Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/0ba7e2-63a2-4c41-86b5-a370f4ba2d2b/1/1ffGi8YZYZjM0LTAmQ0mF7JOG80.roa
File: 1ffGi8YZYZjM0LTAmQ0mF7JOG80.roa (raw, json)
Hash identifier: Gj9aNpA2NGkLcQmQXjf4RVLt8+Z2sZgCcTlVw3h89uA=
Subject key identifier: D5:F7:C6:8B:C6:19:61:98:CC:D0:B4:C0:99:0D:26:17:B2:4E:1B:CD
Certificate issuer: /CN=6ecb3fb3bea8cc8e36e3da7d9c47049bfc6ffb14
Certificate serial: 018CC2DAD409D8051ED74A085ACA8D711176
Authority key identifier: 6E:CB:3F:B3:BE:A8:CC:8E:36:E3:DA:7D:9C:47:04:9B:FC:6F:FB:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bss_s76ozI4249p9nEcEm_xv-xQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/0ba7e2-63a2-4c41-86b5-a370f4ba2d2b/1/1ffGi8YZYZjM0LTAmQ0mF7JOG80.roa
Signing time: Mon 01 Jan 2024 02:29:30 +0000
ROA not before: Mon 01 Jan 2024 02:29:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201625
IP address blocks: 185.68.164.0/22 maxlen: 32
2a05:1220::/29 maxlen: 48
2a05:1220::/30 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/0ba7e2-63a2-4c41-86b5-a370f4ba2d2b/1/bss_s76ozI4249p9nEcEm_xv-xQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/0ba7e2-63a2-4c41-86b5-a370f4ba2d2b/1/bss_s76ozI4249p9nEcEm_xv-xQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/bss_s76ozI4249p9nEcEm_xv-xQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:d4:09:d8:05:1e:d7:4a:08:5a:ca:8d:71:11:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ecb3fb3bea8cc8e36e3da7d9c47049bfc6ffb14
Validity
Not Before: Jan 1 02:29:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d5f7c68bc6196198ccd0b4c0990d2617b24e1bcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:92:c7:bb:2b:94:99:40:d7:15:11:53:28:a2:
66:38:27:1a:49:80:12:17:c7:49:93:4c:38:9b:33:
7e:56:7c:79:c5:4f:84:38:6c:23:bf:16:25:2b:9b:
08:b8:db:88:44:c9:55:21:ab:20:79:97:29:8a:a9:
1f:76:31:52:a5:94:9c:c1:65:b1:ca:97:7e:84:7d:
60:d1:7f:0e:2b:03:83:b1:ef:45:34:c1:74:b8:9c:
ea:ac:85:89:94:58:0e:3d:0e:5b:8d:7d:e2:dd:8d:
06:ba:ee:5e:8b:24:82:76:ce:9d:08:69:6c:0d:3b:
2e:b2:8c:e1:df:91:6f:db:ab:0d:92:6e:2d:2a:fc:
c9:13:8f:f9:b3:ba:c0:2e:e1:46:dd:3b:89:59:51:
bb:60:7b:9c:34:09:99:cf:fe:0c:5b:0d:39:29:bf:
95:47:fe:99:41:17:89:5c:59:a2:e7:0d:d7:62:f2:
f5:40:6b:12:46:09:de:a8:55:95:c7:5f:b7:37:37:
3d:92:b4:65:e6:f2:98:77:ae:af:f0:52:a1:f3:22:
11:c5:57:8d:4b:9a:a5:c5:e0:7b:f6:05:6e:86:26:
35:17:dc:ef:93:28:5d:4b:e2:85:be:db:c6:72:ee:
41:d4:62:b1:57:41:5d:44:08:42:e6:5e:fe:97:fc:
1d:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:F7:C6:8B:C6:19:61:98:CC:D0:B4:C0:99:0D:26:17:B2:4E:1B:CD
X509v3 Authority Key Identifier:
keyid:6E:CB:3F:B3:BE:A8:CC:8E:36:E3:DA:7D:9C:47:04:9B:FC:6F:FB:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bss_s76ozI4249p9nEcEm_xv-xQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/0ba7e2-63a2-4c41-86b5-a370f4ba2d2b/1/1ffGi8YZYZjM0LTAmQ0mF7JOG80.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/0ba7e2-63a2-4c41-86b5-a370f4ba2d2b/1/bss_s76ozI4249p9nEcEm_xv-xQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.68.164.0/22
IPv6:
2a05:1220::/29
Signature Algorithm: sha256WithRSAEncryption
7d:9f:16:1c:a5:d3:d6:f3:a8:44:e2:22:8b:c2:e0:e0:e3:97:
9f:8d:11:05:21:13:cf:0b:c9:0b:6a:5a:92:4f:c1:9d:a1:89:
02:cb:3d:49:65:35:30:a6:82:86:4d:c8:c5:ae:7e:02:1c:bd:
65:63:5c:e0:24:73:e2:30:b4:05:1f:c2:5c:23:d0:c7:21:89:
3f:2a:57:c1:b1:f7:c0:d8:ac:9a:bd:2f:46:2c:4f:e0:92:13:
1a:d0:dd:4a:45:1f:52:a4:43:00:bb:15:d3:29:34:90:0d:a3:
5c:00:4a:1a:72:e4:bf:9e:bd:d1:67:95:91:d0:f3:a1:87:6a:
0f:6f:fe:7b:98:62:41:bf:c7:26:20:e6:de:c1:b5:4e:50:9e:
7e:1d:36:8a:44:dd:5a:f8:02:9a:07:9f:32:71:3c:b4:de:e9:
cc:fc:2d:68:04:66:8f:1f:4b:8c:04:0a:3a:db:74:f4:7f:40:
12:8b:75:f7:be:87:6d:00:ab:91:fa:23:d0:0c:e1:2e:9b:3b:
c1:24:5e:93:e1:1b:be:9e:ba:69:19:77:ac:e5:ce:52:d9:ff:
93:47:1d:ae:94:b7:d8:e4:ff:68:ad:43:38:67:de:67:de:25:
ef:e3:85:75:d4:07:0e:c1:12:77:ed:a8:1d:53:68:af:91:74:
b0:21:f7:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:46:29 2024 by rpki-client on console-fra.rpki-client.org