Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/f946ef-9619-4bdd-9f47-d2bc96a98a18/1/b6Iugu-NjhWcVIf3r3vhh0w_hI8.roa
File: b6Iugu-NjhWcVIf3r3vhh0w_hI8.roa (raw, json)
Hash identifier: p7ewm6uCtlqRqAv+839Pngnhn5q1XAQMHu0JicCM/3w=
Subject key identifier: 6F:A2:2E:82:EF:8D:8E:15:9C:54:87:F7:AF:7B:E1:87:4C:3F:84:8F
Certificate issuer: /CN=3d0ef4358adb040f333d9361a4261ea0e50d38ab
Certificate serial: 018CC8DF3F64D6917E798812717AD516FB10
Authority key identifier: 3D:0E:F4:35:8A:DB:04:0F:33:3D:93:61:A4:26:1E:A0:E5:0D:38:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PQ70NYrbBA8zPZNhpCYeoOUNOKs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/f946ef-9619-4bdd-9f47-d2bc96a98a18/1/b6Iugu-NjhWcVIf3r3vhh0w_hI8.roa
Signing time: Tue 02 Jan 2024 06:32:03 +0000
ROA not before: Tue 02 Jan 2024 06:32:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204796
IP address blocks: 195.158.252.0/23 maxlen: 23
185.240.0.0/22 maxlen: 24
195.190.11.0/24 maxlen: 24
2001:67c:11f8::/48 maxlen: 48
2a0c:6880::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/f946ef-9619-4bdd-9f47-d2bc96a98a18/1/PQ70NYrbBA8zPZNhpCYeoOUNOKs.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/f946ef-9619-4bdd-9f47-d2bc96a98a18/1/PQ70NYrbBA8zPZNhpCYeoOUNOKs.mft
rsync://rpki.ripe.net/repository/DEFAULT/PQ70NYrbBA8zPZNhpCYeoOUNOKs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:3f:64:d6:91:7e:79:88:12:71:7a:d5:16:fb:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d0ef4358adb040f333d9361a4261ea0e50d38ab
Validity
Not Before: Jan 2 06:32:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6fa22e82ef8d8e159c5487f7af7be1874c3f848f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:8d:ba:4a:c9:91:f1:ed:eb:63:ae:f6:7c:ee:
b1:7c:08:1c:da:5b:f0:e8:98:79:42:71:ba:b1:1e:
59:99:20:e2:d8:53:f2:76:57:23:9e:59:e1:72:80:
1b:51:62:37:49:c7:2a:21:7e:ca:3a:57:6c:11:ee:
f8:44:d5:fb:1c:20:22:66:31:20:a9:0f:8b:e3:e8:
38:2e:c0:60:bf:52:2d:44:2e:08:50:f1:fc:ad:38:
f5:66:f3:b3:e9:13:be:f6:ac:7f:04:04:30:fb:75:
d2:31:18:15:64:51:b0:2a:f5:a6:a1:65:24:31:a2:
f5:32:07:4e:20:61:c7:1b:10:85:d0:e7:d9:1f:05:
24:be:71:3e:16:bf:7e:da:10:40:ee:64:ce:7e:0b:
8b:a7:f8:93:91:0d:29:43:99:94:8f:b4:75:da:8e:
4a:f1:9b:b6:4b:50:a6:dd:73:f6:23:f7:c0:fc:a3:
1d:ab:f4:dd:ce:90:1e:d7:7e:3b:f2:42:76:e7:12:
ea:27:a5:98:31:b6:3c:d9:d0:90:96:bf:d3:82:7a:
4c:e4:f5:84:b4:32:4d:6b:3b:b6:dd:96:bc:b6:79:
f8:0b:d9:23:3a:6c:7e:90:f3:9d:c2:f7:e2:92:ef:
55:9c:db:69:76:25:d5:91:68:7c:44:7c:ef:46:09:
c7:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:A2:2E:82:EF:8D:8E:15:9C:54:87:F7:AF:7B:E1:87:4C:3F:84:8F
X509v3 Authority Key Identifier:
keyid:3D:0E:F4:35:8A:DB:04:0F:33:3D:93:61:A4:26:1E:A0:E5:0D:38:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PQ70NYrbBA8zPZNhpCYeoOUNOKs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/f946ef-9619-4bdd-9f47-d2bc96a98a18/1/b6Iugu-NjhWcVIf3r3vhh0w_hI8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/f946ef-9619-4bdd-9f47-d2bc96a98a18/1/PQ70NYrbBA8zPZNhpCYeoOUNOKs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.240.0.0/22
195.158.252.0/23
195.190.11.0/24
IPv6:
2001:67c:11f8::/48
2a0c:6880::/32
Signature Algorithm: sha256WithRSAEncryption
48:44:56:85:b5:6c:a7:fd:f4:18:b5:ac:41:38:b6:d2:ce:35:
7f:24:76:c5:84:b8:cf:ea:91:20:7f:ee:d5:5f:1e:f5:65:8b:
b2:46:9d:fa:09:e1:38:b6:cc:cf:d3:3f:75:82:cf:4a:47:7f:
3a:af:fd:6d:7d:5e:99:60:6b:64:9e:bf:5c:18:02:44:bb:2d:
6e:f8:5e:58:91:1c:04:8e:d5:4e:59:6b:53:93:b6:f9:26:a2:
81:79:11:1c:b5:34:bd:05:f6:af:c7:e2:70:9d:c3:c3:c7:1c:
69:7d:0e:64:22:35:12:64:18:c9:62:49:2a:92:e9:8d:9e:84:
8b:ac:1b:ac:8d:21:75:cf:ce:ea:2e:0c:e5:f2:5c:23:50:77:
e9:a4:72:39:0c:ae:f5:02:cb:16:54:4d:89:7c:25:40:08:34:
fe:e2:75:be:a0:7e:a3:23:82:ba:7c:04:a6:2f:39:e2:8b:8c:
b0:cf:9b:e7:77:44:f9:e2:41:c5:85:e4:dd:86:ca:0c:c7:4a:
2d:5e:ab:0c:4a:f3:c9:ae:3b:84:28:6f:c0:20:b5:1f:98:13:
67:a3:22:8d:3d:f3:c3:45:3b:f8:b9:e0:bc:33:4d:19:2c:c5:
23:6b:9b:2a:e9:d4:b4:80:15:25:b9:2e:0b:56:88:bd:78:7b:
4c:87:da:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 22:32:11 2024 by rpki-client on console-ams.rpki-client.org