Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/8631f5-54a2-486f-b9a5-081a1ae6ebd6/1/lsDfqnvfDD4DZwed-OBhtZbuPXw.roa
File: lsDfqnvfDD4DZwed-OBhtZbuPXw.roa (raw, json)
Hash identifier: XayRyMH8/xMtlgi0d9kLU2aINWWIMnots6NHwPGuX/k=
Subject key identifier: 96:C0:DF:AA:7B:DF:0C:3E:03:67:07:9D:F8:E0:61:B5:96:EE:3D:7C
Certificate issuer: /CN=b6fbc63ef5614a7ef95a106188e3d78755c687b9
Certificate serial: 0190174102FF5DBF77D58937636557E81E04
Authority key identifier: B6:FB:C6:3E:F5:61:4A:7E:F9:5A:10:61:88:E3:D7:87:55:C6:87:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tvvGPvVhSn75WhBhiOPXh1XGh7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/8631f5-54a2-486f-b9a5-081a1ae6ebd6/1/lsDfqnvfDD4DZwed-OBhtZbuPXw.roa
Signing time: Fri 14 Jun 2024 14:57:34 +0000
ROA not before: Fri 14 Jun 2024 14:57:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206828
IP address blocks: 185.175.60.0/24 maxlen: 24
185.175.61.0/24 maxlen: 24
185.175.62.0/24 maxlen: 24
185.175.63.0/24 maxlen: 24
2a0b:d100::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/8631f5-54a2-486f-b9a5-081a1ae6ebd6/1/tvvGPvVhSn75WhBhiOPXh1XGh7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/8631f5-54a2-486f-b9a5-081a1ae6ebd6/1/tvvGPvVhSn75WhBhiOPXh1XGh7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/tvvGPvVhSn75WhBhiOPXh1XGh7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:17:41:02:ff:5d:bf:77:d5:89:37:63:65:57:e8:1e:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6fbc63ef5614a7ef95a106188e3d78755c687b9
Validity
Not Before: Jun 14 14:57:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=96c0dfaa7bdf0c3e0367079df8e061b596ee3d7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:fe:78:3d:ea:c1:40:0c:9a:fb:20:6b:37:f3:
ae:54:04:f0:b0:dc:50:2e:32:94:3d:0d:8d:04:79:
f8:98:03:ca:7d:91:b0:53:b4:74:fe:93:41:bc:94:
97:89:8c:4c:a7:8a:3f:a7:67:c2:a0:b1:ba:1b:db:
a7:e4:5a:bd:68:67:33:e4:fb:b1:81:46:94:52:03:
18:3a:91:fc:77:7c:f1:6e:9f:43:1c:27:9a:ac:d2:
43:b0:92:51:7d:c9:d2:c6:3e:85:69:f1:01:bb:d5:
36:ac:8d:88:5f:b8:0c:64:5e:02:44:f7:54:e9:0d:
b6:62:fb:4c:37:20:f0:24:88:62:19:a5:b0:ba:32:
a6:9e:d5:19:56:db:13:50:75:4f:9c:f9:f3:9f:2c:
6f:aa:c4:a9:72:f4:88:67:ea:99:cb:0e:7a:98:2a:
c5:6b:8c:70:b0:fe:03:7c:f1:2b:ee:e7:7d:d7:f7:
9c:2a:f4:f3:fa:c1:b1:07:6b:1f:81:88:7f:0b:b7:
59:05:7a:74:c4:1a:21:e2:ec:95:2c:01:e7:9c:4d:
c1:f0:69:ba:13:72:9f:5d:a3:4e:21:80:24:87:64:
f7:c6:ad:a6:64:41:57:40:bd:8d:22:e8:66:03:18:
c8:91:f4:91:e7:ba:97:f1:e0:0f:44:da:25:63:80:
4a:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:C0:DF:AA:7B:DF:0C:3E:03:67:07:9D:F8:E0:61:B5:96:EE:3D:7C
X509v3 Authority Key Identifier:
keyid:B6:FB:C6:3E:F5:61:4A:7E:F9:5A:10:61:88:E3:D7:87:55:C6:87:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tvvGPvVhSn75WhBhiOPXh1XGh7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/8631f5-54a2-486f-b9a5-081a1ae6ebd6/1/lsDfqnvfDD4DZwed-OBhtZbuPXw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/8631f5-54a2-486f-b9a5-081a1ae6ebd6/1/tvvGPvVhSn75WhBhiOPXh1XGh7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.175.60.0/22
IPv6:
2a0b:d100::/29
Signature Algorithm: sha256WithRSAEncryption
85:72:34:71:08:61:f5:a2:76:f3:c3:2a:ae:2f:c3:8a:ba:0e:
20:07:e3:a4:8f:84:51:91:6d:a3:06:bf:04:28:ce:35:18:e9:
05:6e:5e:e7:e3:70:78:38:9a:7c:93:82:0c:2d:dd:a3:71:49:
21:8d:67:e8:f6:58:5a:92:b1:ed:1a:4b:24:51:07:a8:8f:53:
41:ec:77:38:a0:98:26:d5:84:71:5f:3f:5f:b8:90:48:3f:23:
f6:49:a7:dc:45:4d:36:38:c6:bb:96:91:b0:fb:a8:3b:af:c5:
74:5a:a4:b0:56:fc:5a:c0:e2:af:5f:3d:33:c3:5f:61:cd:4e:
4b:1f:6c:ac:15:15:71:08:ba:f3:07:b3:02:3f:53:59:c3:41:
ad:0d:c1:65:e1:d0:6c:62:6c:91:37:cc:0b:28:4c:d3:4a:0d:
f0:ac:7c:66:b1:77:6f:03:cc:85:3b:ce:aa:f2:7b:71:5c:00:
30:35:dc:a2:00:f1:2b:7d:07:5d:bc:ae:b1:bd:c5:5a:91:ef:
39:87:0d:77:08:73:0e:5a:a1:3b:b8:e6:55:b5:1c:8a:05:41:
15:cb:07:8c:e8:6b:4f:bf:28:8e:d7:8f:25:0b:1b:db:f8:b7:
58:ce:a1:41:51:90:89:a6:f8:a5:8f:15:46:1c:aa:0b:86:68:
c7:f4:66:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:16:42 2024 by rpki-client on console-ams.rpki-client.org