Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/27b39b-0449-4c64-ba79-a2aa6540f875/1/6Wihf9vFW4LnNirisHS5t4ZEb00.roa
File: 6Wihf9vFW4LnNirisHS5t4ZEb00.roa (raw, json)
Hash identifier: U9Y2sCzE9v4D3TSwY0GE1IoU3EiawNNr23AvDr3BiXo=
Subject key identifier: E9:68:A1:7F:DB:C5:5B:82:E7:36:2A:E2:B0:74:B9:B7:86:44:6F:4D
Certificate issuer: /CN=bfc470e9b58e557ea8c1dbedaeb9c6a5fc455125
Certificate serial: 018CC6B79BDC43BE1379ED674263AFB0A616
Authority key identifier: BF:C4:70:E9:B5:8E:55:7E:A8:C1:DB:ED:AE:B9:C6:A5:FC:45:51:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v8Rw6bWOVX6owdvtrrnGpfxFUSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/27b39b-0449-4c64-ba79-a2aa6540f875/1/6Wihf9vFW4LnNirisHS5t4ZEb00.roa
Signing time: Mon 01 Jan 2024 20:29:30 +0000
ROA not before: Mon 01 Jan 2024 20:29:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208864
IP address blocks: 185.192.145.0/24 maxlen: 24
185.192.144.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/27b39b-0449-4c64-ba79-a2aa6540f875/1/v8Rw6bWOVX6owdvtrrnGpfxFUSU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/27b39b-0449-4c64-ba79-a2aa6540f875/1/v8Rw6bWOVX6owdvtrrnGpfxFUSU.mft
rsync://rpki.ripe.net/repository/DEFAULT/v8Rw6bWOVX6owdvtrrnGpfxFUSU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 16:03:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:9b:dc:43:be:13:79:ed:67:42:63:af:b0:a6:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfc470e9b58e557ea8c1dbedaeb9c6a5fc455125
Validity
Not Before: Jan 1 20:29:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e968a17fdbc55b82e7362ae2b074b9b786446f4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:cd:4e:5c:db:d5:e7:9e:f4:46:f9:2f:23:a3:
5f:ef:f4:a3:f1:4b:c6:d9:2d:b4:3b:3a:ef:ef:4c:
39:d7:d8:e5:cc:ca:9b:bc:11:ad:b7:af:50:ea:7c:
a1:f2:01:97:fc:03:27:87:2f:b0:1f:01:ce:0a:6a:
a2:65:a7:66:a2:5d:2f:0a:cd:be:59:cd:22:3e:41:
c8:d8:78:da:2e:bd:e1:a4:08:d5:e7:7d:7d:ef:a4:
26:8d:53:0f:f8:e8:10:6d:4e:d1:fc:81:c5:4a:23:
21:a6:f6:39:03:ad:09:64:1c:9a:4f:0d:af:61:5c:
65:4b:8e:d1:ea:13:a4:35:d3:a5:23:de:2a:ce:7c:
3c:1e:9f:a9:1b:09:c6:24:a0:3a:d4:13:ad:8b:8b:
2c:51:a0:d0:72:8c:24:45:1c:a2:83:b7:62:79:8d:
54:c8:7d:a2:bc:42:af:a6:21:8d:c6:65:18:5c:3b:
f1:75:bc:79:e1:88:16:e0:cb:a3:91:24:08:0e:d3:
c7:b1:2e:a8:5d:ee:89:0f:b7:7a:f3:0f:e6:52:2d:
1e:86:53:41:44:6c:12:f0:04:d9:99:97:c0:d6:74:
a6:16:2c:58:e1:58:81:51:e3:5f:bb:8d:ba:11:60:
07:53:07:43:db:33:15:2f:28:f4:65:c8:84:43:68:
f5:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:68:A1:7F:DB:C5:5B:82:E7:36:2A:E2:B0:74:B9:B7:86:44:6F:4D
X509v3 Authority Key Identifier:
