Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/0a3827-b6c5-4c3a-96e6-e8db018b36dd/1/Ssh5hTJq7UJ5vaBldGVn2HVHkso.roa
File: Ssh5hTJq7UJ5vaBldGVn2HVHkso.roa (raw, json)
Hash identifier: AuapuIU1SSVBqrK+ZwsLrVrZvuQDmgPZrAzn7qS2x04=
Subject key identifier: 4A:C8:79:85:32:6A:ED:42:79:BD:A0:65:74:65:67:D8:75:47:92:CA
Certificate issuer: /CN=9b835e9b4d376ee6ab6cad275e243cf404c12af4
Certificate serial: 018CC8DF90D8622D6A6EBCFA3A1636E6EB79
Authority key identifier: 9B:83:5E:9B:4D:37:6E:E6:AB:6C:AD:27:5E:24:3C:F4:04:C1:2A:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m4Nem003buarbK0nXiQ89ATBKvQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/0a3827-b6c5-4c3a-96e6-e8db018b36dd/1/Ssh5hTJq7UJ5vaBldGVn2HVHkso.roa
Signing time: Tue 02 Jan 2024 06:32:23 +0000
ROA not before: Tue 02 Jan 2024 06:32:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200652
IP address blocks: 185.100.60.0/22 maxlen: 22
2a06:1740::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/0a3827-b6c5-4c3a-96e6-e8db018b36dd/1/m4Nem003buarbK0nXiQ89ATBKvQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/0a3827-b6c5-4c3a-96e6-e8db018b36dd/1/m4Nem003buarbK0nXiQ89ATBKvQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/m4Nem003buarbK0nXiQ89ATBKvQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 09:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:90:d8:62:2d:6a:6e:bc:fa:3a:16:36:e6:eb:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b835e9b4d376ee6ab6cad275e243cf404c12af4
Validity
Not Before: Jan 2 06:32:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4ac87985326aed4279bda065746567d8754792ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:07:78:c3:c5:94:52:f5:45:a3:af:6d:ac:eb:
f2:18:ae:9c:bc:b2:44:58:7b:d7:11:4b:94:76:3f:
17:04:1b:6f:37:e6:98:03:16:1b:97:bb:f6:6f:37:
23:ab:77:22:25:09:8e:be:a8:58:e9:b9:c9:20:35:
b0:5f:06:f3:28:ef:7a:fe:36:c2:c8:77:ba:5d:71:
20:68:91:4c:c6:d0:77:70:6d:6a:17:1d:9f:db:16:
9a:b9:a6:53:b3:14:6d:37:39:6c:25:8b:7b:13:8e:
11:26:d1:58:41:49:ff:63:8a:80:43:c4:c3:2e:3d:
d7:ac:83:32:3a:ea:e0:0c:b9:bd:5e:65:39:76:f1:
86:8e:63:95:5f:23:23:b0:5d:20:3b:7d:cb:11:f2:
58:c1:5a:a7:08:22:1b:96:65:ed:68:5e:92:be:db:
7d:8b:b1:ab:dd:34:17:23:ee:53:8b:e0:83:dc:61:
7e:df:98:ba:33:98:f9:31:8d:73:1d:9c:f1:50:ff:
6c:0b:5c:d5:37:af:2f:43:1f:09:ba:6f:ae:ba:4b:
23:0a:46:49:b4:49:55:de:7a:b2:3f:65:f3:6a:a3:
20:5b:2a:1e:ac:67:38:96:7f:76:98:e7:23:47:12:
3b:a3:02:fa:a1:d5:4e:45:28:ae:d8:c5:95:db:92:
9e:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:C8:79:85:32:6A:ED:42:79:BD:A0:65:74:65:67:D8:75:47:92:CA
X509v3 Authority Key Identifier:
keyid:9B:83:5E:9B:4D:37:6E:E6:AB:6C:AD:27:5E:24:3C:F4:04:C1:2A:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m4Nem003buarbK0nXiQ89ATBKvQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/0a3827-b6c5-4c3a-96e6-e8db018b36dd/1/Ssh5hTJq7UJ5vaBldGVn2HVHkso.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/0a3827-b6c5-4c3a-96e6-e8db018b36dd/1/m4Nem003buarbK0nXiQ89ATBKvQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.100.60.0/22
IPv6:
2a06:1740::/29
Signature Algorithm: sha256WithRSAEncryption
7d:4e:b9:f1:91:b4:81:5e:ec:8b:7a:ba:fe:d5:4b:4c:79:21:
f2:c1:fb:49:b0:46:b3:85:8f:bc:34:01:1b:b1:06:2d:92:46:
a0:f7:68:2b:2e:3b:8f:0f:67:12:70:9c:9a:23:53:35:2a:4f:
e9:29:59:71:32:a3:82:1b:56:83:a6:bd:69:38:a2:21:5c:da:
73:ef:7b:bf:7b:6b:de:4c:ad:34:94:52:3e:91:94:5a:23:0e:
e7:9c:1c:57:c4:af:40:fa:f6:a1:0a:d5:83:28:44:94:6f:05:
a9:68:2e:03:04:89:ef:fd:0f:fa:52:6e:eb:3c:c7:49:e9:1f:
12:11:33:72:7c:80:24:c8:53:0e:44:3c:a6:60:39:60:a8:9f:
62:5e:73:0f:26:08:1f:2d:89:f5:af:0a:db:df:27:3d:02:32:
0c:ca:9f:52:5f:42:e8:48:ac:6b:4a:1c:2b:c0:98:24:53:c8:
ba:7f:8f:ab:f2:e1:59:6f:8d:f1:1d:54:7e:96:8b:60:85:00:
5d:52:16:f9:36:d4:34:9c:27:7c:e5:36:d2:07:1d:5c:68:93:
60:97:22:6b:b3:02:75:a7:ab:93:c9:48:d3:7a:b8:10:30:2a:
93:ae:a0:79:a9:ac:ea:b7:0b:e9:4d:e9:b4:33:dd:fc:c6:d8:
c2:f7:f4:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 12:06:48 2024 by rpki-client on console-fra.rpki-client.org