Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/SUvjs9CV_lkK801xVz0qJBIcYWs.roa
File: SUvjs9CV_lkK801xVz0qJBIcYWs.roa (raw, json)
Hash identifier: s4HhA2CbeUYyQmUet9sObqpmhnnJTB67V01lBfhhjO0=
Subject key identifier: 49:4B:E3:B3:D0:95:FE:59:0A:F3:4D:71:57:3D:2A:24:12:1C:61:6B
Certificate issuer: /CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Certificate serial: 018CC2DB5BD5971AC7FE0287CA976C9E52FE
Authority key identifier: 6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/SUvjs9CV_lkK801xVz0qJBIcYWs.roa
Signing time: Mon 01 Jan 2024 02:30:04 +0000
ROA not before: Mon 01 Jan 2024 02:30:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200005
IP address blocks: 185.123.168.0/22 maxlen: 24
194.35.38.0/24 maxlen: 24
194.35.36.0/23 maxlen: 24
2a0b:35c2::/32 maxlen: 32
2a0b:35c1::/32 maxlen: 32
2a0b:35c3::/32 maxlen: 32
2a0b:35c4::/48 maxlen: 48
2a0b:35c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.mft
rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:5b:d5:97:1a:c7:fe:02:87:ca:97:6c:9e:52:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Validity
Not Before: Jan 1 02:30:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=494be3b3d095fe590af34d71573d2a24121c616b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:4d:9b:7a:0a:b1:5d:a3:a3:39:25:7a:37:00:
6b:2e:53:17:7d:c1:1b:e4:d4:84:f6:94:59:cd:ed:
16:dd:89:a8:53:fa:8b:1a:78:4c:ee:59:bc:1b:8e:
23:3d:e8:57:f0:83:64:c2:87:da:b7:70:58:df:4a:
8d:a6:6b:7b:a2:42:55:56:b4:08:c6:e4:d7:38:74:
39:bf:d6:93:46:84:9c:39:ab:6d:95:bd:85:84:47:
c8:57:1b:7d:10:0f:ba:d1:5b:0a:9b:49:67:91:76:
ba:98:a2:33:d8:e6:a2:25:8e:6c:bd:b0:7a:50:9f:
33:85:99:a1:03:52:cf:ab:ba:5a:20:33:af:04:20:
3e:ca:a3:b0:c8:98:0f:33:df:aa:da:17:37:35:0a:
3e:69:40:e7:6d:b9:88:43:d1:26:2e:45:f2:1a:fc:
ec:80:4c:a8:18:aa:0d:88:46:17:22:c1:1a:9f:92:
82:11:c8:fe:68:2e:f0:21:e9:c8:bb:f9:cf:e1:15:
8a:55:8e:4f:30:e6:99:21:8e:31:d9:e3:d1:82:dd:
64:6e:5e:0f:49:e5:c4:b8:2e:76:56:10:0a:3b:30:
3e:30:31:0e:74:a2:c5:1e:f7:e8:7f:c2:55:24:c9:
1b:50:e4:c2:df:df:69:93:15:6f:ec:3d:44:f5:98:
6e:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:4B:E3:B3:D0:95:FE:59:0A:F3:4D:71:57:3D:2A:24:12:1C:61:6B
X509v3 Authority Key Identifier:
keyid:6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/SUvjs9CV_lkK801xVz0qJBIcYWs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.123.168.0/22
194.35.36.0-194.35.38.255
IPv6:
2a0b:35c0::-2a0b:35c4:0:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
31:f5:b3:e0:93:ca:bc:18:9f:9d:eb:51:38:d5:66:7a:91:de:
13:1e:9c:ab:04:ba:e4:52:9d:33:cb:61:e1:29:83:2e:ff:bf:
e5:0a:5c:62:00:40:9a:ca:c9:88:e6:47:6e:19:d6:53:bb:16:
44:b6:85:5b:f0:2f:94:3c:3e:3b:0b:3e:a5:47:be:71:46:d5:
18:b6:38:29:1e:a0:b2:df:4d:ae:4e:cf:a1:53:b8:fd:f2:b9:
33:d0:a5:df:3a:73:0c:3e:72:5f:9f:c4:e5:c9:f0:72:2f:b1:
d5:e5:77:00:7f:4d:d4:55:ac:b8:a0:7f:8e:b1:86:9a:fc:ae:
49:59:80:68:74:03:98:0a:c7:3c:34:4a:bd:d1:31:92:33:0d:
ba:ea:aa:b1:5e:99:48:c5:50:d7:32:5e:a9:50:98:de:7e:63:
65:c7:c9:14:ad:f2:e3:68:02:a6:45:25:c7:a8:64:86:4f:7c:
58:67:93:82:c2:6e:0b:9b:c8:ab:93:96:16:ec:22:a6:55:c7:
77:86:8e:2f:94:2d:2e:12:dc:de:6e:a0:01:7f:3e:d6:09:26:
f1:ac:55:f1:73:64:a7:f3:37:10:60:07:db:59:93:89:9b:83:
56:0f:8f:88:c5:c1:ae:1b:bd:23:95:df:cd:f4:2b:92:8c:38:
27:4c:7f:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 15:06:14 2024 by rpki-client on console-ams.rpki-client.org