Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/6a6535-6f42-4f2d-9eb9-7d4c8f37f5fd/1/u06c23WdJn_699KoYai9-fviE74.roa
File: u06c23WdJn_699KoYai9-fviE74.roa (raw, json)
Hash identifier: ybsudYMbFVGAbv6LtxFKvS+Sq2UZYNNHf0QFxXDx9dQ=
Subject key identifier: BB:4E:9C:DB:75:9D:26:7F:FA:F7:D2:A8:61:A8:BD:F9:FB:E2:13:BE
Certificate issuer: /CN=c1db67b85104e4db598fea15678699c92473bda0
Certificate serial: 018CC6B7E7447E2EA19B44626AFE74978319
Authority key identifier: C1:DB:67:B8:51:04:E4:DB:59:8F:EA:15:67:86:99:C9:24:73:BD:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wdtnuFEE5NtZj-oVZ4aZySRzvaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/6a6535-6f42-4f2d-9eb9-7d4c8f37f5fd/1/u06c23WdJn_699KoYai9-fviE74.roa
Signing time: Mon 01 Jan 2024 20:29:50 +0000
ROA not before: Mon 01 Jan 2024 20:29:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216475
IP address blocks: 185.170.10.0/24 maxlen: 24
2a0c:dd80:2000::/48 maxlen: 48
2a0c:dd80:3000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/6a6535-6f42-4f2d-9eb9-7d4c8f37f5fd/1/wdtnuFEE5NtZj-oVZ4aZySRzvaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/6a6535-6f42-4f2d-9eb9-7d4c8f37f5fd/1/wdtnuFEE5NtZj-oVZ4aZySRzvaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/wdtnuFEE5NtZj-oVZ4aZySRzvaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 05:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:e7:44:7e:2e:a1:9b:44:62:6a:fe:74:97:83:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1db67b85104e4db598fea15678699c92473bda0
Validity
Not Before: Jan 1 20:29:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bb4e9cdb759d267ffaf7d2a861a8bdf9fbe213be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:01:e2:92:73:81:e3:d2:c5:0e:c9:65:91:f9:
77:43:8c:da:34:7e:06:6e:da:9b:1c:59:af:9a:7c:
b0:81:1c:06:24:f8:e1:2f:37:f2:d3:52:8b:d5:62:
af:4f:51:97:5b:82:78:17:b1:e2:7e:ae:e1:18:63:
31:3a:fa:68:e3:ee:24:8e:2e:35:12:f7:4f:88:3e:
b1:80:ce:f4:a1:19:8b:63:60:69:73:45:bd:cb:0f:
f6:b1:76:64:52:77:5d:d4:7c:01:b2:70:5e:ad:cc:
6d:47:28:ef:15:ce:65:50:91:16:df:dd:50:3b:7b:
fd:3d:d5:b1:bd:47:8c:4c:19:44:11:03:13:70:b7:
82:f3:63:83:3b:31:4f:95:f0:bc:d4:08:49:b6:da:
72:29:c4:96:3d:4e:8c:12:03:9c:42:5e:cd:31:1a:
62:8d:bd:0d:24:9f:fb:73:41:a2:d4:11:ea:24:48:
c4:6b:e8:fd:49:38:7f:c7:f2:be:1f:b5:05:d5:0a:
03:a6:ff:76:fb:dc:ce:1d:af:c0:d6:0b:97:fd:35:
39:bc:b9:38:32:d9:19:98:bd:16:7b:9a:95:85:b3:
9b:d6:10:15:f8:87:39:01:55:9f:d9:8f:0c:c5:65:
b2:69:a4:da:7f:03:3f:1a:2b:86:99:e7:4c:63:c3:
35:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:4E:9C:DB:75:9D:26:7F:FA:F7:D2:A8:61:A8:BD:F9:FB:E2:13:BE
X509v3 Authority Key Identifier:
keyid:C1:DB:67:B8:51:04:E4:DB:59:8F:EA:15:67:86:99:C9:24:73:BD:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wdtnuFEE5NtZj-oVZ4aZySRzvaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6a6535-6f42-4f2d-9eb9-7d4c8f37f5fd/1/u06c23WdJn_699KoYai9-fviE74.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6a6535-6f42-4f2d-9eb9-7d4c8f37f5fd/1/wdtnuFEE5NtZj-oVZ4aZySRzvaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.170.10.0/24
IPv6:
2a0c:dd80:2000::/48
2a0c:dd80:3000::/48
Signature Algorithm: sha256WithRSAEncryption
49:3e:18:48:19:a6:8f:ed:ff:01:43:7e:76:92:5f:0c:4c:19:
1b:28:14:62:be:7d:5f:6a:71:09:f1:09:9b:6d:cf:de:f7:b2:
1f:0c:a8:86:47:4c:af:46:13:ed:57:02:ec:1e:da:8b:e0:15:
e8:7e:a7:1b:32:40:90:4b:b5:61:00:73:e9:76:ef:d3:bc:1c:
20:d1:dc:f0:df:fd:1b:4b:03:5d:6f:c9:de:aa:28:bb:25:88:
22:54:4f:90:d5:b6:c0:10:8c:6f:13:ac:32:ff:be:90:8f:10:
13:05:e1:c1:b2:3a:36:28:18:f2:19:0c:a2:0b:51:93:3e:1e:
5c:8f:45:3f:91:4c:fa:e7:0a:16:9f:ba:29:e9:f4:19:e3:5e:
ef:aa:45:bf:41:6f:aa:8a:a1:0f:9d:23:7e:89:f3:40:da:19:
b3:ee:b3:3e:b8:9f:ac:9d:e7:8a:bb:64:25:28:5e:23:26:e0:
f5:3d:a7:83:e1:cc:77:43:9a:bf:46:e3:43:75:b2:72:6e:b4:
5c:dd:1f:cf:87:93:03:78:4c:94:63:6d:05:4a:5d:bf:31:85:
9b:12:2c:4b:5f:38:3f:48:14:4b:d3:6f:31:de:72:ca:b1:c2:
4b:fa:49:30:84:ec:87:da:4c:bc:2c:a0:69:fd:75:a7:bd:69:
51:2f:cc:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 13:52:14 2024 by rpki-client on console-fra.rpki-client.org