Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/5a0af8-24b2-4154-a412-b4fb5708db15/1/9fE38QzITy17hTTbLdUr2u0JBAU.roa
File: 9fE38QzITy17hTTbLdUr2u0JBAU.roa (raw, json)
Hash identifier: Br4KZCdSUruIMT2rHI8ZNqiiC6Q0ShWttoaEF0nXvnY=
Subject key identifier: F5:F1:37:F1:0C:C8:4F:2D:7B:85:34:DB:2D:D5:2B:DA:ED:09:04:05
Certificate issuer: /CN=606b9ba219e362b2a827720a05c43c7d1c1fa8ef
Certificate serial: 018CC26CEF9D9089453490F46E8335D24C43
Authority key identifier: 60:6B:9B:A2:19:E3:62:B2:A8:27:72:0A:05:C4:3C:7D:1C:1F:A8:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGubohnjYrKoJ3IKBcQ8fRwfqO8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/5a0af8-24b2-4154-a412-b4fb5708db15/1/9fE38QzITy17hTTbLdUr2u0JBAU.roa
Signing time: Mon 01 Jan 2024 00:29:28 +0000
ROA not before: Mon 01 Jan 2024 00:29:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202767
IP address blocks: 185.155.60.0/22 maxlen: 22
185.135.116.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/5a0af8-24b2-4154-a412-b4fb5708db15/1/YGubohnjYrKoJ3IKBcQ8fRwfqO8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/5a0af8-24b2-4154-a412-b4fb5708db15/1/YGubohnjYrKoJ3IKBcQ8fRwfqO8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGubohnjYrKoJ3IKBcQ8fRwfqO8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Jun 2024 01:02:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6c:ef:9d:90:89:45:34:90:f4:6e:83:35:d2:4c:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606b9ba219e362b2a827720a05c43c7d1c1fa8ef
Validity
Not Before: Jan 1 00:29:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f5f137f10cc84f2d7b8534db2dd52bdaed090405
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:17:dd:73:0f:ee:05:0e:fd:75:d9:e9:3b:be:
0d:9d:20:27:22:5c:96:b0:cf:29:90:5b:2e:72:d4:
70:0b:a1:5f:b6:46:38:3a:21:09:47:1d:c4:ae:38:
74:b3:f7:95:5f:3c:9f:85:a0:ef:4b:e3:42:9f:4b:
be:47:f1:07:d3:d7:69:45:b2:64:2a:fe:b3:87:aa:
ba:bf:11:68:28:86:a9:08:0f:5b:36:2c:e1:28:54:
6c:5e:78:06:a9:1e:a3:02:c4:ad:9b:ec:4b:0c:7f:
58:46:8d:a9:c3:36:f8:a7:57:d6:28:03:cc:e8:15:
e0:30:e0:32:07:1a:6c:a1:ba:cc:1d:59:d4:5a:bc:
02:3d:bd:3d:d0:91:4f:43:9c:5b:88:fa:8c:00:39:
9b:b1:fd:81:0b:33:e2:5a:2d:6f:1d:bf:2a:d9:ed:
b9:38:f6:10:af:05:3c:dc:e1:f7:c8:cc:a5:34:f3:
0f:19:63:76:f8:eb:f8:fe:5b:ed:ac:70:b8:41:09:
c7:7f:d8:dd:2c:54:1e:56:38:e2:05:ff:b7:9d:05:
a4:2b:7f:26:d7:cc:6f:cc:04:12:ca:69:fc:30:ba:
ff:2c:8e:d1:db:fe:11:cd:ec:6f:ab:a5:2d:1b:8d:
98:09:a1:f0:f2:fe:2a:d9:15:54:ad:3d:05:38:32:
c9:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:F1:37:F1:0C:C8:4F:2D:7B:85:34:DB:2D:D5:2B:DA:ED:09:04:05
X509v3 Authority Key Identifier:
