Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/f8a0a5-b185-49a5-85ad-133eff78442b/1/tA6clkO-5zftLY3X2Xw7ACOkhl0.roa
File: tA6clkO-5zftLY3X2Xw7ACOkhl0.roa (raw, json)
Hash identifier: GOu9otq6nIx/nTZFJDhO1K9FdqwSXcae9M9YzjhNx+s=
Subject key identifier: B4:0E:9C:96:43:BE:E7:37:ED:2D:8D:D7:D9:7C:3B:00:23:A4:86:5D
Certificate issuer: /CN=ff80b7710b139844275c9de9c8e764eb642e18c3
Certificate serial: 018CC793D582BA5E699006B3E2728E4B14EB
Authority key identifier: FF:80:B7:71:0B:13:98:44:27:5C:9D:E9:C8:E7:64:EB:64:2E:18:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4C3cQsTmEQnXJ3pyOdk62QuGMM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/f8a0a5-b185-49a5-85ad-133eff78442b/1/tA6clkO-5zftLY3X2Xw7ACOkhl0.roa
Signing time: Tue 02 Jan 2024 00:30:03 +0000
ROA not before: Tue 02 Jan 2024 00:30:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205718
IP address blocks: 185.229.156.0/22 maxlen: 22
2a09:eb40::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/f8a0a5-b185-49a5-85ad-133eff78442b/1/_4C3cQsTmEQnXJ3pyOdk62QuGMM.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/f8a0a5-b185-49a5-85ad-133eff78442b/1/_4C3cQsTmEQnXJ3pyOdk62QuGMM.mft
rsync://rpki.ripe.net/repository/DEFAULT/_4C3cQsTmEQnXJ3pyOdk62QuGMM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 12:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:93:d5:82:ba:5e:69:90:06:b3:e2:72:8e:4b:14:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff80b7710b139844275c9de9c8e764eb642e18c3
Validity
Not Before: Jan 2 00:30:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b40e9c9643bee737ed2d8dd7d97c3b0023a4865d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b1:e0:ce:0e:71:84:66:b9:20:a7:45:b4:a2:
2f:79:d0:11:29:d8:e0:57:b7:4b:77:88:77:9c:ca:
b0:0f:69:a8:24:5a:77:95:eb:fd:72:4a:54:06:6c:
ec:c2:05:35:17:f1:04:c5:f3:0b:b7:52:8f:27:00:
62:77:5c:95:c7:77:ad:05:7d:ce:33:9c:9a:ce:d0:
31:03:41:f4:34:8f:8d:15:54:32:7d:77:ea:02:13:
51:07:2b:93:e3:6f:8a:cd:2d:de:11:c5:d0:32:34:
81:21:c5:48:98:19:d2:0b:9d:b0:0f:5c:37:23:af:
c7:d2:44:5a:02:91:b4:fc:37:c1:f0:3c:a3:45:55:
10:bb:db:98:11:23:98:2c:8e:1d:58:b8:92:70:f1:
dd:b5:d2:4b:e5:60:28:c8:f2:68:ce:12:7a:bd:7d:
e9:66:11:f5:95:af:bf:5c:cb:ad:0c:b5:1f:ba:16:
ca:c5:dc:96:d1:9c:03:03:82:ef:15:0f:ac:60:93:
2d:8a:33:4c:bd:18:21:99:a5:83:93:23:8d:ba:09:
f6:91:65:0d:2f:bb:c5:f4:7e:d0:3d:31:fd:a5:96:
6c:c5:dd:c6:64:cc:d8:2e:d7:b1:a7:80:9d:d3:35:
24:b1:1a:39:eb:a3:21:55:b9:26:1a:42:ee:e9:29:
de:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:0E:9C:96:43:BE:E7:37:ED:2D:8D:D7:D9:7C:3B:00:23:A4:86:5D
X509v3 Authority Key Identifier:
keyid:FF:80:B7:71:0B:13:98:44:27:5C:9D:E9:C8:E7:64:EB:64:2E:18:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4C3cQsTmEQnXJ3pyOdk62QuGMM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f8a0a5-b185-49a5-85ad-133eff78442b/1/tA6clkO-5zftLY3X2Xw7ACOkhl0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f8a0a5-b185-49a5-85ad-133eff78442b/1/_4C3cQsTmEQnXJ3pyOdk62QuGMM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.229.156.0/22
IPv6:
2a09:eb40::/32
Signature Algorithm: sha256WithRSAEncryption
5c:28:02:86:eb:79:30:0e:fa:6d:9c:2d:fd:c5:1c:25:29:cc:
2b:08:85:31:c8:80:bb:68:e5:ec:bb:1a:37:ed:21:f9:5e:42:
27:3f:ac:9d:14:4a:14:f7:b0:59:91:c8:c1:21:3d:d9:4c:df:
87:51:f8:4c:ba:29:65:96:75:6e:74:a5:0a:68:a0:34:5a:eb:
c5:d8:4a:a2:2f:97:d1:87:fd:7f:60:16:ce:ae:57:a6:56:83:
e2:3d:ab:28:89:38:d1:3c:e0:f1:60:7c:3f:22:4b:37:3c:69:
e8:01:c3:ab:c5:9f:58:30:34:35:8d:21:b4:ca:27:3e:b7:da:
05:29:31:65:c9:68:e1:ce:03:65:db:d8:2c:6b:da:d7:9d:77:
ab:93:58:5b:68:b8:93:0d:0d:37:5f:5d:e6:6e:9c:24:14:5f:
6d:47:33:dd:d0:25:c3:d5:fc:9c:79:03:bc:de:20:b9:c5:0f:
1b:1e:c5:45:fc:92:32:54:52:36:06:bc:10:9e:9a:17:23:77:
08:bc:06:34:cd:41:21:d3:a2:21:e7:d3:15:a5:b3:ce:61:0f:
1a:c3:e0:49:78:57:fc:6f:76:66:00:fa:7b:f6:57:48:40:04:
41:82:07:b5:20:be:5b:8f:cf:f7:9c:57:27:55:78:be:99:66:
35:eb:76:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 16:00:51 2024 by rpki-client on console-fra.rpki-client.org