Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/418b6a-bcfc-4560-b9b1-01aec920c72e/1/a5c7n6xsy08GJNBQs4ykQaZCkX8.roa
File: a5c7n6xsy08GJNBQs4ykQaZCkX8.roa (raw, json)
Hash identifier: Yi/S+n/aEJ9FcBMGlbhTX9ZTm1vxeJ6rG86QBIxGovQ=
Subject key identifier: 6B:97:3B:9F:AC:6C:CB:4F:06:24:D0:50:B3:8C:A4:41:A6:42:91:7F
Certificate issuer: /CN=ab344b32f58b564c897a1ffa6967089198f2c822
Certificate serial: 0190BB614CD696D525D26A8516CCCDC34C43
Authority key identifier: AB:34:4B:32:F5:8B:56:4C:89:7A:1F:FA:69:67:08:91:98:F2:C8:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qzRLMvWLVkyJeh_6aWcIkZjyyCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/418b6a-bcfc-4560-b9b1-01aec920c72e/1/a5c7n6xsy08GJNBQs4ykQaZCkX8.roa
Signing time: Tue 16 Jul 2024 11:50:34 +0000
ROA not before: Tue 16 Jul 2024 11:50:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201764
IP address blocks: 185.40.248.0/22 maxlen: 22
2a01:50a0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/418b6a-bcfc-4560-b9b1-01aec920c72e/1/qzRLMvWLVkyJeh_6aWcIkZjyyCI.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/418b6a-bcfc-4560-b9b1-01aec920c72e/1/qzRLMvWLVkyJeh_6aWcIkZjyyCI.mft
rsync://rpki.ripe.net/repository/DEFAULT/qzRLMvWLVkyJeh_6aWcIkZjyyCI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Sep 2024 14:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:bb:61:4c:d6:96:d5:25:d2:6a:85:16:cc:cd:c3:4c:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab344b32f58b564c897a1ffa6967089198f2c822
Validity
Not Before: Jul 16 11:50:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6b973b9fac6ccb4f0624d050b38ca441a642917f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:55:9c:6d:06:fe:73:6e:6e:5f:00:14:10:79:
90:fa:72:f6:19:38:3a:47:20:4f:c7:8b:4e:81:61:
4a:68:20:04:e0:76:a8:3b:18:ed:3b:f5:d2:f2:1f:
80:6d:77:eb:8a:a9:c8:11:d5:92:0a:92:55:a6:93:
c9:ed:29:82:4f:7e:75:ba:db:1e:be:c9:3f:b5:a8:
9a:30:2f:c0:91:ad:71:5e:d0:9c:20:10:69:0d:d4:
65:3d:d8:83:81:c3:81:80:1c:80:20:8d:59:bd:0c:
bd:8a:f1:e3:79:d5:11:93:cd:1b:5c:82:1b:14:93:
bf:88:41:11:ea:19:d0:df:1c:f1:ff:ad:6b:e9:53:
60:25:c5:45:b0:4d:db:68:24:de:e4:d2:ae:5f:31:
fa:3d:73:3a:81:da:31:43:51:90:78:4a:8c:ff:01:
62:03:f9:27:24:0c:85:7c:34:a6:89:81:33:ed:e5:
5e:06:ba:43:55:07:a7:ed:d9:cc:9b:4a:1b:ed:f4:
3f:85:7f:31:aa:83:9a:35:c5:46:c4:09:a5:4c:a9:
8a:31:9c:98:7b:db:59:56:48:35:10:81:d5:50:f3:
6c:57:c8:36:21:b6:44:6e:a8:9e:ce:c4:89:ee:f4:
14:99:9a:05:a5:14:b5:f2:6c:15:93:29:99:64:0a:
e7:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:97:3B:9F:AC:6C:CB:4F:06:24:D0:50:B3:8C:A4:41:A6:42:91:7F
X509v3 Authority Key Identifier:
keyid:AB:34:4B:32:F5:8B:56:4C:89:7A:1F:FA:69:67:08:91:98:F2:C8:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qzRLMvWLVkyJeh_6aWcIkZjyyCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/418b6a-bcfc-4560-b9b1-01aec920c72e/1/a5c7n6xsy08GJNBQs4ykQaZCkX8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/418b6a-bcfc-4560-b9b1-01aec920c72e/1/qzRLMvWLVkyJeh_6aWcIkZjyyCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.40.248.0/22