keyid:60:6B:9B:A2:19:E3:62:B2:A8:27:72:0A:05:C4:3C:7D:1C:1F:A8:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGubohnjYrKoJ3IKBcQ8fRwfqO8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5a0af8-24b2-4154-a412-b4fb5708db15/1/9fE38QzITy17hTTbLdUr2u0JBAU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5a0af8-24b2-4154-a412-b4fb5708db15/1/YGubohnjYrKoJ3IKBcQ8fRwfqO8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.135.116.0/22
185.155.60.0/22
Signature Algorithm: sha256WithRSAEncryption
61:6c:97:97:ba:21:ab:08:7e:a5:ad:86:74:3b:1e:da:79:e7:
aa:b8:4e:bd:5e:13:59:2c:7b:15:73:7c:3a:9b:f8:14:62:fc:
64:17:9a:76:1d:7e:34:8c:57:58:1c:8f:34:14:46:4c:61:d8:
33:c8:5c:d1:b6:86:18:86:ff:72:87:5e:84:6a:52:b6:f5:46:
69:7c:32:a7:79:ff:9a:29:ab:52:16:79:ab:db:2e:34:bf:e7:
f4:05:08:72:14:84:43:df:8f:da:dd:4e:d3:64:ea:15:ef:65:
ce:3b:59:d4:18:b3:a6:41:ad:0b:b8:e1:b3:49:b2:0c:b3:57:
2a:a6:31:ad:9c:24:eb:aa:f5:2d:0c:a6:3c:3f:68:1a:8e:6b:
c9:1f:2c:c7:d1:bd:2b:9a:91:4b:bb:78:6a:d1:14:f7:6d:7f:
cc:de:b6:41:52:21:1b:de:08:4a:66:82:1e:e9:e1:0e:85:ba:
81:9b:56:de:19:d2:42:62:53:21:bc:1e:1f:dd:77:48:6d:fe:
ea:f5:a8:19:4b:51:b0:6b:a6:67:ad:0b:b2:1e:a5:0d:77:c1:
40:13:ae:f3:ff:99:d7:e9:c0:7d:5d:4e:b7:45:73:19:4b:02:
40:a9:22:5c:a7:bb:90:9c:57:b2:09:f3:0b:7b:49:89:c3:5d:
e7:57:5b:d0
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYzCbO+dkIlFNJD0boM10kxDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNmI5YmEyMTllMzYyYjJhODI3NzIwYTA1YzQzYzdkMWMx
ZmE4ZWYwHhcNMjQwMTAxMDAyOTI4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNWYxMzdmMTBjYzg0ZjJkN2I4NTM0ZGIyZGQ1MmJkYWVkMDkwNDA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Rfdcw/uBQ79ddnpO74NnSAnIlyW
sM8pkFsuctRwC6FftkY4OiEJRx3Erjh0s/eVXzyfhaDvS+NCn0u+R/EH09dpRbJk
Kv6zh6q6vxFoKIapCA9bNizhKFRsXngGqR6jAsStm+xLDH9YRo2pwzb4p1fWKAPM
6BXgMOAyBxpsobrMHVnUWrwCPb090JFPQ5xbiPqMADmbsf2BCzPiWi1vHb8q2e25
OPYQrwU83OH3yMylNPMPGWN2+Ov4/lvtrHC4QQnHf9jdLFQeVjjiBf+3nQWkK38m
18xvzAQSymn8MLr/LI7R2/4Rzexvq6UtG42YCaHw8v4q2RVUrT0FODLJ2wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFPXxN/EMyE8te4U02y3VK9rtCQQFMB8GA1UdIwQY
MBaAFGBrm6IZ42KyqCdyCgXEPH0cH6jvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUd1Ym9obmpZcktvSjNJS0JjUThmUndmcU84LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi81YTBhZjgtMjRiMi00MTU0LWE0MTIt
YjRmYjU3MDhkYjE1LzEvOWZFMzhReklUeTE3aFRUYkxkVXIydTBKQkFVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi81YTBhZjgtMjRiMi00MTU0LWE0MTItYjRmYjU3MDhkYjE1
LzEvWUd1Ym9obmpZcktvSjNJS0JjUThmUndmcU84LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCuYd0AwQC
uZs8MA0GCSqGSIb3DQEBCwUAA4IBAQBhbJeXuiGrCH6lrYZ0Ox7aeeequE69XhNZ
LHsVc3w6m/gUYvxkF5p2HX40jFdYHI80FEZMYdgzyFzRtoYYhv9yh16EalK29UZp
fDKnef+aKatSFnmr2y40v+f0BQhyFIRD34/a3U7TZOoV72XOO1nUGLOmQa0LuOGz
SbIMs1cqpjGtnCTrqvUtDKY8P2gajmvJHyzH0b0rmpFLu3hq0RT3bX/M3rZBUiEb
3ghKZoIe6eEOhbqBm1beGdJCYlMhvB4f3XdIbf7q9agZS1Gwa6ZnrQuyHqUNd8FA
E67z/5nX6cB9XU63RXMZSwJAqSJcp7uQnFeyCfMLe0mJw13nV1vQ
-----END CERTIFICATE-----
Generated at Mon Jun 17 10:33:24 2024 by rpki-client on console-fra.rpki-client.org