Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/d38767-2fc5-4c50-a27f-7429b22772c3/1/T6X66_HcDO_dKensekl4Q2GBxww.roa
File: T6X66_HcDO_dKensekl4Q2GBxww.roa (raw, json)
Hash identifier: Me1miQF+kg30ONTVjN6oHpE9WnMLFjpx6gj0DaGj7qg=
Subject key identifier: 4F:A5:FA:EB:F1:DC:0C:EF:DD:29:E9:EC:7A:49:78:43:61:81:C7:0C
Certificate issuer: /CN=50480549481968d43406127653f780abbf9a117b
Certificate serial: 018CC9BC898129A0C947E8830EC93E4FDE72
Authority key identifier: 50:48:05:49:48:19:68:D4:34:06:12:76:53:F7:80:AB:BF:9A:11:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UEgFSUgZaNQ0BhJ2U_eAq7-aEXs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/d38767-2fc5-4c50-a27f-7429b22772c3/1/T6X66_HcDO_dKensekl4Q2GBxww.roa
Signing time: Tue 02 Jan 2024 10:33:45 +0000
ROA not before: Tue 02 Jan 2024 10:33:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34971
IP address blocks: 185.136.177.0/24 maxlen: 24
185.136.176.0/24 maxlen: 24
185.136.176.0/22 maxlen: 24
2a06:fdc0::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/d38767-2fc5-4c50-a27f-7429b22772c3/1/UEgFSUgZaNQ0BhJ2U_eAq7-aEXs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/d38767-2fc5-4c50-a27f-7429b22772c3/1/UEgFSUgZaNQ0BhJ2U_eAq7-aEXs.mft
rsync://rpki.ripe.net/repository/DEFAULT/UEgFSUgZaNQ0BhJ2U_eAq7-aEXs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 05:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:89:81:29:a0:c9:47:e8:83:0e:c9:3e:4f:de:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50480549481968d43406127653f780abbf9a117b
Validity
Not Before: Jan 2 10:33:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4fa5faebf1dc0cefdd29e9ec7a4978436181c70c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:68:64:4a:78:67:e1:95:5a:71:aa:cd:ff:78:
8a:31:3c:c8:4b:1a:ad:c8:99:05:a6:f2:e1:88:d0:
32:20:f9:6a:19:d3:c4:f8:09:8e:ab:38:a3:4e:e7:
a5:29:25:7b:60:ad:5d:f8:fd:b9:25:3a:2f:7c:c7:
2b:23:89:8d:e1:ea:29:02:80:03:5c:7c:6b:50:d3:
35:93:05:c7:3e:6b:47:f9:70:9f:33:7d:df:66:6c:
41:3f:b9:5d:0c:d2:30:2d:96:c2:05:81:b8:1c:7a:
cb:ca:58:e4:9f:6d:63:8f:fb:f8:28:87:54:55:c0:
38:3a:69:d3:29:16:37:58:29:28:c4:3a:4f:10:d0:
42:59:18:a5:eb:f8:46:b2:a3:48:19:14:13:f6:4b:
73:d3:0f:65:ac:20:35:b4:5a:91:71:73:1b:12:79:
6f:46:73:09:23:47:32:fa:12:45:03:6d:19:a9:b5:
84:97:32:c9:c9:ac:85:c0:25:9b:14:19:e8:60:33:
00:35:c6:a9:01:2a:0d:1f:61:19:14:88:a8:93:4a:
0a:e9:0c:bf:17:32:ae:47:b7:b6:63:7b:2e:ca:1a:
36:b3:e2:8f:dc:2f:32:aa:d7:49:02:71:18:e2:bc:
e4:6b:0e:f7:15:1a:c7:e2:c0:40:0d:01:a1:6c:7e:
33:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:A5:FA:EB:F1:DC:0C:EF:DD:29:E9:EC:7A:49:78:43:61:81:C7:0C
X509v3 Authority Key Identifier:
keyid:50:48:05:49:48:19:68:D4:34:06:12:76:53:F7:80:AB:BF:9A:11:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UEgFSUgZaNQ0BhJ2U_eAq7-aEXs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/d38767-2fc5-4c50-a27f-7429b22772c3/1/T6X66_HcDO_dKensekl4Q2GBxww.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/d38767-2fc5-4c50-a27f-7429b22772c3/1/UEgFSUgZaNQ0BhJ2U_eAq7-aEXs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.136.176.0/22
IPv6:
2a06:fdc0::/32
Signature Algorithm: sha256WithRSAEncryption
84:9c:49:bf:7f:c5:6c:a8:5e:2e:89:3d:28:8c:75:94:59:8d:
6f:40:04:c4:58:a4:f4:6f:72:d3:73:26:1a:b9:d4:cf:ce:73:
cb:89:ac:98:e1:f4:68:ff:df:7e:c0:db:98:e1:05:fa:68:d1:
18:5a:c4:d1:f2:1e:96:2d:21:b3:b6:43:bd:60:fa:10:e0:a8:
65:21:14:de:83:bc:e5:59:bb:5d:38:87:0a:2f:96:95:37:fd:
cb:99:be:3d:2f:8c:f4:ba:ac:e7:bb:60:51:12:35:15:37:8a:
39:5b:40:70:0a:ea:c4:28:85:1c:7b:5d:76:74:02:07:71:2c:
d2:19:53:e9:70:37:1c:49:17:99:98:f9:f5:d8:9e:c4:25:b0:
48:59:67:5f:b4:da:99:5e:bd:13:ec:fb:5b:34:31:7b:9a:f5:
c9:34:e3:9c:5e:d5:98:ff:d2:0c:b7:88:90:8d:58:72:0e:c0:
09:6c:02:4e:eb:b9:2f:89:43:64:9e:7c:55:15:05:39:96:be:
6b:4b:33:ce:44:e6:5f:78:c7:c6:04:b5:33:db:9a:29:3b:ef:
31:01:18:83:cb:4b:94:70:2f:82:da:75:2d:49:f3:46:56:0f:
ea:5c:c8:bd:2e:90:70:ec:d6:d5:4d:46:1b:2b:df:27:c4:d8:
2e:42:8f:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 12:28:00 2024 by rpki-client on console-fra.rpki-client.org