IPv6:
2a01:50a0::/32
Signature Algorithm: sha256WithRSAEncryption
bb:59:97:a4:de:10:b9:ce:01:af:ef:6b:ad:b7:b7:db:c5:e7:
a3:a9:3f:71:84:d0:b5:ab:0c:56:8d:db:59:f2:5f:0a:fb:f1:
51:22:3a:11:f0:25:9f:ca:fe:6b:96:a8:0b:f3:3e:15:59:3c:
b2:d3:5c:b5:b9:0a:0a:de:d9:2d:16:c0:d1:8c:0b:21:8c:9c:
b1:f6:24:e4:d0:dd:e1:98:52:21:41:24:2e:fe:10:3f:74:de:
4d:1c:57:87:8e:04:af:ad:12:8c:e7:b7:41:84:1f:7a:80:15:
62:e6:b1:e6:65:9d:ae:ab:e8:93:e2:65:21:a0:c6:a0:85:5a:
8a:ee:38:1d:ef:32:60:b3:7e:57:49:79:ac:d1:54:3a:ef:05:
cb:5b:dc:9f:2c:51:c6:5b:c4:3f:9a:e8:f8:3c:4d:29:10:a9:
6d:33:13:00:6f:21:de:55:97:fb:ce:b4:02:8b:21:24:ba:7f:
df:b3:eb:50:8e:0a:4f:52:35:0a:f5:d9:70:a9:e5:97:3c:76:
fb:b1:37:bd:79:1f:be:2d:d5:3c:fb:b8:9a:08:0a:39:d3:f3:
be:88:97:8b:f5:77:72:04:0e:2c:81:af:f5:e1:5d:32:d3:0e:
46:d3:35:79:35:5c:b7:52:1e:51:ca:8c:15:ca:3a:9f:6d:c1:
74:a5:18:e1
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZC7YUzWltUl0mqFFszNw0xDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiMzQ0YjMyZjU4YjU2NGM4OTdhMWZmYTY5NjcwODkxOThm
MmM4MjIwHhcNMjQwNzE2MTE1MDM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2Yjk3M2I5ZmFjNmNjYjRmMDYyNGQwNTBiMzhjYTQ0MWE2NDI5MTdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwVWcbQb+c25uXwAUEHmQ+nL2GTg6
RyBPx4tOgWFKaCAE4HaoOxjtO/XS8h+AbXfriqnIEdWSCpJVppPJ7SmCT351utse
vsk/taiaMC/Aka1xXtCcIBBpDdRlPdiDgcOBgByAII1ZvQy9ivHjedURk80bXIIb
FJO/iEER6hnQ3xzx/61r6VNgJcVFsE3baCTe5NKuXzH6PXM6gdoxQ1GQeEqM/wFi
A/knJAyFfDSmiYEz7eVeBrpDVQen7dnMm0ob7fQ/hX8xqoOaNcVGxAmlTKmKMZyY
e9tZVkg1EIHVUPNsV8g2IbZEbqiezsSJ7vQUmZoFpRS18mwVkymZZArnXQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFGuXO5+sbMtPBiTQULOMpEGmQpF/MB8GA1UdIwQY
MBaAFKs0SzL1i1ZMiXof+mlnCJGY8sgiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcXpSTE12V0xWa3lKZWhfNmFXY0lrWmp5eUNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS80MThiNmEtYmNmYy00NTYwLWI5YjEt
MDFhZWM5MjBjNzJlLzEvYTVjN242eHN5MDhHSk5CUXM0eWtRYVpDa1g4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS80MThiNmEtYmNmYy00NTYwLWI5YjEtMDFhZWM5MjBjNzJl
LzEvcXpSTE12V0xWa3lKZWhfNmFXY0lrWmp5eUNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuSj4MA0E
AgACMAcDBQAqAVCgMA0GCSqGSIb3DQEBCwUAA4IBAQC7WZek3hC5zgGv72utt7fb
xeejqT9xhNC1qwxWjdtZ8l8K+/FRIjoR8CWfyv5rlqgL8z4VWTyy01y1uQoK3tkt
FsDRjAshjJyx9iTk0N3hmFIhQSQu/hA/dN5NHFeHjgSvrRKM57dBhB96gBVi5rHm
ZZ2uq+iT4mUhoMaghVqK7jgd7zJgs35XSXms0VQ67wXLW9yfLFHGW8Q/muj4PE0p
EKltMxMAbyHeVZf7zrQCiyEkun/fs+tQjgpPUjUK9dlwqeWXPHb7sTe9eR++LdU8
+7iaCAo50/O+iJeL9XdyBA4sga/14V0y0w5G0zV5NVy3Uh5RyowVyjqfbcF0pRjh
-----END CERTIFICATE-----
Generated at Wed Sep 18 23:43:31 2024 by rpki-client on console-fra.rpki-client.org