Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/2dba5c-9a90-4052-a1eb-6a8477cb6c2a/1/6U4OzV0qs9aOvRcoPRIfhfTTEz0.roa
File: 6U4OzV0qs9aOvRcoPRIfhfTTEz0.roa (raw, json)
Hash identifier: uqLYQw3GY/6DzLxYhQ6gg8UWRM1vSJa8Bcojd+8LwNs=
Subject key identifier: E9:4E:0E:CD:5D:2A:B3:D6:8E:BD:17:28:3D:12:1F:85:F4:D3:13:3D
Certificate issuer: /CN=e61c07c951488f04cb3b0fd338af84d77e46bf52
Certificate serial: 018CC3B6E5D41D97D2F7DCE5368E7E4FA230
Authority key identifier: E6:1C:07:C9:51:48:8F:04:CB:3B:0F:D3:38:AF:84:D7:7E:46:BF:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5hwHyVFIjwTLOw_TOK-E135Gv1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/2dba5c-9a90-4052-a1eb-6a8477cb6c2a/1/6U4OzV0qs9aOvRcoPRIfhfTTEz0.roa
Signing time: Mon 01 Jan 2024 06:29:52 +0000
ROA not before: Mon 01 Jan 2024 06:29:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203435
IP address blocks: 185.135.2.0/24 maxlen: 24
205.201.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/2dba5c-9a90-4052-a1eb-6a8477cb6c2a/1/5hwHyVFIjwTLOw_TOK-E135Gv1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/2dba5c-9a90-4052-a1eb-6a8477cb6c2a/1/5hwHyVFIjwTLOw_TOK-E135Gv1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/5hwHyVFIjwTLOw_TOK-E135Gv1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 16 May 2024 14:51:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:e5:d4:1d:97:d2:f7:dc:e5:36:8e:7e:4f:a2:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e61c07c951488f04cb3b0fd338af84d77e46bf52
Validity
Not Before: Jan 1 06:29:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e94e0ecd5d2ab3d68ebd17283d121f85f4d3133d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:67:13:ff:70:68:c9:93:13:79:44:3f:da:f1:
69:65:93:a1:72:39:af:f3:05:e8:2d:96:e9:fa:bd:
64:3e:19:d1:47:59:30:1d:09:61:e1:62:ad:64:41:
f6:f5:de:3c:71:aa:a0:e7:3e:96:3f:54:1b:29:21:
7c:ef:d3:f9:25:10:06:4e:6a:96:8a:ad:e4:c9:ea:
4f:91:90:91:68:46:81:52:21:16:1f:23:d3:10:8b:
6a:4d:1c:59:13:a7:82:0f:50:5e:c9:ea:87:cd:7b:
95:af:ec:a0:a7:94:5a:c5:ef:d1:9b:5c:a0:77:c7:
68:bc:87:6b:83:1e:8b:30:a4:45:f5:e8:74:a9:fb:
1d:22:7a:56:11:21:e8:29:38:34:e2:10:26:41:fe:
02:d2:0b:0b:60:80:48:f8:cb:53:d3:37:95:df:7a:
67:04:f3:b6:ca:8a:09:1f:fe:41:16:da:54:9c:4d:
c4:01:27:26:9d:63:97:2f:3d:b6:17:8b:cc:0f:fc:
6f:d0:77:ce:e2:e7:f8:ef:2e:f7:b4:68:44:1c:e9:
a8:f6:00:a7:56:a6:c0:a8:dc:75:f5:ef:a3:32:27:
5b:ae:b2:b0:ce:f6:eb:57:07:0a:2d:22:ba:8f:23:
71:33:5e:65:33:0b:90:ef:b5:fa:b4:57:35:f5:28:
ac:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:4E:0E:CD:5D:2A:B3:D6:8E:BD:17:28:3D:12:1F:85:F4:D3:13:3D
X509v3 Authority Key Identifier:
keyid:E6:1C:07:C9:51:48:8F:04:CB:3B:0F:D3:38:AF:84:D7:7E:46:BF:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5hwHyVFIjwTLOw_TOK-E135Gv1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/2dba5c-9a90-4052-a1eb-6a8477cb6c2a/1/6U4OzV0qs9aOvRcoPRIfhfTTEz0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/2dba5c-9a90-4052-a1eb-6a8477cb6c2a/1/5hwHyVFIjwTLOw_TOK-E135Gv1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.135.2.0/24
205.201.55.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:2a:1c:03:36:5c:87:9e:f3:d1:52:aa:1c:14:9b:02:ea:7b:
47:14:13:15:41:33:1f:3b:ab:5b:5d:0d:5c:78:a9:46:23:a1:
7a:f2:cc:c8:9c:d0:ef:31:fd:f5:ec:30:61:d0:03:34:e4:45:
0f:02:bd:d4:6d:b1:1c:c5:52:a1:45:48:95:e6:76:ac:25:7e:
64:07:b3:cd:88:c7:34:77:19:75:e9:8c:97:34:81:35:fd:1f:
1f:43:88:4b:4f:cd:5a:2e:cf:8f:ff:71:65:46:ec:ac:9a:44:
25:4d:c3:70:e4:c8:de:62:10:96:c5:f8:d7:ff:7b:18:2f:74:
0a:ec:87:92:30:e7:b4:f7:43:fc:1a:9b:51:02:99:41:64:27:
bc:4e:85:f3:0c:09:e5:52:b2:7c:45:af:17:01:b5:bd:48:15:
f9:c1:0f:33:a1:f0:d6:6d:f1:b4:de:92:66:c2:94:de:e7:f3:
5d:ef:c2:ba:4b:dc:5f:f5:76:13:fe:f8:a0:76:df:5b:6b:2a:
63:2e:28:c2:44:2c:35:6d:58:60:c8:b8:86:fc:d4:5f:55:d0:
74:bc:e0:2c:4d:1e:21:96:e1:ea:cb:2a:14:b0:94:31:67:5b:
d1:6d:ac:25:01:90:78:a7:0d:17:06:44:9c:a4:99:97:08:b2:
07:0b:b6:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 19:10:29 2024 by rpki-client on console-fra.rpki-client.org