Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/affc01-a58f-4f70-a404-abf0ea07efaf/1/awVW0O-vaHxr09_8yOZgTi6v3BU.roa
File: awVW0O-vaHxr09_8yOZgTi6v3BU.roa (raw, json)
Hash identifier: u5JBdyOvwY1vHw1gpTEIVTNgfNIf+KQKbB2GsJbVyS8=
Subject key identifier: 6B:05:56:D0:EF:AF:68:7C:6B:D3:DF:FC:C8:E6:60:4E:2E:AF:DC:15
Certificate issuer: /CN=39d43c26468819c07b1925115fe4921f84203d16
Certificate serial: 018CC349058ED2C055B013D72C70F45AF8FC
Authority key identifier: 39:D4:3C:26:46:88:19:C0:7B:19:25:11:5F:E4:92:1F:84:20:3D:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OdQ8JkaIGcB7GSURX-SSH4QgPRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/affc01-a58f-4f70-a404-abf0ea07efaf/1/awVW0O-vaHxr09_8yOZgTi6v3BU.roa
Signing time: Mon 01 Jan 2024 04:29:51 +0000
ROA not before: Mon 01 Jan 2024 04:29:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59970
IP address blocks: 185.61.84.0/22 maxlen: 22
185.244.188.0/22 maxlen: 22
185.219.16.0/22 maxlen: 22
2a0b:ddc0::/29 maxlen: 29
2a02:78a0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/affc01-a58f-4f70-a404-abf0ea07efaf/1/OdQ8JkaIGcB7GSURX-SSH4QgPRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/affc01-a58f-4f70-a404-abf0ea07efaf/1/OdQ8JkaIGcB7GSURX-SSH4QgPRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/OdQ8JkaIGcB7GSURX-SSH4QgPRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:05:8e:d2:c0:55:b0:13:d7:2c:70:f4:5a:f8:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39d43c26468819c07b1925115fe4921f84203d16
Validity
Not Before: Jan 1 04:29:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6b0556d0efaf687c6bd3dffcc8e6604e2eafdc15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:d8:07:04:1e:b3:f7:7d:f6:c5:2c:0e:9b:d6:
c0:19:3f:c7:1c:e6:c2:db:99:62:c4:f9:64:77:ca:
05:87:e4:bb:a1:69:0c:64:28:a0:d0:50:bc:ca:a4:
9d:ba:26:c8:39:b8:80:a2:4b:5e:97:83:42:a2:af:
4b:fd:3b:a6:08:a7:23:58:f4:64:c0:18:36:ee:a4:
bd:2e:96:f4:63:b7:fe:76:ba:f0:1a:96:9f:cc:64:
72:f3:a7:3a:21:d2:3a:7b:91:4b:05:6c:3e:80:ac:
ae:5d:4e:2d:08:01:89:87:34:fb:40:58:07:b9:8e:
2d:4d:4c:e6:ac:11:8e:ca:2b:ad:ca:48:24:35:36:
90:f7:4d:3d:c6:fb:2d:01:82:ed:52:34:82:fc:39:
95:fc:be:56:1f:80:33:19:73:45:17:e1:e2:d7:19:
66:93:2e:54:58:95:aa:74:91:02:d6:f6:83:2d:6d:
c8:c1:9e:1f:7c:08:05:15:e5:44:cc:de:4c:e0:45:
f9:d2:50:8e:43:67:8f:d9:18:36:e3:24:7c:28:33:
8d:d9:82:be:5e:96:d0:12:ca:e8:83:ba:0d:bd:c4:
ba:46:d8:86:9a:90:ff:00:5d:c6:7a:ef:e7:5c:f7:
86:c9:c3:8e:ed:0a:07:eb:29:dc:0d:2d:28:6b:db:
fb:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:05:56:D0:EF:AF:68:7C:6B:D3:DF:FC:C8:E6:60:4E:2E:AF:DC:15
X509v3 Authority Key Identifier:
keyid:39:D4:3C:26:46:88:19:C0:7B:19:25:11:5F:E4:92:1F:84:20:3D:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OdQ8JkaIGcB7GSURX-SSH4QgPRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/affc01-a58f-4f70-a404-abf0ea07efaf/1/awVW0O-vaHxr09_8yOZgTi6v3BU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/affc01-a58f-4f70-a404-abf0ea07efaf/1/OdQ8JkaIGcB7GSURX-SSH4QgPRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.61.84.0/22
185.219.16.0/22
185.244.188.0/22
IPv6:
2a02:78a0::/29
2a0b:ddc0::/29
Signature Algorithm: sha256WithRSAEncryption
14:97:ed:0c:87:c0:0f:f9:91:07:a1:db:17:09:54:d4:9a:f5:
52:ed:39:1d:25:a4:c9:9e:f5:37:c2:b8:b1:18:4d:cb:29:ff:
70:e4:ae:26:c8:b7:92:64:73:bc:27:f6:38:ee:f9:5f:23:73:
d8:d1:3b:ea:61:6e:b5:e2:64:bd:2d:7b:1f:78:48:76:2b:7a:
e6:ca:2b:05:e3:8f:64:75:c4:8a:bb:b8:34:40:36:54:f1:9b:
b5:a7:cc:a2:9e:31:81:e6:20:ef:31:be:f3:a3:c0:58:db:e3:
fe:ac:d2:31:8b:63:b5:00:2b:9e:9b:75:f2:4b:8c:40:6b:22:
2e:f5:ac:75:bb:ba:3e:19:a7:69:e2:de:d4:7e:98:5e:83:71:
af:46:cd:5d:21:5f:a1:f0:b6:51:43:dc:bc:75:24:ca:aa:ba:
db:16:33:ad:51:a7:e0:41:67:aa:03:d9:c6:80:f2:3e:99:22:
b8:13:8e:99:67:fd:47:4e:3a:8e:5e:7c:8b:fb:05:30:57:6e:
ae:8e:05:fe:75:03:a6:a2:77:4e:4f:98:03:ce:38:43:da:19:
a2:80:30:1b:2a:d9:2b:a0:2d:ad:45:90:53:76:00:1b:2b:93:
9b:99:cb:8c:5b:12:f4:4e:3d:3b:34:67:2b:5a:26:8f:d5:af:
0c:c1:5c:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 23:02:18 2024 by rpki-client on console-fra.rpki-client.org