Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/0730d1-fee3-4654-9dea-e187be9b6c23/1/6LpbXGswlo8cbH6Jn3mZszqKTWg.roa
File: 6LpbXGswlo8cbH6Jn3mZszqKTWg.roa (raw, json)
Hash identifier: 9dM5yQfhRsY1KvnbvGrTDPrpphtRwLnbsG//X6jbYmo=
Subject key identifier: E8:BA:5B:5C:6B:30:96:8F:1C:6C:7E:89:9F:79:99:B3:3A:8A:4D:68
Certificate issuer: /CN=842e178a85d6c30b572b20261c44f8e7a4bfc272
Certificate serial: 018CC7256E861CA91131CA8DAE5EAD7184AE
Authority key identifier: 84:2E:17:8A:85:D6:C3:0B:57:2B:20:26:1C:44:F8:E7:A4:BF:C2:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hC4XioXWwwtXKyAmHET456S_wnI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/0730d1-fee3-4654-9dea-e187be9b6c23/1/6LpbXGswlo8cbH6Jn3mZszqKTWg.roa
Signing time: Mon 01 Jan 2024 22:29:28 +0000
ROA not before: Mon 01 Jan 2024 22:29:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204706
IP address blocks: 185.143.130.0/24 maxlen: 24
185.143.131.0/24 maxlen: 24
185.143.128.0/24 maxlen: 24
185.143.129.0/24 maxlen: 24
2a0c:f080::/30 maxlen: 30
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/0730d1-fee3-4654-9dea-e187be9b6c23/1/hC4XioXWwwtXKyAmHET456S_wnI.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/0730d1-fee3-4654-9dea-e187be9b6c23/1/hC4XioXWwwtXKyAmHET456S_wnI.mft
rsync://rpki.ripe.net/repository/DEFAULT/hC4XioXWwwtXKyAmHET456S_wnI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 04:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:25:6e:86:1c:a9:11:31:ca:8d:ae:5e:ad:71:84:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=842e178a85d6c30b572b20261c44f8e7a4bfc272
Validity
Not Before: Jan 1 22:29:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e8ba5b5c6b30968f1c6c7e899f7999b33a8a4d68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:34:0f:be:7e:1c:c2:76:27:b4:e8:8d:af:3b:
81:5b:2d:6f:d0:a9:c4:31:80:dc:ff:ec:12:38:72:
1e:12:42:3a:0f:9d:a8:ae:3e:e3:a6:fd:fa:9d:75:
0f:40:30:f9:58:7f:bc:ad:fd:07:4e:a4:e8:d0:0c:
48:2c:9d:b5:08:1d:63:1b:e7:10:52:55:58:82:4f:
1c:01:a5:34:65:dd:e9:55:ad:4b:a3:86:75:85:0a:
9b:bd:0f:42:32:d5:43:bc:e7:69:af:ae:bb:6e:93:
f4:22:32:75:bc:2f:5a:e1:e7:ad:7c:b7:b0:91:23:
19:1c:2f:9f:d1:04:ac:04:d6:11:33:86:cc:bf:35:
62:24:aa:68:ee:8f:99:10:6e:b2:70:17:16:0a:04:
eb:eb:f2:e7:9a:45:ac:93:e5:b2:45:d4:2b:5d:b1:
29:13:e0:e6:f7:23:e1:0a:dd:89:b1:00:83:4b:8e:
79:cf:ed:1b:bf:f8:bb:ad:7f:3b:31:30:f4:96:89:
5a:57:b6:5c:a8:3e:c5:32:78:b6:3a:6c:d7:cf:94:
f9:67:90:a0:cd:69:ab:c0:4b:ed:26:e3:08:91:e7:
a8:f2:fe:87:96:3f:9b:da:88:cf:96:41:90:78:3e:
1f:50:b7:a6:43:a6:6d:a2:63:ee:7f:79:8c:11:3c:
ff:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:BA:5B:5C:6B:30:96:8F:1C:6C:7E:89:9F:79:99:B3:3A:8A:4D:68
X509v3 Authority Key Identifier:
keyid:84:2E:17:8A:85:D6:C3:0B:57:2B:20:26:1C:44:F8:E7:A4:BF:C2:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hC4XioXWwwtXKyAmHET456S_wnI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/0730d1-fee3-4654-9dea-e187be9b6c23/1/6LpbXGswlo8cbH6Jn3mZszqKTWg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/0730d1-fee3-4654-9dea-e187be9b6c23/1/hC4XioXWwwtXKyAmHET456S_wnI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.143.128.0/22
IPv6:
2a0c:f080::/30
Signature Algorithm: sha256WithRSAEncryption
50:e2:79:d9:75:ce:c3:29:70:c2:cb:f8:76:d5:cb:83:de:dc:
a2:56:e6:d3:6e:85:92:95:ed:1e:27:be:d2:3d:81:74:f0:8b:
cf:9d:7b:5f:90:0a:4d:91:23:63:bc:7a:98:72:c9:ae:7b:7c:
c4:1a:0c:65:2a:45:18:04:9d:3d:30:16:5b:c0:d8:eb:58:8e:
36:04:77:60:77:92:d5:82:6f:d5:fa:6d:39:ec:ef:37:48:71:
76:80:a1:1c:8b:33:16:fb:47:81:2c:fd:2a:29:63:ff:c7:29:
c7:03:43:68:e3:c0:0b:19:3f:a3:e9:2d:ef:53:c7:c7:f7:26:
e5:c0:0b:03:c9:cb:14:6e:60:2f:7a:13:4b:0b:c0:15:a3:33:
48:8d:f6:5d:7c:14:f9:f6:bf:a9:4d:37:fd:45:59:c4:47:2a:
80:52:2a:b6:8e:09:d3:c6:74:5a:6f:92:be:dc:96:16:c1:fe:
f5:3f:ac:64:2f:c2:ff:06:97:82:11:d7:85:0b:2d:06:b8:77:
9d:57:39:a8:d4:49:22:e4:12:58:00:85:12:f5:22:44:8f:8c:
ec:ab:96:95:ef:9f:28:21:23:f0:9c:e2:1e:5b:d9:59:9b:99:
c9:20:f0:47:0c:31:f4:67:08:00:42:7b:74:8c:c0:24:87:06:
92:4b:d8:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:38:56 2024 by rpki-client on console-ams.rpki-client.org