Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/6D4t59QNnNKPnnyqNarBaCmlHbw.roa
File: 6D4t59QNnNKPnnyqNarBaCmlHbw.roa (raw, json)
Hash identifier: wpRURc3LdqMvq3vWJ4E31vv/Y0NXQHjc/4yIADETfsU=
Subject key identifier: E8:3E:2D:E7:D4:0D:9C:D2:8F:9E:7C:AA:35:AA:C1:68:29:A5:1D:BC
Certificate issuer: /CN=746365355b665564a210c358c68a0117b7fbeb9a
Certificate serial: 018F37CD5DDCAAA0607D45F8B28E4CB08BC7
Authority key identifier: 74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/6D4t59QNnNKPnnyqNarBaCmlHbw.roa
Signing time: Thu 02 May 2024 05:35:56 +0000
ROA not before: Thu 02 May 2024 05:35:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48108
IP address blocks: 185.120.56.0/24 maxlen: 24
185.120.57.0/24 maxlen: 24
185.120.58.0/24 maxlen: 24
185.120.59.0/24 maxlen: 24
212.22.64.0/24 maxlen: 24
212.22.75.0/24 maxlen: 24
212.22.77.0/24 maxlen: 24
2a06:c3c0:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.mft
rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 02:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:37:cd:5d:dc:aa:a0:60:7d:45:f8:b2:8e:4c:b0:8b:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=746365355b665564a210c358c68a0117b7fbeb9a
Validity
Not Before: May 2 05:35:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e83e2de7d40d9cd28f9e7caa35aac16829a51dbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:53:e4:b1:1e:d2:4b:6f:d5:36:74:6e:08:17:
bd:35:ca:57:35:d2:e3:97:7a:d7:e4:50:b4:a3:ab:
9e:08:76:be:c9:a5:1f:09:02:dc:be:ff:51:5a:8c:
f4:f1:84:0c:d4:8d:41:e0:ab:f7:0c:01:c1:61:ca:
39:44:06:8b:9f:b9:97:1d:42:28:58:76:7e:09:77:
67:6f:07:d6:37:2c:4e:d8:37:57:62:18:cf:ca:37:
15:0b:6d:81:a4:b3:17:50:32:1d:16:30:52:a0:4d:
5a:8a:d1:7b:f1:b0:33:6a:65:1e:85:22:06:4f:73:
3c:6f:5f:53:f8:4a:46:95:f3:39:18:35:1b:77:8e:
a6:84:39:d7:7b:15:80:a4:02:1d:45:b8:2c:e5:71:
98:41:7c:f8:9d:aa:47:ed:c7:f7:78:8a:2c:5b:a0:
7c:29:1b:43:4c:cf:21:64:2e:de:ea:f0:5f:5c:84:
7f:a5:65:9b:ed:47:03:72:46:12:fd:bb:68:6d:ae:
2c:82:02:48:ad:8b:28:f2:e1:43:12:07:d4:d6:e3:
eb:02:3a:5b:cb:c2:62:5a:77:b8:27:57:d4:60:2f:
88:1b:db:79:46:f5:98:da:8b:16:4b:18:26:c5:3f:
1b:2e:cf:d1:68:8a:16:37:aa:25:f7:52:40:d4:8a:
e5:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:3E:2D:E7:D4:0D:9C:D2:8F:9E:7C:AA:35:AA:C1:68:29:A5:1D:BC
X509v3 Authority Key Identifier:
keyid:74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/6D4t59QNnNKPnnyqNarBaCmlHbw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.120.56.0/22
212.22.64.0/24
212.22.75.0/24
212.22.77.0/24
IPv6:
2a06:c3c0:1::/48
Signature Algorithm: sha256WithRSAEncryption
