Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/01504c-c1c6-4564-a402-4e67be4e432e/1/XYu_z_qukpmnod1H1z1_yW78edk.roa
File: XYu_z_qukpmnod1H1z1_yW78edk.roa (raw, json)
Hash identifier: a79ZMT81u1uYOXefpJs0IpEOSnkM4IeyBaYnD5lW1DU=
Subject key identifier: 5D:8B:BF:CF:FA:AE:92:99:A7:A1:DD:47:D7:3D:7F:C9:6E:FC:79:D9
Certificate issuer: /CN=6cdec7b2e9f866eac36bc31ca4c4ff62d53dd166
Certificate serial: 018CC9BCECA5C86E154824FBB2D427FEBDE4
Authority key identifier: 6C:DE:C7:B2:E9:F8:66:EA:C3:6B:C3:1C:A4:C4:FF:62:D5:3D:D1:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bN7Hsun4ZurDa8McpMT_YtU90WY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/01504c-c1c6-4564-a402-4e67be4e432e/1/XYu_z_qukpmnod1H1z1_yW78edk.roa
Signing time: Tue 02 Jan 2024 10:34:10 +0000
ROA not before: Tue 02 Jan 2024 10:34:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205813
IP address blocks: 185.204.192.0/22 maxlen: 22
185.204.192.0/24 maxlen: 24
185.204.193.0/24 maxlen: 24
185.204.195.0/24 maxlen: 24
185.204.194.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/01504c-c1c6-4564-a402-4e67be4e432e/1/bN7Hsun4ZurDa8McpMT_YtU90WY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/01504c-c1c6-4564-a402-4e67be4e432e/1/bN7Hsun4ZurDa8McpMT_YtU90WY.mft
rsync://rpki.ripe.net/repository/DEFAULT/bN7Hsun4ZurDa8McpMT_YtU90WY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 13:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:ec:a5:c8:6e:15:48:24:fb:b2:d4:27:fe:bd:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cdec7b2e9f866eac36bc31ca4c4ff62d53dd166
Validity
Not Before: Jan 2 10:34:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5d8bbfcffaae9299a7a1dd47d73d7fc96efc79d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:25:ac:5d:05:f8:2b:0c:f0:0b:02:54:ef:7a:
a4:6a:1b:e0:78:54:15:63:68:7d:71:1c:11:fd:12:
bf:63:9f:50:6f:0b:6a:0e:d8:1e:e5:e5:5f:bf:c7:
c2:dc:53:ed:58:ae:bb:0e:18:23:54:7c:6d:2a:2d:
36:50:27:f7:bf:2c:d7:4a:7f:25:04:be:41:6d:14:
58:c7:7e:3c:14:4a:49:3f:59:30:6e:56:5d:bf:11:
89:8a:d2:66:c9:db:5b:52:7e:9a:df:3d:43:01:47:
04:ca:8a:07:68:8f:6c:31:c4:96:0f:fc:9e:ea:d4:
64:98:a8:3d:bc:d7:95:a4:b8:e9:ff:dc:8d:37:2f:
ea:95:4f:11:57:6b:a0:f1:90:68:b3:13:7b:6a:65:
bd:5c:05:b1:93:c0:49:72:6f:20:e4:f1:41:93:a5:
b5:51:c3:38:06:b7:b1:71:3b:e3:f8:8c:dc:1e:16:
df:23:12:4e:26:e0:b1:7e:89:2d:e4:1a:83:73:3a:
7d:38:0a:95:7e:91:55:3a:98:ca:0d:cc:9d:05:c5:
63:76:a8:82:14:0b:a8:95:2a:82:3f:55:a7:53:4d:
83:42:6f:4a:0e:7c:bc:09:e3:22:f3:1a:be:2b:77:
58:79:15:2c:b9:e0:5e:e5:cf:ef:aa:d8:bc:4d:cb:
4c:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:8B:BF:CF:FA:AE:92:99:A7:A1:DD:47:D7:3D:7F:C9:6E:FC:79:D9
X509v3 Authority Key Identifier:
keyid:6C:DE:C7:B2:E9:F8:66:EA:C3:6B:C3:1C:A4:C4:FF:62:D5:3D:D1:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bN7Hsun4ZurDa8McpMT_YtU90WY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/01504c-c1c6-4564-a402-4e67be4e432e/1/XYu_z_qukpmnod1H1z1_yW78edk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/01504c-c1c6-4564-a402-4e67be4e432e/1/bN7Hsun4ZurDa8McpMT_YtU90WY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.204.192.0/22
Signature Algorithm: sha256WithRSAEncryption
a6:9d:d7:b8:14:51:d7:d8:d3:a4:53:91:ce:54:a2:65:97:dd:
7a:23:eb:6e:f0:5b:75:28:e7:0e:91:bd:91:ec:a6:d7:43:b8:
a4:f2:02:14:fe:2e:bf:99:52:7b:d8:13:9c:a8:fd:86:ba:6a:
37:a0:8e:37:ff:c4:62:70:2e:77:a9:69:c0:92:c5:92:8f:27:
d9:6c:80:4c:2e:59:aa:52:72:5a:31:31:4a:f1:08:ed:41:66:
3d:19:0d:2c:57:90:84:4c:5a:06:49:52:c3:0f:ac:8f:cb:c8:
96:ed:3d:d0:c7:f3:b1:de:27:1b:07:0c:cc:e9:f9:c5:9b:e9:
d7:f4:b0:4b:d8:6a:fa:8f:0b:76:8f:46:3f:32:4c:4d:41:87:
95:84:66:aa:a6:63:63:b8:54:a0:b9:4e:59:06:c1:b6:16:aa:
2a:b7:b5:12:2c:af:ec:06:04:36:c0:29:14:2f:bb:fd:82:57:
20:a9:bd:77:ef:02:b5:e6:a0:7a:30:1c:2f:25:5e:9b:da:5c:
8a:82:f4:be:2d:bd:08:68:cf:3b:9b:9a:aa:19:43:37:71:ec:
29:d9:58:90:08:ec:2f:7f:b0:27:3c:57:a1:76:ce:f3:af:e5:
ad:51:f1:58:84:b6:bf:3f:67:ec:6a:9d:0a:78:c6:f6:0d:64:
c4:ab:f7:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 20:35:49 2024 by rpki-client on console-fra.rpki-client.org