Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/b91MS8aWQud6Oy9jdSnwYCzZqAc.roa
File: b91MS8aWQud6Oy9jdSnwYCzZqAc.roa (raw, json)
Hash identifier: IwD1fv1heAWq8cSLGnvXGkvuwdBvWy4PWe6LeaJ6/Gc=
Subject key identifier: 6F:DD:4C:4B:C6:96:42:E7:7A:3B:2F:63:75:29:F0:60:2C:D9:A8:07
Certificate issuer: /CN=5806da5a59251275ceb18694e17415352aedd6aa
Certificate serial: 018CC64B8BCE0AE250C1349E57D96FDBCB51
Authority key identifier: 58:06:DA:5A:59:25:12:75:CE:B1:86:94:E1:74:15:35:2A:ED:D6:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WAbaWlklEnXOsYaU4XQVNSrt1qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/b91MS8aWQud6Oy9jdSnwYCzZqAc.roa
Signing time: Mon 01 Jan 2024 18:31:28 +0000
ROA not before: Mon 01 Jan 2024 18:31:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 185.220.146.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.mft
rsync://rpki.ripe.net/repository/DEFAULT/WAbaWlklEnXOsYaU4XQVNSrt1qo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 14:46:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:8b:ce:0a:e2:50:c1:34:9e:57:d9:6f:db:cb:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5806da5a59251275ceb18694e17415352aedd6aa
Validity
Not Before: Jan 1 18:31:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6fdd4c4bc69642e77a3b2f637529f0602cd9a807
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:2d:ac:a1:92:6c:e8:3c:ef:5d:d9:70:95:a2:
b1:56:ad:ec:1b:e8:4e:51:d6:33:ea:1c:fe:29:09:
9c:92:bc:78:91:2a:67:ef:89:44:2f:1f:2f:22:be:
d1:70:ed:d0:68:27:44:0d:a7:18:96:c0:b7:53:26:
3f:ed:6e:c4:51:10:ff:72:8c:cb:c0:b4:87:c0:dc:
b8:d2:4f:6d:c7:2b:83:55:39:fe:c0:fd:42:a1:70:
30:a2:fa:c2:2b:d3:82:9b:6a:2c:7c:ea:50:65:d0:
fa:0e:cb:59:ef:6b:f3:9a:a5:bb:70:a0:b0:51:7b:
82:08:d5:a0:0c:55:e8:1f:1b:f5:c8:a2:f0:14:86:
09:3c:1d:88:0a:24:a4:5c:cf:7f:58:ae:f6:3d:de:
e7:d9:15:f6:62:28:8d:4b:31:a5:42:d1:24:c8:85:
e6:b9:d7:b2:49:bf:3e:23:81:b3:27:3d:18:ec:b2:
f3:f0:99:b4:d4:df:af:2a:7f:ae:30:a1:72:b5:23:
2e:c6:45:fe:ba:c9:60:87:55:95:31:94:16:bc:0f:
e4:32:9d:07:3e:c2:f9:07:0b:b7:c8:86:37:a5:e7:
47:ea:7e:b1:cd:9a:8f:ab:2d:10:4e:27:22:ae:33:
66:0d:65:2f:19:d5:8b:66:bf:19:de:cc:9b:2f:13:
10:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:DD:4C:4B:C6:96:42:E7:7A:3B:2F:63:75:29:F0:60:2C:D9:A8:07
X509v3 Authority Key Identifier:
keyid:58:06:DA:5A:59:25:12:75:CE:B1:86:94:E1:74:15:35:2A:ED:D6:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WAbaWlklEnXOsYaU4XQVNSrt1qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/b91MS8aWQud6Oy9jdSnwYCzZqAc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.220.146.0/23
Signature Algorithm: sha256WithRSAEncryption
97:71:ea:42:94:d1:9d:8c:f7:1e:8b:0a:44:c3:2f:9a:43:52:
d6:fb:49:61:6d:6c:73:e8:3a:26:da:71:10:63:5e:0c:03:6f:
ef:6a:e4:7d:13:cb:f9:82:15:74:b3:e2:90:44:66:56:ea:30:
a2:be:f0:d2:30:9e:c7:ed:09:46:95:7d:79:c4:3b:b0:63:97:
d6:2a:9f:28:aa:5b:0e:56:fb:2c:17:2c:e1:70:8f:5c:23:8a:
31:46:f2:40:78:25:67:40:96:88:1a:54:29:26:54:21:5d:bb:
42:29:98:7f:33:8f:77:ee:bf:33:7f:84:b0:fe:76:eb:cb:8d:
57:aa:51:47:cf:26:d1:86:a1:01:6b:08:95:bd:8d:72:92:5b:
86:61:0f:46:39:2c:52:a9:57:f5:97:27:44:9c:a6:59:1a:3c:
90:8a:52:02:7c:39:05:99:a9:a5:4a:7a:d8:0d:54:0a:ce:5b:
9b:42:96:a9:7d:9a:b9:af:bb:57:ef:c1:df:d5:c2:81:da:4a:
c7:25:86:aa:08:5a:58:23:81:df:bd:6c:e8:51:c7:5b:6b:84:
7d:69:e9:e2:08:9e:af:61:f4:9f:32:ad:a9:0c:75:40:b2:7e:
c3:4f:49:36:b8:52:a7:58:40:1c:3e:29:43:b2:fc:96:94:03:
2d:6c:d0:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 21:44:21 2024 by rpki-client on console-ams.rpki-client.org