Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/plbz6WTi8JD1x6uwoFoWd1r9ztk.roa
File: plbz6WTi8JD1x6uwoFoWd1r9ztk.roa (raw, json)
Hash identifier: RviB+k991a3CipxMaZckBGVPGYFgO/g+d34Atsdv8BQ=
Subject key identifier: A6:56:F3:E9:64:E2:F0:90:F5:C7:AB:B0:A0:5A:16:77:5A:FD:CE:D9
Certificate issuer: /CN=6bc5de7d7255b7d58260c65a120b164ef10ef903
Certificate serial: 018CC64AB0D8690473874928E29BA0899FE1
Authority key identifier: 6B:C5:DE:7D:72:55:B7:D5:82:60:C6:5A:12:0B:16:4E:F1:0E:F9:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/plbz6WTi8JD1x6uwoFoWd1r9ztk.roa
Signing time: Mon 01 Jan 2024 18:30:32 +0000
ROA not before: Mon 01 Jan 2024 18:30:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206124
IP address blocks: 185.92.236.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.mft
rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:b0:d8:69:04:73:87:49:28:e2:9b:a0:89:9f:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bc5de7d7255b7d58260c65a120b164ef10ef903
Validity
Not Before: Jan 1 18:30:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a656f3e964e2f090f5c7abb0a05a16775afdced9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e3:84:73:f8:9f:f4:d8:2a:2d:32:ba:7b:e7:
5d:3c:94:85:82:46:91:64:a7:b1:a2:86:bf:8c:af:
48:f0:70:96:43:73:74:b7:60:44:52:f6:b2:2e:0a:
73:55:17:86:90:f3:af:29:a1:b3:e7:72:3f:4b:43:
6e:d7:69:c9:a0:55:13:c6:ac:e3:6e:14:da:0f:cc:
4b:d4:30:3d:8f:b2:11:59:50:29:cf:d6:0d:8d:c7:
e1:dc:52:24:d9:70:32:b3:87:54:66:2c:8e:4d:c6:
4c:38:fe:e1:7e:ce:b1:f4:38:dc:95:21:c2:3f:4e:
6c:4d:f5:4d:c9:2c:ab:63:b6:3b:46:bd:a8:83:93:
05:f3:b5:7d:b2:74:8b:3b:69:60:31:ea:ef:ae:3f:
15:a0:bf:e3:8e:6c:39:e8:16:78:ce:7f:42:2d:7c:
45:0c:cc:88:28:6c:3c:f7:89:5c:1f:bf:de:29:73:
e9:b5:7f:45:47:f7:e6:8b:b9:28:d9:c5:00:99:62:
93:5e:ae:fa:be:7c:88:db:1b:f4:ad:d5:89:f0:c2:
aa:ec:d0:f0:fd:9b:f7:96:51:42:02:15:9a:c5:4b:
50:ce:29:e2:a0:15:17:58:67:fd:08:cb:87:6d:a3:
04:42:5d:b0:ed:1b:dd:4f:a8:b8:a3:4f:bf:78:fe:
97:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:56:F3:E9:64:E2:F0:90:F5:C7:AB:B0:A0:5A:16:77:5A:FD:CE:D9
X509v3 Authority Key Identifier:
keyid:6B:C5:DE:7D:72:55:B7:D5:82:60:C6:5A:12:0B:16:4E:F1:0E:F9:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/plbz6WTi8JD1x6uwoFoWd1r9ztk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.92.236.0/24
Signature Algorithm: sha256WithRSAEncryption
15:b6:a7:35:0d:11:e0:a2:e3:4b:5c:2a:44:ca:01:52:1e:ae:
d9:1f:71:ac:74:89:bc:12:85:b5:6d:03:5a:af:91:a5:80:a3:
d7:9d:3e:bf:0a:9e:39:c8:97:b6:6b:ce:ff:4c:57:05:85:90:
f7:f6:2b:05:ed:63:da:78:bb:cc:58:0e:3b:f5:18:8d:4e:e3:
3b:87:f4:46:9d:c6:9f:7f:30:f7:58:22:03:86:eb:3e:69:b3:
3d:f3:c2:46:c3:a4:8d:56:0c:47:40:10:e1:e6:f8:03:64:a9:
9c:c5:81:d4:77:23:b8:ba:59:d7:f9:95:f5:cb:9a:42:ee:18:
12:9b:97:ce:e0:9b:c0:36:5e:d8:05:13:36:3b:f3:27:d9:7f:
b3:78:d5:78:11:9b:7a:45:dd:bf:d5:83:64:f9:93:c2:1b:7d:
16:09:82:14:e6:c5:65:e7:ee:06:50:e8:06:57:a8:5e:a0:57:
80:b1:50:0b:3a:e3:9d:31:68:00:44:00:79:a4:c8:e4:a3:96:
8f:0a:97:d2:b4:48:30:8d:ab:4b:89:ac:fd:00:73:2e:97:8f:
88:01:60:9a:8e:f6:68:14:89:d3:7c:14:d0:7f:7f:4c:2c:1f:
18:53:ec:87:c6:91:40:ab:66:c1:e3:63:22:88:32:48:6e:51:
bf:dc:fa:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 05:55:22 2024 by rpki-client on console-fra.rpki-client.org