keyid:BF:C4:70:E9:B5:8E:55:7E:A8:C1:DB:ED:AE:B9:C6:A5:FC:45:51:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v8Rw6bWOVX6owdvtrrnGpfxFUSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/27b39b-0449-4c64-ba79-a2aa6540f875/1/6Wihf9vFW4LnNirisHS5t4ZEb00.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/27b39b-0449-4c64-ba79-a2aa6540f875/1/v8Rw6bWOVX6owdvtrrnGpfxFUSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.192.144.0/23
Signature Algorithm: sha256WithRSAEncryption
a0:a2:fc:30:2f:43:1a:e7:d9:7a:3e:89:c6:60:50:37:34:f5:
33:0b:f9:75:02:9a:1e:db:42:37:38:5b:f4:86:5d:b2:b5:31:
bc:5b:60:be:48:b0:4e:3a:01:4f:cc:c7:45:88:64:46:10:76:
6d:70:02:01:8f:c0:6a:1f:da:21:bf:c7:39:b0:f8:1b:97:d7:
f7:6d:f9:20:c9:9e:8f:14:b0:06:c2:ab:04:f2:21:ae:90:a6:
f6:60:c2:9a:d6:2f:5a:6c:c6:c7:50:50:10:66:43:4d:d1:07:
c7:51:b3:35:85:47:06:d7:28:8b:d0:fd:c2:4d:77:cf:ae:a4:
8e:d9:0a:b3:65:fe:08:2a:a7:11:d2:29:6d:e4:77:03:66:ee:
23:fa:90:ce:19:b3:38:70:02:c1:94:10:32:51:b5:1c:78:40:
64:80:a4:b8:b9:02:25:c2:64:e0:c1:ba:d6:87:89:fb:7d:ed:
65:4a:a4:c7:7e:15:06:f4:17:37:3c:02:32:78:45:06:e1:08:
9f:4d:4d:7f:8b:6f:f0:42:19:58:46:d2:0a:27:4b:92:31:59:
22:72:55:7f:37:88:e2:ab:47:51:c8:02:ff:9e:d2:1f:f9:d4:
d4:c5:98:5b:e3:a2:1e:33:09:10:bb:c9:cd:7b:94:a6:74:de:
f6:4a:7d:13
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzGt5vcQ74Tee1nQmOvsKYWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmYzQ3MGU5YjU4ZTU1N2VhOGMxZGJlZGFlYjljNmE1ZmM0
NTUxMjUwHhcNMjQwMTAxMjAyOTMwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlOTY4YTE3ZmRiYzU1YjgyZTczNjJhZTJiMDc0YjliNzg2NDQ2ZjRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA681OXNvV5570RvkvI6Nf7/Sj8UvG
2S20Ozrv70w519jlzMqbvBGtt69Q6nyh8gGX/AMnhy+wHwHOCmqiZadmol0vCs2+
Wc0iPkHI2HjaLr3hpAjV531976QmjVMP+OgQbU7R/IHFSiMhpvY5A60JZByaTw2v
YVxlS47R6hOkNdOlI94qznw8Hp+pGwnGJKA61BOti4ssUaDQcowkRRyig7dieY1U
yH2ivEKvpiGNxmUYXDvxdbx54YgW4MujkSQIDtPHsS6oXe6JD7d68w/mUi0ehlNB
RGwS8ATZmZfA1nSmFixY4ViBUeNfu426EWAHUwdD2zMVLyj0ZciEQ2j1dwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOlooX/bxVuC5zYq4rB0ubeGRG9NMB8GA1UdIwQY
MBaAFL/EcOm1jlV+qMHb7a65xqX8RVElMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjhSdzZiV09WWDZvd2R2dHJybkdwZnhGVVNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi8yN2IzOWItMDQ0OS00YzY0LWJhNzkt
YTJhYTY1NDBmODc1LzEvNldpaGY5dkZXNExuTmlyaXNIUzV0NFpFYjAwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi8yN2IzOWItMDQ0OS00YzY0LWJhNzktYTJhYTY1NDBmODc1
LzEvdjhSdzZiV09WWDZvd2R2dHJybkdwZnhGVVNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBucCQMA0G
CSqGSIb3DQEBCwUAA4IBAQCgovwwL0Ma59l6PonGYFA3NPUzC/l1Apoe20I3OFv0
hl2ytTG8W2C+SLBOOgFPzMdFiGRGEHZtcAIBj8BqH9ohv8c5sPgbl9f3bfkgyZ6P
FLAGwqsE8iGukKb2YMKa1i9abMbHUFAQZkNN0QfHUbM1hUcG1yiL0P3CTXfPrqSO
2QqzZf4IKqcR0ilt5HcDZu4j+pDOGbM4cALBlBAyUbUceEBkgKS4uQIlwmTgwbrW
h4n7fe1lSqTHfhUG9Bc3PAIyeEUG4QifTU1/i2/wQhlYRtIKJ0uSMVkiclV/N4ji
q0dRyAL/ntIf+dTUxZhb46IeMwkQu8nNe5SmdN72Sn0T
-----END CERTIFICATE-----
Generated at Sat Jun 1 20:44:45 2024 by rpki-client on console-ams.rpki-client.org