Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/4043b0-a30a-4147-8ef1-482548f52da6/1/6Uasqdjz4u0EQOPHAa-vY6UgkMw.roa
File: 6Uasqdjz4u0EQOPHAa-vY6UgkMw.roa (raw, json)
Hash identifier: EQpWbM+uvwzTgDXslIGQiJkvuA38Mcj2NnliA16QYBQ=
Subject key identifier: E9:46:AC:A9:D8:F3:E2:ED:04:40:E3:C7:01:AF:AF:63:A5:20:90:CC
Certificate issuer: /CN=ac8bfa86618abd7fab5953f7b565fcb6e4b46851
Certificate serial: 018CC86F6AF9619A79B9489BFA0D3E618283
Authority key identifier: AC:8B:FA:86:61:8A:BD:7F:AB:59:53:F7:B5:65:FC:B6:E4:B4:68:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rIv6hmGKvX-rWVP3tWX8tuS0aFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/4043b0-a30a-4147-8ef1-482548f52da6/1/6Uasqdjz4u0EQOPHAa-vY6UgkMw.roa
Signing time: Tue 02 Jan 2024 04:29:54 +0000
ROA not before: Tue 02 Jan 2024 04:29:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202105
IP address blocks: 185.206.31.0/24 maxlen: 24
185.206.28.0/24 maxlen: 24
185.206.29.0/24 maxlen: 24
185.206.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/4043b0-a30a-4147-8ef1-482548f52da6/1/rIv6hmGKvX-rWVP3tWX8tuS0aFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/4043b0-a30a-4147-8ef1-482548f52da6/1/rIv6hmGKvX-rWVP3tWX8tuS0aFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/rIv6hmGKvX-rWVP3tWX8tuS0aFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:6a:f9:61:9a:79:b9:48:9b:fa:0d:3e:61:82:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac8bfa86618abd7fab5953f7b565fcb6e4b46851
Validity
Not Before: Jan 2 04:29:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e946aca9d8f3e2ed0440e3c701afaf63a52090cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:78:ec:3d:cc:5a:fe:10:75:b9:44:05:2d:1f:
63:7a:57:9f:91:fe:39:86:40:9e:5e:ad:ba:24:d6:
e0:a0:d0:72:2e:aa:e8:d7:68:68:94:20:6a:8b:0f:
dd:9f:c9:cf:59:8d:e8:11:20:62:3e:96:8c:4d:2f:
7b:64:50:a8:51:09:dc:e2:db:9d:6a:59:01:06:8f:
e9:e6:9f:13:37:9f:38:bd:b6:1d:1d:6c:48:70:fa:
bc:d1:bc:a0:cf:60:b6:5f:fe:52:53:e4:b9:e0:8c:
9c:19:de:e3:a7:44:7d:17:45:10:66:3b:bf:52:4e:
15:1f:b0:01:09:ab:27:3b:12:ca:e0:2c:25:1d:3f:
4e:f5:3d:83:9c:a0:dd:3d:64:4c:dd:9b:47:fc:f8:
35:42:fb:a3:5c:8a:38:83:97:0a:b0:b6:97:d5:66:
95:5a:8f:49:5a:85:b4:27:84:23:f2:35:f8:0b:3d:
2c:d7:9b:2c:be:28:37:a8:6b:b8:b8:33:5a:19:b5:
28:cd:e1:fc:d3:67:26:f3:cd:39:2b:d2:54:f5:6a:
28:c1:76:3f:64:67:bc:81:7e:3f:97:6c:9e:97:f0:
ac:d4:1a:82:e2:be:75:57:88:dd:a2:ab:73:b2:54:
7d:a3:90:2d:f6:24:fa:71:d2:7b:d9:e9:46:5e:44:
fc:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:46:AC:A9:D8:F3:E2:ED:04:40:E3:C7:01:AF:AF:63:A5:20:90:CC
X509v3 Authority Key Identifier:
keyid:AC:8B:FA:86:61:8A:BD:7F:AB:59:53:F7:B5:65:FC:B6:E4:B4:68:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rIv6hmGKvX-rWVP3tWX8tuS0aFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/4043b0-a30a-4147-8ef1-482548f52da6/1/6Uasqdjz4u0EQOPHAa-vY6UgkMw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/4043b0-a30a-4147-8ef1-482548f52da6/1/rIv6hmGKvX-rWVP3tWX8tuS0aFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.206.28.0/22
Signature Algorithm: sha256WithRSAEncryption
20:39:59:30:0e:a3:8f:c2:8b:72:23:c8:85:7e:1d:49:80:71:
ad:2f:0f:33:59:2f:56:92:41:11:65:18:42:0e:4d:80:47:12:
63:be:2f:f8:75:f3:42:cd:6f:7a:a4:e1:29:46:bb:9a:d1:02:
c4:9b:c9:fc:d1:6a:1c:48:8a:cb:f4:f3:b3:ea:a7:59:68:ae:
f7:0b:08:09:80:96:4e:21:91:ec:fe:c6:b7:37:64:4e:b9:2a:
01:7e:29:38:56:27:cc:11:f3:f1:cb:7a:02:bf:92:9e:fb:7e:
e9:29:eb:8e:47:f0:0c:27:17:43:59:bd:73:d2:c2:3b:4d:4b:
10:56:ae:9b:95:a1:39:ee:1b:e6:26:1d:38:cf:7a:70:04:a6:
04:14:1b:dc:af:c4:a2:6a:7b:9c:83:98:34:ed:41:04:94:6a:
b4:e1:56:54:2d:8b:8f:53:c9:3b:6d:b1:e8:56:66:cb:a0:c1:
33:ab:9b:e2:ee:c6:31:66:90:8c:9f:f4:d4:60:54:59:d7:3c:
96:03:05:a1:d0:18:fb:ca:9e:78:1b:80:75:19:e0:66:31:80:
39:68:d4:28:54:a7:87:27:b8:ab:37:b4:9f:49:f5:c4:d5:69:
80:11:56:33:5f:5f:ca:80:c4:04:3e:05:cd:47:ef:51:05:96:
7d:9e:1b:aa
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzIb2r5YZp5uUib+g0+YYKDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjOGJmYTg2NjE4YWJkN2ZhYjU5NTNmN2I1NjVmY2I2ZTRi
NDY4NTEwHhcNMjQwMTAyMDQyOTU0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlOTQ2YWNhOWQ4ZjNlMmVkMDQ0MGUzYzcwMWFmYWY2M2E1MjA5MGNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiHjsPcxa/hB1uUQFLR9jelefkf45
hkCeXq26JNbgoNByLqro12holCBqiw/dn8nPWY3oESBiPpaMTS97ZFCoUQnc4tud
alkBBo/p5p8TN584vbYdHWxIcPq80bygz2C2X/5SU+S54IycGd7jp0R9F0UQZju/
Uk4VH7ABCasnOxLK4CwlHT9O9T2DnKDdPWRM3ZtH/Pg1QvujXIo4g5cKsLaX1WaV
Wo9JWoW0J4Qj8jX4Cz0s15ssvig3qGu4uDNaGbUozeH802cm8805K9JU9WoowXY/
ZGe8gX4/l2yel/Cs1BqC4r51V4jdoqtzslR9o5At9iT6cdJ72elGXkT8WQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOlGrKnY8+LtBEDjxwGvr2OlIJDMMB8GA1UdIwQY
MBaAFKyL+oZhir1/q1lT97Vl/LbktGhRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvckl2NmhtR0t2WC1yV1ZQM3RXWDh0dVMwYUZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy80MDQzYjAtYTMwYS00MTQ3LThlZjEt
NDgyNTQ4ZjUyZGE2LzEvNlVhc3Fkano0dTBFUU9QSEFhLXZZNlVna013LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy80MDQzYjAtYTMwYS00MTQ3LThlZjEtNDgyNTQ4ZjUyZGE2
LzEvckl2NmhtR0t2WC1yV1ZQM3RXWDh0dVMwYUZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuc4cMA0G
CSqGSIb3DQEBCwUAA4IBAQAgOVkwDqOPwotyI8iFfh1JgHGtLw8zWS9WkkERZRhC
Dk2ARxJjvi/4dfNCzW96pOEpRrua0QLEm8n80WocSIrL9POz6qdZaK73CwgJgJZO
IZHs/sa3N2ROuSoBfik4VifMEfPxy3oCv5Ke+37pKeuOR/AMJxdDWb1z0sI7TUsQ
Vq6blaE57hvmJh04z3pwBKYEFBvcr8Sianucg5g07UEElGq04VZULYuPU8k7bbHo
VmbLoMEzq5vi7sYxZpCMn/TUYFRZ1zyWAwWh0Bj7yp54G4B1GeBmMYA5aNQoVKeH
J7irN7SfSfXE1WmAEVYzX1/KgMQEPgXNR+9RBZZ9nhuq
-----END CERTIFICATE-----
Generated at Sat Jun 8 06:46:12 2024 by rpki-client on console-ams.rpki-client.org