39:3e:02:37:1d:11:8f:f8:8b:52:59:dd:4d:16:e3:d1:76:30:
67:02:c8:9a:48:d8:b7:92:69:ea:77:2c:9b:1e:e3:e5:95:d4:
7d:56:1a:30:ca:36:a6:e4:d3:15:3a:75:43:c5:76:3c:61:ae:
5d:fc:80:5c:ec:b1:b1:b2:25:41:e6:7b:f8:aa:01:f3:7c:ef:
74:81:94:97:8b:cc:8e:2f:4f:db:87:37:67:68:23:a4:61:e2:
71:77:d1:1e:6b:4d:3d:d8:87:37:cf:89:5b:3f:c5:67:cf:38:
b8:96:33:c0:95:9e:6c:65:08:40:79:c1:d6:a6:06:a2:ff:cb:
fb:a2:60:c0:cd:73:d4:d1:06:ba:07:8a:3f:8e:e1:c0:17:04:
7c:c5:a1:61:db:67:71:dc:7e:97:e5:cf:cc:3d:0a:36:40:ce:
43:bc:d8:e3:b8:7c:7e:f6:bc:a7:7f:2d:ed:88:83:99:d0:5d:
0d:4e:74:6e:1f:5e:8d:58:c8:21:bc:4d:4c:5a:6f:0a:0d:54:
42:f2:7b:73:3c:ad:fd:79:da:16:80:a8:2f:39:d4:08:8d:cb:
ab:d0:9e:e6:1c:e4:1c:09:50:c5:10:bb:ec:d5:64:58:49:fc:
cf:ba:9c:c9:41:3a:4b:d2:62:b7:65:6e:bb:54:ed:5a:27:9a:
8e:d8:74:c2
-----BEGIN CERTIFICATE-----
MIIFIDCCBAigAwIBAgISAY83zV3cqqBgfUX4so5MsIvHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0NjM2NTM1NWI2NjU1NjRhMjEwYzM1OGM2OGEwMTE3Yjdm
YmViOWEwHhcNMjQwNTAyMDUzNTU2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlODNlMmRlN2Q0MGQ5Y2QyOGY5ZTdjYWEzNWFhYzE2ODI5YTUxZGJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxlPksR7SS2/VNnRuCBe9NcpXNdLj
l3rX5FC0o6ueCHa+yaUfCQLcvv9RWoz08YQM1I1B4Kv3DAHBYco5RAaLn7mXHUIo
WHZ+CXdnbwfWNyxO2DdXYhjPyjcVC22BpLMXUDIdFjBSoE1aitF78bAzamUehSIG
T3M8b19T+EpGlfM5GDUbd46mhDnXexWApAIdRbgs5XGYQXz4napH7cf3eIosW6B8
KRtDTM8hZC7e6vBfXIR/pWWb7UcDckYS/btoba4sggJIrYso8uFDEgfU1uPrAjpb
y8JiWne4J1fUYC+IG9t5RvWY2osWSxgmxT8bLs/RaIoWN6ol91JA1IrlEQIDAQAB
o4ICLDCCAigwHQYDVR0OBBYEFOg+LefUDZzSj558qjWqwWgppR28MB8GA1UdIwQY
MBaAFHRjZTVbZlVkohDDWMaKARe3++uaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEdObE5WdG1WV1NpRU1OWXhvb0JGN2Y3NjVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9hZWEzNmQtYmFiZi00NDc0LWE3OGIt
NmE0ZWNhZjhiM2IxLzEvNkQ0dDU5UU5uTktQbm55cU5hckJhQ21sSGJ3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi9hZWEzNmQtYmFiZi00NDc0LWE3OGItNmE0ZWNhZjhiM2Ix
LzEvZEdObE5WdG1WV1NpRU1OWXhvb0JGN2Y3NjVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEIGCCsGAQUFBwEHAQH/BDMwMTAeBAIAATAYAwQCuXg4AwQA
1BZAAwQA1BZLAwQA1BZNMA8EAgACMAkDBwAqBsPAAAEwDQYJKoZIhvcNAQELBQAD
ggEBADk+AjcdEY/4i1JZ3U0W49F2MGcCyJpI2LeSaep3LJse4+WV1H1WGjDKNqbk
0xU6dUPFdjxhrl38gFzssbGyJUHme/iqAfN873SBlJeLzI4vT9uHN2doI6Rh4nF3
0R5rTT3YhzfPiVs/xWfPOLiWM8CVnmxlCEB5wdamBqL/y/uiYMDNc9TRBroHij+O
4cAXBHzFoWHbZ3Hcfpflz8w9CjZAzkO82OO4fH72vKd/Le2Ig5nQXQ1OdG4fXo1Y
yCG8TUxabwoNVELye3M8rf152haAqC851AiNy6vQnuYc5BwJUMUQu+zVZFhJ/M+6
nMlBOkvSYrdlbrtU7Vonmo7YdMI=
-----END CERTIFICATE-----
Generated at Sat May 18 08:30:57 2024 by rpki-client on console-ams.rpki-client.org