Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/39d734-6fb1-4dc0-a128-d75f595fa7c3/1/6iPuleZgw9j1oo6ocUhINV8J4p8.roa
File: 6iPuleZgw9j1oo6ocUhINV8J4p8.roa (raw, json)
Hash identifier: 2YHTFaqDi2N4VGZHxPMUmV1TatZ8fHjMCxE1fPRPiYs=
Subject key identifier: EA:23:EE:95:E6:60:C3:D8:F5:A2:8E:A8:71:48:48:35:5F:09:E2:9F
Certificate issuer: /CN=60c8d57747f729700ef2f5614f6dfdec8d119f2d
Certificate serial: 018CC5DCCB00761F8FBB3196252A5BAA7B07
Authority key identifier: 60:C8:D5:77:47:F7:29:70:0E:F2:F5:61:4F:6D:FD:EC:8D:11:9F:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YMjVd0f3KXAO8vVhT2397I0Rny0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/39d734-6fb1-4dc0-a128-d75f595fa7c3/1/6iPuleZgw9j1oo6ocUhINV8J4p8.roa
Signing time: Mon 01 Jan 2024 16:30:30 +0000
ROA not before: Mon 01 Jan 2024 16:30:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57133
IP address blocks: 185.130.137.0/24 maxlen: 24
185.130.139.0/24 maxlen: 24
185.130.136.0/24 maxlen: 24
185.130.138.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/39d734-6fb1-4dc0-a128-d75f595fa7c3/1/YMjVd0f3KXAO8vVhT2397I0Rny0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/39d734-6fb1-4dc0-a128-d75f595fa7c3/1/YMjVd0f3KXAO8vVhT2397I0Rny0.mft
rsync://rpki.ripe.net/repository/DEFAULT/YMjVd0f3KXAO8vVhT2397I0Rny0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 22:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:cb:00:76:1f:8f:bb:31:96:25:2a:5b:aa:7b:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60c8d57747f729700ef2f5614f6dfdec8d119f2d
Validity
Not Before: Jan 1 16:30:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ea23ee95e660c3d8f5a28ea8714848355f09e29f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:98:f9:38:cc:2b:7e:29:9a:21:82:c0:40:3f:
3a:a8:dc:81:7c:40:ef:9c:94:6c:82:d0:bd:97:b1:
69:e9:2b:83:12:a8:f9:c6:0b:3b:1a:f4:09:64:fe:
e8:87:82:df:64:f5:7c:ee:ef:bd:cd:06:12:7e:68:
b2:06:97:77:58:65:8b:03:c2:70:7d:12:4e:c9:9f:
d9:8e:db:24:bc:a0:98:d4:05:69:ab:8d:f0:2c:3c:
06:de:74:d6:b6:48:72:8a:66:98:79:25:b1:59:06:
80:df:ba:96:2d:31:4c:86:99:af:20:8a:e4:f5:50:
2a:8c:ad:5f:37:e5:d2:52:ea:bc:2a:51:18:0c:82:
a5:1a:c0:aa:e6:3e:08:b6:34:e1:6b:89:ac:b6:72:
29:75:64:66:cd:c1:08:c2:f0:fb:ae:d1:74:c8:ac:
d8:09:64:bc:9d:ff:c9:53:df:af:31:53:17:d2:27:
1b:ea:59:a4:ee:e4:65:46:af:97:65:90:32:55:ca:
9c:c1:cd:0f:68:0f:78:d3:44:29:09:ce:da:04:ce:
c6:d9:91:e1:97:34:e8:86:a5:12:3b:d8:e3:17:41:
91:55:07:40:2d:60:01:71:a2:fc:65:68:84:c8:2e:
a1:55:f9:33:6c:40:27:33:fe:1e:23:fa:92:5c:2e:
c1:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:23:EE:95:E6:60:C3:D8:F5:A2:8E:A8:71:48:48:35:5F:09:E2:9F
X509v3 Authority Key Identifier:
keyid:60:C8:D5:77:47:F7:29:70:0E:F2:F5:61:4F:6D:FD:EC:8D:11:9F:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YMjVd0f3KXAO8vVhT2397I0Rny0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/39d734-6fb1-4dc0-a128-d75f595fa7c3/1/6iPuleZgw9j1oo6ocUhINV8J4p8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/39d734-6fb1-4dc0-a128-d75f595fa7c3/1/YMjVd0f3KXAO8vVhT2397I0Rny0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.130.136.0/22
Signature Algorithm: sha256WithRSAEncryption
10:52:4c:04:84:83:45:e7:93:16:c7:aa:0f:c0:a1:2d:b1:54:
3f:20:d9:73:bf:69:3a:cd:21:08:f3:41:9c:ba:d9:30:bd:a8:
28:8c:95:03:89:fe:ea:25:2c:eb:1a:13:f0:66:88:13:b0:29:
a5:45:fb:01:dd:4c:41:bc:11:02:39:52:2b:fa:3d:5a:06:4d:
f7:59:f8:7d:a2:79:56:3a:d9:73:f8:a7:92:47:c4:85:4d:c2:
49:54:25:18:ee:ad:72:41:59:8f:04:e8:03:77:41:2f:8e:87:
36:31:64:73:aa:f7:c1:a7:e3:9e:4c:31:22:5d:f3:02:fb:5e:
4f:68:7d:06:f5:47:e4:08:e4:4e:89:b9:bc:35:e6:8a:95:66:
cf:65:42:2e:03:73:65:47:36:36:95:e4:62:69:2e:46:10:96:
6d:16:0a:0f:53:01:44:73:9f:98:df:51:6f:2f:cb:82:74:73:
38:45:f2:5f:03:9e:8a:58:e6:68:e9:66:27:4d:e8:84:9b:87:
51:df:4a:10:1d:81:77:01:6d:ce:21:eb:b7:02:3e:79:3a:17:
28:a9:b9:b2:a6:12:4f:be:11:8f:1a:f7:c9:4d:d6:1c:65:ce:
a1:6b:a6:5e:ec:18:e5:29:96:80:73:51:73:7a:da:de:1c:ac:
f6:4a:77:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 04:19:17 2024 by rpki-client on console-ams.rpki-client.org