Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/b10e06-257c-4995-879d-6d07d7f1a701/1/6ah00mgMiSCMFO19lGbJR6Cec6Y.roa
File: 6ah00mgMiSCMFO19lGbJR6Cec6Y.roa (raw, json)
Hash identifier: VYcunjnbmT/5ppJ2W01fhSDLaxnRMs+MX1lVNHcJW2g=
Subject key identifier: E9:A8:74:D2:68:0C:89:20:8C:14:ED:7D:94:66:C9:47:A0:9E:73:A6
Certificate issuer: /CN=c17cc37f1ed81ac37b20faf0f42c41ab808f13c1
Certificate serial: 018CC94CB7E433DCAD682C6C26B33F793736
Authority key identifier: C1:7C:C3:7F:1E:D8:1A:C3:7B:20:FA:F0:F4:2C:41:AB:80:8F:13:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wXzDfx7YGsN7IPrw9CxBq4CPE8E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/b10e06-257c-4995-879d-6d07d7f1a701/1/6ah00mgMiSCMFO19lGbJR6Cec6Y.roa
Signing time: Tue 02 Jan 2024 08:31:37 +0000
ROA not before: Tue 02 Jan 2024 08:31:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199643
IP address blocks: 185.7.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/b10e06-257c-4995-879d-6d07d7f1a701/1/wXzDfx7YGsN7IPrw9CxBq4CPE8E.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/b10e06-257c-4995-879d-6d07d7f1a701/1/wXzDfx7YGsN7IPrw9CxBq4CPE8E.mft
rsync://rpki.ripe.net/repository/DEFAULT/wXzDfx7YGsN7IPrw9CxBq4CPE8E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 20:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4c:b7:e4:33:dc:ad:68:2c:6c:26:b3:3f:79:37:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c17cc37f1ed81ac37b20faf0f42c41ab808f13c1
Validity
Not Before: Jan 2 08:31:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e9a874d2680c89208c14ed7d9466c947a09e73a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:5b:4a:75:ba:2b:75:8e:e2:ec:86:47:66:4a:
e8:00:16:af:5d:11:45:bc:09:14:70:73:5a:62:c3:
e9:60:55:88:47:e8:2a:0a:e6:da:9e:e6:3a:fd:4d:
a1:38:a7:ef:2f:33:ec:5e:1b:fe:8b:72:d3:72:14:
e0:dc:86:f5:64:92:d4:b9:dc:d5:2f:8d:fb:47:b3:
e5:bd:36:89:21:7b:af:48:11:92:66:2c:ac:8f:43:
41:38:eb:95:a4:b3:e0:e5:35:79:bf:c7:d7:fb:11:
e7:e2:a3:bc:2a:5a:58:08:35:aa:8a:1b:96:fb:87:
7c:3c:6a:f4:47:86:9f:62:bd:97:11:d5:e5:a1:db:
63:6d:75:58:eb:04:d4:a2:92:35:8d:36:85:a7:03:
fc:d7:53:78:7c:fa:57:cf:06:2b:f3:a5:b2:95:18:
95:ff:e4:7e:c2:00:2f:71:e9:1c:a1:41:b9:43:df:
5d:ca:80:3c:f5:e2:98:0a:4e:e5:ba:4a:6a:0e:a8:
72:e8:32:cf:91:ec:60:6f:7a:5d:3f:37:40:6e:68:
27:92:11:cb:2c:ad:8f:97:fb:6d:28:b7:de:c0:eb:
28:b7:57:7b:a8:29:28:fb:2e:c7:a6:65:9a:bc:24:
da:50:56:ca:16:42:6a:4f:be:a1:d3:68:f3:44:f7:
88:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:A8:74:D2:68:0C:89:20:8C:14:ED:7D:94:66:C9:47:A0:9E:73:A6
X509v3 Authority Key Identifier:
keyid:C1:7C:C3:7F:1E:D8:1A:C3:7B:20:FA:F0:F4:2C:41:AB:80:8F:13:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wXzDfx7YGsN7IPrw9CxBq4CPE8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b10e06-257c-4995-879d-6d07d7f1a701/1/6ah00mgMiSCMFO19lGbJR6Cec6Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b10e06-257c-4995-879d-6d07d7f1a701/1/wXzDfx7YGsN7IPrw9CxBq4CPE8E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.7.128.0/24
