Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/465c40-6718-4ea9-91e5-912047153e01/1/4mNXwhWjq0HIjlnerDBNpsONLao.roa
File: 4mNXwhWjq0HIjlnerDBNpsONLao.roa (raw, json)
Hash identifier: 5WSPE8BG9Jf9ZPCbXyzN8Nr7R0CvSD+Foh3s1eIZJig=
Subject key identifier: E2:63:57:C2:15:A3:AB:41:C8:8E:59:DE:AC:30:4D:A6:C3:8D:2D:AA
Certificate issuer: /CN=b135377901a7871d3bff7a70277a2f4e2fc0e277
Certificate serial: 018DF75A529E7D457983007F36221F319001
Authority key identifier: B1:35:37:79:01:A7:87:1D:3B:FF:7A:70:27:7A:2F:4E:2F:C0:E2:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sTU3eQGnhx07_3pwJ3ovTi_A4nc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/465c40-6718-4ea9-91e5-912047153e01/1/4mNXwhWjq0HIjlnerDBNpsONLao.roa
Signing time: Fri 01 Mar 2024 00:11:48 +0000
ROA not before: Fri 01 Mar 2024 00:11:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 28715
IP address blocks: 185.104.120.0/22 maxlen: 22
185.104.120.0/24 maxlen: 24
185.104.121.0/24 maxlen: 24
185.104.122.0/24 maxlen: 24
185.104.123.0/24 maxlen: 24
2a06:3000::/29 maxlen: 29
2a06:3000::/36 maxlen: 36
2a06:3000::/48 maxlen: 48
2a06:3000:1::/48 maxlen: 48
2a06:3000:2::/48 maxlen: 48
2a06:3000:3::/48 maxlen: 48
2a06:3000:4::/48 maxlen: 48
2a06:3000:5::/48 maxlen: 48
2a06:3000:6::/48 maxlen: 48
2a06:3000:1000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/465c40-6718-4ea9-91e5-912047153e01/1/sTU3eQGnhx07_3pwJ3ovTi_A4nc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/465c40-6718-4ea9-91e5-912047153e01/1/sTU3eQGnhx07_3pwJ3ovTi_A4nc.mft
rsync://rpki.ripe.net/repository/DEFAULT/sTU3eQGnhx07_3pwJ3ovTi_A4nc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 05:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:f7:5a:52:9e:7d:45:79:83:00:7f:36:22:1f:31:90:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b135377901a7871d3bff7a70277a2f4e2fc0e277
Validity
Not Before: Mar 1 00:11:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e26357c215a3ab41c88e59deac304da6c38d2daa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:43:77:22:01:85:35:3f:c5:2e:74:e8:32:92:
27:35:a9:0c:1f:83:21:a2:64:ee:42:8c:cd:14:fc:
80:54:9b:61:f0:0a:41:1e:71:fc:f9:f2:bb:39:6e:
4a:db:b5:a8:32:04:dc:a2:2e:70:2a:37:fe:f7:af:
08:12:e6:c5:ef:22:d0:af:4b:52:2c:a9:dc:9e:bf:
30:a9:ee:c1:86:9a:74:c3:7b:8c:41:13:32:bc:45:
8d:f2:18:ff:a0:cc:91:24:ae:1e:84:9a:e9:a0:b3:
1a:42:de:69:95:2b:f9:55:a7:50:bf:76:e2:57:2b:
42:60:57:18:1d:f7:34:6f:aa:d5:3e:f7:bc:19:6c:
75:a1:8d:bd:c1:90:a4:81:51:6d:00:7f:aa:0c:50:
0d:7e:19:3d:89:4a:c5:12:f9:e2:a9:90:24:09:f7:
7b:60:37:b2:f9:78:0b:13:06:1a:b0:8b:63:9e:14:
3f:d3:c6:bd:02:47:f9:31:32:78:ab:8d:30:62:00:
b8:5e:ef:20:ed:5c:97:d0:bc:0c:2d:6a:3d:39:c7:
33:3b:76:8d:d9:6d:d1:f7:a4:bf:42:7e:4f:63:23:
b4:19:72:c4:bf:f6:25:91:5e:be:7b:09:d0:46:dd:
87:35:0f:12:75:8b:1b:94:36:ac:7c:16:88:c3:b9:
7b:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:63:57:C2:15:A3:AB:41:C8:8E:59:DE:AC:30:4D:A6:C3:8D:2D:AA
X509v3 Authority Key Identifier:
keyid:B1:35:37:79:01:A7:87:1D:3B:FF:7A:70:27:7A:2F:4E:2F:C0:E2:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sTU3eQGnhx07_3pwJ3ovTi_A4nc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/465c40-6718-4ea9-91e5-912047153e01/1/4mNXwhWjq0HIjlnerDBNpsONLao.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/465c40-6718-4ea9-91e5-912047153e01/1/sTU3eQGnhx07_3pwJ3ovTi_A4nc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.104.120.0/22
IPv6:
2a06:3000::/29
Signature Algorithm: sha256WithRSAEncryption
6a:1c:34:26:bb:22:41:79:0f:55:a4:3b:41:b5:f4:85:7a:3b:
04:d0:36:f4:85:bd:42:9c:13:94:21:3b:29:a5:a8:03:b0:dc:
91:92:77:3e:57:43:ac:e7:c0:2e:2e:29:64:df:92:a1:ff:f4:
44:55:a1:79:7a:96:11:b4:52:4e:69:5e:05:2b:99:60:b4:5c:
2e:3d:5d:45:95:7d:7d:b7:60:32:a0:53:42:25:c6:d1:4a:45:
19:06:d3:67:0e:1e:1e:0e:8f:d5:7c:9a:c1:71:a7:91:d2:5c:
74:be:16:42:c7:29:d2:0f:3e:14:a2:84:b3:42:70:58:80:04:
25:06:0a:e8:1c:d4:41:51:8d:28:d4:ab:8e:ae:8d:26:32:51:
c2:1c:3b:33:7b:1a:c1:ff:a5:09:ba:25:b1:68:ac:c9:c4:f7:
d0:0e:0d:b2:2a:26:0a:17:5e:7c:b8:9d:1b:d2:4e:ab:32:42:
e5:12:eb:75:17:45:18:90:4c:99:de:58:de:61:56:23:58:e1:
c4:79:ec:da:6e:9d:2c:b8:ff:43:bb:d3:22:97:31:8b:3c:df:
50:b2:a5:1b:9b:5a:5b:4b:6b:55:ca:40:e4:48:54:dd:69:6b:
9e:3a:70:fe:71:f8:e4:1e:cd:5c:06:00:80:65:76:00:f7:78:
54:f0:32:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 14:17:12 2024 by rpki-client on console-fra.rpki-client.org