Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/5f0f06-56f4-41a5-889a-b15b3fbc04a6/1/TRe5f-iSa6kV-875gUMp8wvIuuo.roa
File: TRe5f-iSa6kV-875gUMp8wvIuuo.roa (raw, json)
Hash identifier: 0fDxf/CLZ+IFRzwxyTTQbURm0u9+1LJ4zfDAQrnEA+Y=
Subject key identifier: 4D:17:B9:7F:E8:92:6B:A9:15:FB:CE:F9:81:43:29:F3:0B:C8:BA:EA
Certificate issuer: /CN=6cf96a7c01d62e37acecf0786f64978905121647
Certificate serial: 018CC64B69052B5B367E702B910E1E2056C6
Authority key identifier: 6C:F9:6A:7C:01:D6:2E:37:AC:EC:F0:78:6F:64:97:89:05:12:16:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bPlqfAHWLjes7PB4b2SXiQUSFkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/5f0f06-56f4-41a5-889a-b15b3fbc04a6/1/TRe5f-iSa6kV-875gUMp8wvIuuo.roa
Signing time: Mon 01 Jan 2024 18:31:19 +0000
ROA not before: Mon 01 Jan 2024 18:31:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204006
IP address blocks: 185.117.134.0/24 maxlen: 24
185.117.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/5f0f06-56f4-41a5-889a-b15b3fbc04a6/1/bPlqfAHWLjes7PB4b2SXiQUSFkc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/5f0f06-56f4-41a5-889a-b15b3fbc04a6/1/bPlqfAHWLjes7PB4b2SXiQUSFkc.mft
rsync://rpki.ripe.net/repository/DEFAULT/bPlqfAHWLjes7PB4b2SXiQUSFkc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 07:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:69:05:2b:5b:36:7e:70:2b:91:0e:1e:20:56:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cf96a7c01d62e37acecf0786f64978905121647
Validity
Not Before: Jan 1 18:31:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4d17b97fe8926ba915fbcef9814329f30bc8baea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:96:67:88:6b:c8:8a:c3:a3:f0:82:16:d3:ab:
93:c9:66:56:eb:18:d3:0d:b7:f5:25:ff:63:00:77:
ca:8a:8c:57:2a:57:11:a7:80:a9:7a:78:fb:e5:e2:
1f:cb:82:d5:d5:a0:a8:e8:26:0e:f4:8f:64:e1:4c:
35:51:9e:0a:16:29:69:bb:84:e5:a2:6a:87:66:0d:
b7:0c:1f:e9:14:00:1f:fa:d1:b1:d4:75:3f:99:eb:
a5:98:05:2b:54:cb:97:b8:5e:15:47:0d:a2:ec:ed:
85:fe:e1:5c:c1:b4:2a:87:c2:b7:3c:32:d5:04:42:
d4:a6:c0:b4:30:97:94:ca:ec:5a:38:7a:35:27:6f:
8e:a1:24:e4:e3:d5:fb:c0:8e:41:d3:69:05:c5:72:
48:03:ea:03:14:97:2e:58:be:bd:19:74:e4:da:88:
3b:59:6c:7f:ca:b2:bc:c5:09:c2:8f:d3:44:03:49:
a3:2b:bf:8e:b9:bf:e1:4a:f6:72:da:57:14:c7:96:
61:e3:eb:c8:5b:5a:bd:b5:0d:e2:40:c0:5b:e7:52:
94:6f:30:d7:0b:71:51:d5:ec:c8:9d:95:f7:7a:f9:
a5:00:86:9e:45:cc:4e:ed:56:5d:67:de:d2:40:6d:
07:0e:4f:86:20:45:a4:ba:87:84:f7:38:c3:02:23:
25:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:17:B9:7F:E8:92:6B:A9:15:FB:CE:F9:81:43:29:F3:0B:C8:BA:EA
X509v3 Authority Key Identifier:
keyid:6C:F9:6A:7C:01:D6:2E:37:AC:EC:F0:78:6F:64:97:89:05:12:16:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bPlqfAHWLjes7PB4b2SXiQUSFkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/5f0f06-56f4-41a5-889a-b15b3fbc04a6/1/TRe5f-iSa6kV-875gUMp8wvIuuo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/5f0f06-56f4-41a5-889a-b15b3fbc04a6/1/bPlqfAHWLjes7PB4b2SXiQUSFkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.117.134.0/23
Signature Algorithm: sha256WithRSAEncryption
00:a9:43:31:f1:7a:57:86:aa:28:da:6c:56:2d:0c:a3:68:8f:
0a:06:cc:95:80:6a:ed:ba:eb:e5:b2:0a:a0:27:da:fa:66:72:
82:19:ec:e9:f5:7c:57:1a:47:b1:e0:3a:a3:3a:95:83:11:ae:
d1:c0:3b:bc:80:5e:0a:25:08:35:93:f5:f4:ed:48:63:08:06:
f3:75:d0:7c:58:09:8a:92:85:bf:ee:91:6d:40:32:62:9b:49:
c9:bd:a9:c7:8a:70:21:5f:09:5e:73:f6:19:47:92:4f:cb:76:
c0:ca:1f:02:19:69:87:82:94:22:26:c4:62:64:8b:58:e0:70:
4f:a9:5e:c5:89:a0:71:ea:82:96:6d:36:96:20:71:a6:df:f5:
7a:54:92:1a:3c:94:d2:1a:71:e3:54:0b:11:71:7a:02:71:c3:
b5:5e:4b:fd:9d:97:a2:70:be:8e:55:b6:cf:37:ae:af:6a:41:
6c:3c:7b:b7:ad:47:01:0a:f6:c3:74:d7:9c:e7:e6:0e:a9:71:
4a:d0:70:ff:9f:f7:63:3c:82:18:f4:91:4d:c2:82:aa:3d:81:
ea:cb:2a:98:2d:d2:1b:11:af:28:b2:ca:07:2f:32:49:79:75:
b0:65:6d:89:75:e1:35:13:cd:5a:29:36:0c:27:ad:5f:5d:df:
81:a2:10:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 11:39:40 2024 by rpki-client on console-fra.rpki-client.org