Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/9cfd8e-23cd-447a-9d2c-d0b111ba4148/1/6UCGjTexqMYWPfa7XcUMeF_oYDI.roa
File: 6UCGjTexqMYWPfa7XcUMeF_oYDI.roa (raw, json)
Hash identifier: Y8Osv050cDj9zDVk6HjrLscJlUsMAdb5yrKSuhqsNcA=
Subject key identifier: E9:40:86:8D:37:B1:A8:C6:16:3D:F6:BB:5D:C5:0C:78:5F:E8:60:32
Certificate issuer: /CN=28f567549983f43add998c36e8f78bd15f45a2cc
Certificate serial: 018CCA2B82AF686D97D03EDF9A3BE77E15DD
Authority key identifier: 28:F5:67:54:99:83:F4:3A:DD:99:8C:36:E8:F7:8B:D1:5F:45:A2:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KPVnVJmD9DrdmYw26PeL0V9Fosw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/9cfd8e-23cd-447a-9d2c-d0b111ba4148/1/6UCGjTexqMYWPfa7XcUMeF_oYDI.roa
Signing time: Tue 02 Jan 2024 12:34:58 +0000
ROA not before: Tue 02 Jan 2024 12:34:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199947
IP address blocks: 185.41.32.0/22 maxlen: 22
45.140.84.0/22 maxlen: 22
2a01:5420::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/9cfd8e-23cd-447a-9d2c-d0b111ba4148/1/KPVnVJmD9DrdmYw26PeL0V9Fosw.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/9cfd8e-23cd-447a-9d2c-d0b111ba4148/1/KPVnVJmD9DrdmYw26PeL0V9Fosw.mft
rsync://rpki.ripe.net/repository/DEFAULT/KPVnVJmD9DrdmYw26PeL0V9Fosw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2b:82:af:68:6d:97:d0:3e:df:9a:3b:e7:7e:15:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28f567549983f43add998c36e8f78bd15f45a2cc
Validity
Not Before: Jan 2 12:34:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e940868d37b1a8c6163df6bb5dc50c785fe86032
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:66:37:be:83:5f:21:ee:ef:cd:94:a6:bc:5e:
5c:6f:c9:a4:90:31:30:b6:fb:c3:ca:f8:87:61:23:
1f:11:78:05:26:10:fc:8b:fd:c7:c3:4e:ba:24:03:
f4:39:40:5c:e1:c7:f3:b7:dd:60:8a:95:71:88:9c:
1b:3e:cc:76:0e:7b:62:b8:69:63:db:1b:59:ea:46:
0d:8c:0c:ec:17:58:5c:55:f3:e7:ee:7f:6e:4a:cc:
02:74:54:51:5a:2e:e3:46:c1:53:92:eb:78:31:85:
58:a0:fa:21:0c:bd:ab:59:e5:34:f7:c9:21:cf:01:
42:d3:cd:fd:c0:68:13:3a:94:0b:ff:8a:ea:1f:3e:
d1:d5:af:4b:cf:17:9a:be:a7:87:cf:9d:6b:35:ad:
06:65:d7:88:1f:8d:ee:78:b8:3d:ef:ef:3f:02:f3:
8c:b4:56:db:d3:7d:30:44:58:e2:4e:f2:8a:3f:67:
3c:94:39:7f:5a:c9:ec:b0:05:7d:c4:dc:a1:ee:20:
43:8a:60:fa:1d:fd:74:22:d1:f2:48:5f:8c:5e:f1:
d0:34:53:08:01:1c:6e:12:bc:30:8b:0d:b5:bb:77:
11:d4:4a:84:b8:07:e2:16:32:24:27:f4:db:e7:fe:
5f:95:7b:34:b8:5d:12:60:fb:c8:b5:9e:0d:99:01:
f0:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:40:86:8D:37:B1:A8:C6:16:3D:F6:BB:5D:C5:0C:78:5F:E8:60:32
X509v3 Authority Key Identifier:
keyid:28:F5:67:54:99:83:F4:3A:DD:99:8C:36:E8:F7:8B:D1:5F:45:A2:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KPVnVJmD9DrdmYw26PeL0V9Fosw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/9cfd8e-23cd-447a-9d2c-d0b111ba4148/1/6UCGjTexqMYWPfa7XcUMeF_oYDI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/9cfd8e-23cd-447a-9d2c-d0b111ba4148/1/KPVnVJmD9DrdmYw26PeL0V9Fosw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.84.0/22
185.41.32.0/22
IPv6:
2a01:5420::/32
Signature Algorithm: sha256WithRSAEncryption
20:13:0a:7a:c9:1c:4a:21:1e:50:62:b3:0a:26:a2:d5:a4:d5:
be:b4:86:df:be:ca:8d:b2:c7:5f:76:31:22:36:23:11:1f:dc:
8f:39:6a:d0:5d:f7:d6:81:50:2b:bd:76:7a:8b:77:ad:5a:d8:
a2:3e:ea:b6:60:4b:02:d4:1c:ef:71:38:6a:50:17:09:32:8d:
93:95:39:b4:d7:9a:f0:07:4e:39:d1:4f:b2:10:fb:7c:cb:29:
a1:66:4d:6e:d1:28:f8:6f:46:39:6a:5f:ef:c8:84:88:b8:21:
55:a3:17:f2:2a:62:ce:ab:6b:9c:3a:c2:8a:b0:a5:62:47:bb:
39:26:fa:31:ac:67:bf:67:6a:ec:0d:4e:5d:dc:38:3c:da:5e:
25:da:f2:0f:33:a8:be:7a:55:1f:44:5d:fd:78:e8:9e:41:a4:
cf:65:68:28:2e:bc:7e:9e:da:48:a3:e9:a3:9e:cf:76:d3:c3:
64:dc:d0:13:d2:b3:3a:5b:a0:0d:68:f6:6b:bb:e4:69:1e:57:
51:62:69:76:34:8c:06:0b:11:0b:27:06:c4:7a:d2:1f:e5:34:
e3:fc:29:45:8c:a6:4c:05:88:96:55:49:62:68:4c:44:b4:38:
d8:b5:5b:9e:da:20:48:e8:42:11:c9:4d:b0:bb:96:52:f3:2a:
1a:fd:97:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 22:35:01 2024 by rpki-client on console-ams.rpki-client.org