Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/1425a6-1863-42a0-8323-3c72967ff7c1/1/67dt8ILcw_0BC3PmkniRv0_kQ90.roa
File: 67dt8ILcw_0BC3PmkniRv0_kQ90.roa (raw, json)
Hash identifier: L3DuWuyN3tpySZQ/zz43COjoXQqk0v6T1wpWo1sfyL0=
Subject key identifier: EB:B7:6D:F0:82:DC:C3:FD:01:0B:73:E6:92:78:91:BF:4F:E4:43:DD
Certificate issuer: /CN=564ead38096303bc4b6a1f2b02e1b91be4849146
Certificate serial: 018CC3B686211F0DE53B0AB4AE40F3E3305F
Authority key identifier: 56:4E:AD:38:09:63:03:BC:4B:6A:1F:2B:02:E1:B9:1B:E4:84:91:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vk6tOAljA7xLah8rAuG5G-SEkUY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/1425a6-1863-42a0-8323-3c72967ff7c1/1/67dt8ILcw_0BC3PmkniRv0_kQ90.roa
Signing time: Mon 01 Jan 2024 06:29:28 +0000
ROA not before: Mon 01 Jan 2024 06:29:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203416
IP address blocks: 185.131.8.0/24 maxlen: 24
185.131.10.0/23 maxlen: 23
185.131.9.0/24 maxlen: 24
91.244.192.0/22 maxlen: 22
2a06:dd40:1::/48 maxlen: 48
2a06:dd40:5601::/48 maxlen: 48
2a06:dd40::/29 maxlen: 29
2a06:dd40:2::/48 maxlen: 48
2a06:dd40::/48 maxlen: 48
2a06:dd40:5600::/48 maxlen: 48
2a06:dd40:3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/1425a6-1863-42a0-8323-3c72967ff7c1/1/Vk6tOAljA7xLah8rAuG5G-SEkUY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/1425a6-1863-42a0-8323-3c72967ff7c1/1/Vk6tOAljA7xLah8rAuG5G-SEkUY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vk6tOAljA7xLah8rAuG5G-SEkUY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:86:21:1f:0d:e5:3b:0a:b4:ae:40:f3:e3:30:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=564ead38096303bc4b6a1f2b02e1b91be4849146
Validity
Not Before: Jan 1 06:29:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ebb76df082dcc3fd010b73e6927891bf4fe443dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:6e:15:e8:c1:d3:26:0b:a3:6d:b5:f0:73:90:
e3:60:bb:61:b6:3f:66:b9:91:a8:d3:c6:5c:d5:39:
72:a0:bf:a5:0e:8f:24:cf:62:32:34:af:b6:29:74:
ae:b7:bc:7b:06:3d:95:44:49:3f:fd:23:26:eb:e1:
27:51:be:2f:f5:30:1d:54:fd:fd:3f:70:03:98:00:
94:51:36:b5:ef:02:b0:d2:22:82:8e:e9:84:77:5a:
94:76:91:28:a6:5a:71:5b:54:67:6e:a5:0c:80:11:
32:42:01:bb:36:6f:9f:8a:25:6d:fc:e8:95:33:2d:
a4:11:3b:a4:5c:c0:68:b6:6d:29:fb:62:96:20:f1:
b2:aa:3e:a7:ea:fe:16:e2:a8:e9:e5:46:88:f1:90:
6e:1b:d3:fe:10:4d:eb:58:a0:96:33:a5:32:45:d2:
da:ae:fe:1d:68:0c:d1:a3:a9:42:48:16:61:b3:f7:
0e:11:45:48:4a:fc:7c:83:cf:12:24:fa:62:d7:5a:
74:eb:1d:eb:d8:dd:31:02:8a:a0:2a:4d:a4:d8:b4:
06:34:61:28:c7:e1:8d:40:07:3c:1a:ed:d5:de:4a:
f0:12:18:55:83:12:df:a4:39:47:74:63:9c:af:e8:
9a:75:6e:cc:6b:84:63:f3:70:2e:61:9e:6a:98:8e:
3d:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:B7:6D:F0:82:DC:C3:FD:01:0B:73:E6:92:78:91:BF:4F:E4:43:DD
X509v3 Authority Key Identifier:
keyid:56:4E:AD:38:09:63:03:BC:4B:6A:1F:2B:02:E1:B9:1B:E4:84:91:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vk6tOAljA7xLah8rAuG5G-SEkUY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/1425a6-1863-42a0-8323-3c72967ff7c1/1/67dt8ILcw_0BC3PmkniRv0_kQ90.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/1425a6-1863-42a0-8323-3c72967ff7c1/1/Vk6tOAljA7xLah8rAuG5G-SEkUY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.244.192.0/22
185.131.8.0/22
IPv6:
2a06:dd40::/29
Signature Algorithm: sha256WithRSAEncryption
bb:fe:ef:68:ff:84:56:5c:8b:60:6c:df:2c:24:c3:4f:62:26:
7a:89:67:76:3d:79:86:c4:56:e0:b6:30:f5:82:c4:33:79:2e:
e3:dd:e2:7d:cc:bc:56:4c:44:7b:dc:89:4b:39:64:59:4d:46:
2b:65:06:fa:a4:47:94:ba:dd:01:ff:31:5b:2a:a0:dd:8f:d0:
10:22:ad:82:98:16:1d:a1:99:7d:31:02:24:c4:cc:e5:7e:8f:
81:eb:2a:84:35:d7:1f:65:bd:ad:ef:8e:e4:7a:12:be:49:51:
a2:52:27:45:f1:e3:f8:ff:74:9b:26:c7:62:3b:41:11:b9:92:
55:17:4e:a4:ba:02:ec:d9:86:a3:3d:7b:54:b8:c9:b6:98:b4:
b1:8b:33:de:dc:05:26:1a:41:65:bb:1a:99:6d:94:d1:e7:28:
48:47:ae:17:90:68:a2:63:e2:cf:8b:3a:f2:81:47:07:a3:60:
72:f9:02:5c:78:3d:a9:68:90:d2:12:ff:d1:34:62:e6:21:38:
4b:82:e8:d7:58:95:e2:56:93:bb:ed:de:4a:28:e0:c2:58:65:
10:9c:08:b4:67:cf:59:b2:71:9f:6f:9b:1a:05:50:3c:dc:d9:
07:1d:96:79:08:ea:a0:be:25:2b:af:01:fc:0b:d1:f3:4a:a4:
ea:bb:26:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:48:06 2024 by rpki-client on console-fra.rpki-client.org