Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/51a60c-cf63-443d-9e02-04dd56f70fe3/1/6ByreJ6GGmC0Ls5ZQcn1r5njo7U.roa
File: 6ByreJ6GGmC0Ls5ZQcn1r5njo7U.roa (raw, json)
Hash identifier: omPHG08DNmaJPCkFyAYjR5zRmKX5VMPdq7pjTHb8chA=
Subject key identifier: E8:1C:AB:78:9E:86:1A:60:B4:2E:CE:59:41:C9:F5:AF:99:E3:A3:B5
Certificate issuer: /CN=39e87ef03cf171a40ba2bec89e688bb9d3825873
Certificate serial: 018CC4247DA01A47DAFEDB6C255992C179CA
Authority key identifier: 39:E8:7E:F0:3C:F1:71:A4:0B:A2:BE:C8:9E:68:8B:B9:D3:82:58:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oeh-8DzxcaQLor7InmiLudOCWHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/51a60c-cf63-443d-9e02-04dd56f70fe3/1/6ByreJ6GGmC0Ls5ZQcn1r5njo7U.roa
Signing time: Mon 01 Jan 2024 08:29:34 +0000
ROA not before: Mon 01 Jan 2024 08:29:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202139
IP address blocks: 85.158.8.0/22 maxlen: 24
2a05:fa80::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/51a60c-cf63-443d-9e02-04dd56f70fe3/1/Oeh-8DzxcaQLor7InmiLudOCWHM.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/51a60c-cf63-443d-9e02-04dd56f70fe3/1/Oeh-8DzxcaQLor7InmiLudOCWHM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Oeh-8DzxcaQLor7InmiLudOCWHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 09 Jun 2024 01:02:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:7d:a0:1a:47:da:fe:db:6c:25:59:92:c1:79:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39e87ef03cf171a40ba2bec89e688bb9d3825873
Validity
Not Before: Jan 1 08:29:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e81cab789e861a60b42ece5941c9f5af99e3a3b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:8d:96:2e:cc:2f:24:44:5a:21:cb:db:cc:d2:
02:8a:42:e1:6b:d1:32:8d:7c:1e:4d:fa:e1:ea:e3:
b3:1e:a5:c1:09:a3:14:f1:9a:8b:da:46:df:2b:ee:
11:4d:ea:86:f0:50:95:95:db:c5:5e:72:5c:b0:92:
dc:72:36:6f:aa:f7:51:d3:a7:b4:11:e6:54:da:8c:
f2:cc:86:0c:e3:72:2a:b2:9f:63:8f:b7:16:82:45:
3f:16:c8:97:ed:e9:09:1b:65:45:64:25:a4:90:d3:
1a:3b:2b:bc:a8:aa:84:5c:89:12:ae:5e:0c:42:67:
8e:da:d3:99:c8:87:50:fb:a8:df:cc:86:e7:4e:1c:
b6:3b:e0:4d:44:10:db:96:86:5d:6a:8e:f2:2c:9a:
9e:43:07:bc:43:f7:f9:98:db:94:71:20:f9:05:11:
ce:14:b8:11:60:1c:64:f0:d3:f9:8f:e7:d4:47:ce:
8e:ee:08:74:cf:8e:bd:87:92:4c:2c:16:7b:7a:a2:
d9:ea:74:39:b1:e6:7b:06:58:fe:ce:57:98:0f:8d:
42:52:fc:8c:05:66:95:07:b0:aa:7c:e0:8b:81:02:
19:a0:b5:ef:71:f2:e2:7c:5e:1b:cd:ef:67:17:3b:
5b:87:98:83:99:b7:4f:4b:0f:93:5f:3f:d9:b7:d8:
09:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:1C:AB:78:9E:86:1A:60:B4:2E:CE:59:41:C9:F5:AF:99:E3:A3:B5
X509v3 Authority Key Identifier:
keyid:39:E8:7E:F0:3C:F1:71:A4:0B:A2:BE:C8:9E:68:8B:B9:D3:82:58:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oeh-8DzxcaQLor7InmiLudOCWHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/51a60c-cf63-443d-9e02-04dd56f70fe3/1/6ByreJ6GGmC0Ls5ZQcn1r5njo7U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/51a60c-cf63-443d-9e02-04dd56f70fe3/1/Oeh-8DzxcaQLor7InmiLudOCWHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.158.8.0/22
IPv6:
2a05:fa80::/29
Signature Algorithm: sha256WithRSAEncryption
43:5d:6b:a7:24:08:bd:88:61:a1:ef:64:e0:f6:0c:13:8d:de:
97:ea:0f:8d:c3:b4:9b:ec:ca:6c:a0:a2:d7:a1:27:8c:20:64:
eb:6e:3b:b3:fe:60:f3:9f:00:6e:b0:57:11:f6:98:3c:50:40:
f5:3c:1f:fe:37:d4:17:ca:9d:ef:63:2b:87:4f:c9:53:4e:5c:
d3:6f:59:ce:d4:07:be:96:ed:97:f3:f3:f3:17:f4:2c:94:bc:
f7:bd:72:d0:4a:a5:ab:6b:21:23:cb:82:4e:98:2c:9d:f1:ea:
ca:01:3f:c4:76:ee:a8:52:c8:10:ee:1d:29:9b:c6:ad:af:88:
f2:e4:a2:9d:2f:ac:16:1a:bb:08:f4:3e:f0:d3:86:2e:4f:74:
12:19:e7:b4:5d:36:a1:51:f6:d3:45:67:29:d5:ff:a3:a8:a0:
05:22:45:4b:bb:38:17:0b:5c:58:1b:8f:6b:3c:19:4e:b9:b3:
99:9b:96:2f:92:c1:91:b3:76:2e:c5:56:85:81:99:b6:2f:e2:
da:49:5b:8f:72:19:c5:fb:07:99:44:44:75:95:2d:06:62:dd:
99:9b:17:c5:b3:6a:d7:fc:2f:fe:33:03:f5:15:72:59:d9:53:
25:f4:bd:6e:9c:f9:93:e4:76:8c:cc:dd:c5:9f:9a:70:4e:66:
7c:c4:1d:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 09:38:34 2024 by rpki-client on console-fra.rpki-client.org