Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/6e71lGuCAKz1oV7R2L2-26MBPbU.roa
File: 6e71lGuCAKz1oV7R2L2-26MBPbU.roa (raw, json)
Hash identifier: WxGVAQ0PPAI2KZQ92GQBPCGaQr/fFcYTCZTVODTO/2k=
Subject key identifier: E9:EE:F5:94:6B:82:00:AC:F5:A1:5E:D1:D8:BD:BE:DB:A3:01:3D:B5
Certificate issuer: /CN=55fad96dd05af8c2d26192c841131f2f97459fed
Certificate serial: 018CC42483DC436AE7D8E0D5AF28B5405FA6
Authority key identifier: 55:FA:D9:6D:D0:5A:F8:C2:D2:61:92:C8:41:13:1F:2F:97:45:9F:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VfrZbdBa-MLSYZLIQRMfL5dFn-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/6e71lGuCAKz1oV7R2L2-26MBPbU.roa
Signing time: Mon 01 Jan 2024 08:29:36 +0000
ROA not before: Mon 01 Jan 2024 08:29:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48557
IP address blocks: 185.138.230.0/23 maxlen: 23
185.138.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/VfrZbdBa-MLSYZLIQRMfL5dFn-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/VfrZbdBa-MLSYZLIQRMfL5dFn-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/VfrZbdBa-MLSYZLIQRMfL5dFn-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 02 Jul 2024 21:43:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:83:dc:43:6a:e7:d8:e0:d5:af:28:b5:40:5f:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55fad96dd05af8c2d26192c841131f2f97459fed
Validity
Not Before: Jan 1 08:29:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e9eef5946b8200acf5a15ed1d8bdbedba3013db5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:50:6d:dc:d3:69:79:49:63:c8:78:62:10:07:
b7:ad:c1:4b:7e:c1:3f:09:10:3e:3a:42:53:ef:4f:
7a:23:47:ec:57:c8:4f:28:0e:fd:d4:7b:a4:40:08:
48:24:f7:92:69:64:8e:ca:17:15:29:99:b6:17:3d:
d8:55:fb:dd:97:a6:98:0e:5b:64:64:df:b9:d1:ee:
f3:f5:2b:18:2f:34:24:fa:e7:45:51:b6:9f:35:3f:
d5:1c:4d:dc:bb:74:a3:67:9b:d4:0e:a9:6d:16:1a:
ae:2b:c4:68:10:75:64:f3:c3:70:e3:cb:90:e5:75:
28:89:b6:56:db:2b:3f:0d:4b:8d:1a:cc:1b:59:4c:
f0:9e:e6:af:93:d8:11:46:bd:90:46:f5:2a:b2:9d:
15:8a:c0:74:b5:cf:c0:bc:29:ed:1b:12:ed:db:a9:
d1:ef:7a:22:99:6e:ce:b3:64:95:54:26:c5:e7:ad:
5a:e5:f1:2f:1c:a2:40:62:32:5e:0b:36:d2:2f:7b:
7b:e2:58:92:17:28:d5:d0:c6:be:03:cf:28:06:84:
c2:2b:19:3b:cf:17:3d:d5:a2:95:d5:b1:34:34:1c:
3b:e7:49:16:a2:a0:90:a8:4f:b8:94:1b:44:a3:3a:
aa:80:1a:ba:fe:6c:e7:e4:e3:e2:25:74:7e:f1:3d:
9f:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:EE:F5:94:6B:82:00:AC:F5:A1:5E:D1:D8:BD:BE:DB:A3:01:3D:B5
X509v3 Authority Key Identifier:
keyid:55:FA:D9:6D:D0:5A:F8:C2:D2:61:92:C8:41:13:1F:2F:97:45:9F:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VfrZbdBa-MLSYZLIQRMfL5dFn-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/6e71lGuCAKz1oV7R2L2-26MBPbU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/VfrZbdBa-MLSYZLIQRMfL5dFn-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.138.230.0/23
Signature Algorithm: sha256WithRSAEncryption
4d:9a:24:b9:79:e5:3c:6c:34:a8:54:30:fe:a4:f8:af:bb:f2:
0a:d5:49:82:79:36:9a:ea:a9:76:7a:e5:6b:02:df:82:f3:2a:
6f:57:bf:22:8d:68:8d:4d:1d:20:ce:15:d2:31:34:89:d5:08:
41:e8:f0:b9:09:da:c9:4b:08:93:ce:9f:3c:bf:6b:72:63:2d:
42:fa:67:cf:40:3a:b2:90:34:39:6d:4a:a7:e0:b9:de:3b:48:
ac:43:ea:07:e4:76:73:dc:fe:ad:3c:8a:ae:db:29:69:33:f1:
7c:fe:0e:95:94:a9:92:1e:4e:de:50:83:16:a7:4b:82:5f:5f:
6b:3d:c6:a3:a5:7f:58:9f:aa:61:e1:06:71:70:8f:12:45:f1:
fd:2d:86:22:c6:16:02:1e:d6:cf:ae:9d:e6:96:83:a5:f3:bf:
17:81:0f:0f:1a:f8:76:de:63:bc:50:8d:c8:69:71:00:cf:6c:
27:d5:1e:4a:42:c1:91:1e:6d:ae:ed:8c:1c:2e:fd:85:01:48:
91:84:43:bb:79:d4:c7:1c:80:8b:1d:5c:98:d0:ad:fc:e4:33:
df:7d:d7:41:37:a0:74:4c:6e:56:5b:49:e7:89:31:0a:2a:02:
bd:4d:ab:6e:c8:f0:9e:6c:55:a1:a2:a5:da:6a:6c:13:3e:55:
c2:69:32:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 2 03:54:15 2024 by rpki-client on console-fra.rpki-client.org