Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/bA1dKLnbWGcVINOsR2T4l0XKSQc.roa
File: bA1dKLnbWGcVINOsR2T4l0XKSQc.roa (raw, json)
Hash identifier: YPCRmb5CEm5v8fKi8nCJxCVoTB/3UVgocMDnCvit0Ho=
Subject key identifier: 6C:0D:5D:28:B9:DB:58:67:15:20:D3:AC:47:64:F8:97:45:CA:49:07
Certificate issuer: /CN=4044fa54400bc6cfc30cb8311a819d5bda421a72
Certificate serial: 018CCA2AB5D3D22B5E41AEEA0768E5C5CED0
Authority key identifier: 40:44:FA:54:40:0B:C6:CF:C3:0C:B8:31:1A:81:9D:5B:DA:42:1A:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QET6VEALxs_DDLgxGoGdW9pCGnI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/bA1dKLnbWGcVINOsR2T4l0XKSQc.roa
Signing time: Tue 02 Jan 2024 12:34:05 +0000
ROA not before: Tue 02 Jan 2024 12:34:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60627
IP address blocks: 185.124.112.0/22 maxlen: 22
185.143.204.0/22 maxlen: 22
185.113.56.0/22 maxlen: 22
185.140.56.0/22 maxlen: 22
185.145.8.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/QET6VEALxs_DDLgxGoGdW9pCGnI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/QET6VEALxs_DDLgxGoGdW9pCGnI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QET6VEALxs_DDLgxGoGdW9pCGnI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Jun 2024 01:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:b5:d3:d2:2b:5e:41:ae:ea:07:68:e5:c5:ce:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4044fa54400bc6cfc30cb8311a819d5bda421a72
Validity
Not Before: Jan 2 12:34:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6c0d5d28b9db58671520d3ac4764f89745ca4907
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:f5:8c:26:12:13:9d:cd:9f:c6:61:91:7a:7e:
52:d1:cc:0c:b8:a1:0d:ef:28:f4:d2:09:5c:a8:64:
19:87:07:84:1d:60:d4:1c:c1:b2:04:65:c7:07:50:
52:f5:e6:8c:f8:68:b4:2a:24:01:39:5e:2f:b5:e6:
f8:14:8a:48:d8:3d:9d:12:27:65:a6:28:30:d0:c5:
a6:73:68:99:67:50:d3:01:4c:fb:9e:ab:c4:66:31:
07:b8:fa:7a:3f:f1:5d:3f:cd:5a:bd:16:b8:35:42:
f0:3f:d7:51:fa:3e:6e:df:62:4f:13:1d:fb:ec:35:
34:21:b4:14:cc:60:6d:d8:e2:21:d6:ba:66:30:9b:
d1:de:0a:2a:49:99:1d:2d:be:92:71:03:91:bb:3e:
a8:53:c9:38:a7:39:98:d2:f9:13:4f:b9:c8:fc:dc:
10:94:c7:46:ec:51:d3:7e:4b:c9:71:11:1a:a0:7f:
33:51:bf:74:02:57:7f:b7:82:f2:35:0e:42:b7:e3:
4d:e9:a5:7f:88:64:47:74:7c:87:ef:12:76:93:f0:
59:88:1f:8b:f0:a2:9e:3c:4b:7e:90:ec:2c:85:e0:
b7:4b:e9:79:76:74:fe:52:07:33:91:f0:fd:b2:98:
cf:b3:b1:73:ea:62:18:ee:fe:44:8d:08:c4:d5:16:
4e:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:0D:5D:28:B9:DB:58:67:15:20:D3:AC:47:64:F8:97:45:CA:49:07
X509v3 Authority Key Identifier:
keyid:40:44:FA:54:40:0B:C6:CF:C3:0C:B8:31:1A:81:9D:5B:DA:42:1A:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QET6VEALxs_DDLgxGoGdW9pCGnI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/bA1dKLnbWGcVINOsR2T4l0XKSQc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/QET6VEALxs_DDLgxGoGdW9pCGnI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.113.56.0/22
185.124.112.0/22
185.140.56.0/22
185.143.204.0/22
185.145.8.0/22
Signature Algorithm: sha256WithRSAEncryption
46:c3:3f:d2:8b:f1:3b:34:e8:23:68:7a:e6:8d:e0:f6:84:ab:
e2:dd:b8:7c:42:44:59:38:12:ec:85:eb:59:9f:89:45:8b:ec:
ea:7c:7f:87:1c:b2:67:ca:10:65:21:7b:4c:09:d8:13:df:bf:
59:d9:c0:16:ec:c5:18:d6:bc:0a:8f:9a:c6:53:85:0c:9a:ad:
f4:74:bf:ec:26:99:a5:cc:52:5a:bc:e8:a2:b1:03:0a:80:ba:
ab:31:ba:48:5b:38:92:11:e6:a9:79:4a:54:8c:b3:a5:95:77:
a7:57:ed:74:c5:b2:d3:7b:7a:a2:36:4b:90:80:7e:2a:92:7c:
51:89:6e:f6:e0:60:2d:3f:6d:3f:e2:d9:84:63:64:d2:20:5d:
a7:77:82:a1:dc:90:5e:67:1d:19:c2:10:79:58:a4:94:e2:fe:
aa:b7:d7:d9:b0:03:3a:b8:ac:e1:3a:c6:db:37:b0:1e:cd:25:
1d:bc:c1:bd:45:90:7f:ae:29:94:64:08:28:6e:35:3e:11:4b:
9e:0d:b6:6d:41:c0:8c:c3:36:36:bb:02:d5:36:3c:27:79:c1:
4e:f0:86:9b:bd:bd:f6:d7:91:3c:5b:b8:39:7a:68:dd:2b:91:
7f:7e:47:28:6c:99:c9:17:ca:bd:ca:63:fc:56:b1:bd:b3:b0:
48:ef:36:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 17 10:00:06 2024 by rpki-client on console-fra.rpki-client.org