Signature Algorithm: sha256WithRSAEncryption
21:70:eb:26:2b:c8:88:3f:73:39:b8:bb:94:d6:ab:76:9e:0d:
8d:c6:1d:19:9a:17:7e:43:61:1b:8e:ff:44:a1:69:53:bb:13:
36:76:88:2c:84:a7:32:a5:6e:7e:48:23:ec:64:5d:92:81:13:
12:12:2b:b0:45:62:c5:9d:84:67:9d:44:84:45:f8:0b:8e:06:
88:07:80:d5:2c:ef:1a:b7:e3:56:50:c9:bc:60:64:87:27:6f:
d4:24:cb:39:7e:8d:2c:37:98:ff:32:9f:d1:0e:cf:7b:5d:15:
a9:60:f8:12:e1:c3:fa:45:fc:79:7f:69:de:4d:3f:11:10:ab:
d4:66:68:ca:da:4e:f7:e3:f3:17:83:26:27:e0:7e:f7:e1:5f:
72:9f:8b:39:8f:e7:b6:49:5f:d6:07:22:9c:fc:c0:60:32:71:
8a:88:08:67:06:a9:5b:bf:43:f7:02:e3:67:5d:3e:b9:6a:fe:
b8:e2:0e:b3:7d:6b:cb:32:ec:6b:4b:6b:98:ff:18:e6:25:ff:
79:70:38:a9:dd:82:b0:dc:e3:98:d2:6e:a5:e8:48:3f:1d:3a:
df:23:7f:03:f3:46:4b:40:08:12:e8:2c:c7:fe:26:1c:f4:14:
87:1f:4d:6b:40:b7:45:fa:f5:50:d2:bb:02:8b:0c:d5:fc:e1:
56:22:e5:2d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzJTLfkM9ytaCxsJrM/eTc2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxN2NjMzdmMWVkODFhYzM3YjIwZmFmMGY0MmM0MWFiODA4
ZjEzYzEwHhcNMjQwMTAyMDgzMTM3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlOWE4NzRkMjY4MGM4OTIwOGMxNGVkN2Q5NDY2Yzk0N2EwOWU3M2E2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlVtKdbordY7i7IZHZkroABavXRFF
vAkUcHNaYsPpYFWIR+gqCubanuY6/U2hOKfvLzPsXhv+i3LTchTg3Ib1ZJLUudzV
L437R7PlvTaJIXuvSBGSZiysj0NBOOuVpLPg5TV5v8fX+xHn4qO8KlpYCDWqihuW
+4d8PGr0R4afYr2XEdXlodtjbXVY6wTUopI1jTaFpwP811N4fPpXzwYr86WylRiV
/+R+wgAvcekcoUG5Q99dyoA89eKYCk7lukpqDqhy6DLPkexgb3pdPzdAbmgnkhHL
LK2Pl/ttKLfewOsot1d7qCko+y7HpmWavCTaUFbKFkJqT76h02jzRPeIZwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOmodNJoDIkgjBTtfZRmyUegnnOmMB8GA1UdIwQY
MBaAFMF8w38e2BrDeyD68PQsQauAjxPBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd1h6RGZ4N1lHc043SVBydzlDeEJxNENQRThFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9iMTBlMDYtMjU3Yy00OTk1LTg3OWQt
NmQwN2Q3ZjFhNzAxLzEvNmFoMDBtZ01pU0NNRk8xOWxHYkpSNkNlYzZZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC9iMTBlMDYtMjU3Yy00OTk1LTg3OWQtNmQwN2Q3ZjFhNzAx
LzEvd1h6RGZ4N1lHc043SVBydzlDeEJxNENQRThFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuQeAMA0G
CSqGSIb3DQEBCwUAA4IBAQAhcOsmK8iIP3M5uLuU1qt2ng2Nxh0Zmhd+Q2Ebjv9E
oWlTuxM2dogshKcypW5+SCPsZF2SgRMSEiuwRWLFnYRnnUSERfgLjgaIB4DVLO8a
t+NWUMm8YGSHJ2/UJMs5fo0sN5j/Mp/RDs97XRWpYPgS4cP6Rfx5f2neTT8REKvU
ZmjK2k734/MXgyYn4H734V9yn4s5j+e2SV/WByKc/MBgMnGKiAhnBqlbv0P3AuNn
XT65av644g6zfWvLMuxrS2uY/xjmJf95cDip3YKw3OOY0m6l6Eg/HTrfI38D80ZL
QAgS6CzH/iYc9BSHH01rQLdF+vVQ0rsCiwzV/OFWIuUt
-----END CERTIFICATE-----
Generated at Sat Jun 8 03:45:50 2024 by rpki-client on console-fra.rpki-client.org