:82:75:84:ec:94:bd:26:32:
68:52:fa:76:5a:e2:e2:a7:0c:3e:e8:f8:8c:18:9d:9b:fe:f3:
08:f6:93:f9:7b:2d:7c:f4:e2:38:08:3d:b2:64:48:68:37:42:
3d:c5:d9:90:ac:2d:2b:6b:6e:d0:b9:25:48:95:d2:95:fb:9f:
55:56:17:84:d3:0e:7e:ae:d5:dd:7e:dd:51:72:9e:91:84:d6:
24:9c:51:97:76:e5:65:a4:04:12:9b:a6:8f:04:04:2b:b0:27:
60:07:4b:91:37:cb:5c:9f:8b:61:b7:92:64:6b:1a:e5:9c:af:
9e:d5:87:88:ed:37:52:3a:0b:50:75:1a:42:a2:73:73:22:3a:
48:94:85:9b:75:96:06:72:6a:08:c0:64:12:46:33:f7:f3:62:
0c:1d:df:67:73:76:04:a7:61:d2:7e:66:7d:57:8a:49:ee:b9:
86:bc:c3:89:23:87:f9:ce:ee:a5:69:d3:bf:4a:73:ef:c5:9b:
61:c9:f4:53:3a:85:4f:31:ea:31:f1:ce:e6:e1:bc:cf:8f:51:
7f:65:ca:57:a0:0f:5e:8a:2f:dc:92:7f:3e:32:88:e2:5a:f7:
c5:a4:53:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 18:11:45 2024 by rpki-client on console-ams.rpki-client.org