Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/bZp6uGNTVzZfpJzWZQ1BzdfZk74.roa
File: bZp6uGNTVzZfpJzWZQ1BzdfZk74.roa (raw, json)
Hash identifier: 5hyCCizwdJFl3UNVuBFvjhMhOJsjYuuZYt3Igj6mzmI=
Subject key identifier: 6D:9A:7A:B8:63:53:57:36:5F:A4:9C:D6:65:0D:41:CD:D7:D9:93:BE
Certificate issuer: /CN=387d6df7eb7542e0333aeedd14adff8f51f8cbd8
Certificate serial: 01933006280756E8742C0D141E34BD8F3089
Authority key identifier: 38:7D:6D:F7:EB:75:42:E0:33:3A:EE:DD:14:AD:FF:8F:51:F8:CB:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OH1t9-t1QuAzOu7dFK3_j1H4y9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/bZp6uGNTVzZfpJzWZQ1BzdfZk74.roa
Signing time: Fri 15 Nov 2024 13:32:10 +0000
ROA not before: Fri 15 Nov 2024 13:32:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61423
IP address blocks: 185.161.120.0/24 maxlen: 24
185.202.132.0/24 maxlen: 24
193.200.196.0/24 maxlen: 24
2a0a:d6c0::/48 maxlen: 48
2a0a:d6c0:2::/48 maxlen: 48
2a0a:d6c0:3::/48 maxlen: 48
2a0a:d6c0:4::/48 maxlen: 48
2a0a:d6c0:5::/48 maxlen: 48
2a0a:d6c0:6::/48 maxlen: 48
2a0a:d6c0:7::/48 maxlen: 48
2a0a:d6c0:8::/48 maxlen: 48
2a0a:d6c0:9::/48 maxlen: 48
2a0a:d6c0:10::/48 maxlen: 48
2a0a:d6c0:11::/48 maxlen: 48
2a0a:d6c0:13::/48 maxlen: 48
2a0a:d6c0:208::/45 maxlen: 45
2a0a:d6c0:208::/48 maxlen: 48
2a0a:d6c0:efef::/48 maxlen: 48
2a0a:d6c0:eff0::/48 maxlen: 48
2a0a:d6c0:eff1::/48 maxlen: 48
2a0a:d6c0:eff2::/48 maxlen: 48
2a0a:d6c0:eff3::/48 maxlen: 48
2a0a:d6c0:efff::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/OH1t9-t1QuAzOu7dFK3_j1H4y9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:30:06:28:07:56:e8:74:2c:0d:14:1e:34:bd:8f:30:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=387d6df7eb7542e0333aeedd14adff8f51f8cbd8
Validity
Not Before: Nov 15 13:32:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6d9a7ab8635357365fa49cd6650d41cdd7d993be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:1f:d7:34:76:ba:a9:3c:34:af:20:cb:86:65:
74:e2:7b:63:61:90:67:bc:46:8e:a7:6d:bd:3b:9b:
1d:3b:b8:92:eb:d0:61:c4:0e:bb:22:31:0d:e4:5c:
97:0c:05:e2:c1:e9:38:df:67:5b:c2:24:f3:91:6c:
d3:65:8a:47:eb:bc:51:5a:cf:52:e4:01:b0:c7:d2:
51:8d:54:2a:d4:b4:c7:ef:0a:ce:56:a8:d6:02:2d:
0f:60:68:8b:6d:05:33:53:df:9d:7f:50:27:a9:c7:
4e:f8:25:52:58:64:d4:91:17:fd:85:44:99:54:85:
0e:0f:c9:e5:38:21:9c:d5:d2:42:7e:7f:9b:d7:21:
68:d0:c4:61:f8:a5:93:52:7c:6a:56:5c:d7:e7:a1:
2b:d0:30:17:85:22:8a:a8:cf:33:4b:74:d3:8d:02:
99:36:03:b7:cf:9e:85:94:f7:2e:30:9e:e6:7b:00:
55:77:14:a1:d3:a1:07:d8:47:60:83:e8:cf:d2:ce:
5e:4d:36:f8:97:6d:4e:86:57:ad:f3:d7:62:9e:43:
a0:c8:94:a2:5c:68:59:59:e8:d2:a7:04:bd:37:66:
d9:bd:f3:ff:b1:2e:c1:58:f5:16:00:4b:86:f1:7f:
1c:2d:ed:02:e1:5e:0c:54:c8:16:e4:ef:58:98:7d:
a9:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:9A:7A:B8:63:53:57:36:5F:A4:9C:D6:65:0D:41:CD:D7:D9:93:BE
X509v3 Authority Key Identifier:
keyid:38:7D:6D:F7:EB:75:42:E0:33:3A:EE:DD:14:AD:FF:8F:51:F8:CB:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OH1t9-t1QuAzOu7dFK3_j1H4y9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/bZp6uGNTVzZfpJzWZQ1BzdfZk74.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.161.120.0/24
185.202.132.0/24
193.200.196.0/24
IPv6:
2a0a:d6c0::/48
2a0a:d6c0:2::-2a0a:d6c0:9:ffff:ffff:ffff:ffff:ffff
2a0a:d6c0:10::/47
2a0a:d6c0:13::/48
2a0a:d6c0:208::/45
2a0a:d6c0:efef::-2a0a:d6c0:eff3:ffff:ffff:ffff:ffff:ffff
2a0a:d6c0:efff::/48
Signature Algorithm: sha256WithRSAEncryption
a0:ae:8a:bc:a0:fd:56:6a:b2:fe:0d:7d:d2:eb:7a:e1:c1:6b:
5e:be:a0:be:e8:ca:04:45:66:b3:fe:0d:83:10:5c:ff:4d:ea:
14:ae:fb:bd:90:a4:62:ef:f4:e8:47:a0:e7:cd:97:94:0a:f9:
f4:b4:ad:5e:27:15:8f:55:f1:34:3a:36:c3:85:59:d9:37:7c:
56:6e:19:83:de:b6:92:02:98:6f:f2:e7:21:61:3d:e4:e8:c2:
ca:20:b0:8e:a5:e2:35:b1:fe:27:92:98:cb:38:27:26:4d:50:
0a:e5:83:8d:59:f0:e5:64:4d:6d:1d:23:19:94:71:d3:7e:8c:
3d:ff:ec:ce:b3:d6:12:e7:36:30:2d:ae:3e:a2:0c:5c:b8:7c:
e7:7f:a0:b6:27:e4:60:93:1a:62:bb:48:38:cf:8a:74:5e:c5:
74:35:1d:45:fc:58:4e:3a:d3:32:3c:a0:14:cf:dc:d7:9c:cf:
4a:65:02:d1:cf:6a:68:93:93:52:15:84:8f:88:71:93:08:f8:
c8:5f:a7:77:4d:7a:64:30:b1:d0:aa:25:4a:18:6c:d2:d5:c6:
51:ea:1b:8b:86:07:52:25:a4:80:cd:13:ac:fa:59:30:7a:6b:
34:00:d9:33:98:87:30:a1:58:6d:b8:70:f2:17:31:e0:b7:23:
78:ba:55:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:35:01 2024 by rpki-client on console-ams.rpki-client.org