Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/9df809-a8e8-4e12-a25a-c60472e9f717/1/6gSV1YwLEaUA57eaY1HnfqQqvKo.roa
File: 6gSV1YwLEaUA57eaY1HnfqQqvKo.roa (raw, json)
Hash identifier: KKQqr5KmzzxOBSaMu1LgJm4s6+zPhr1IeZ0hzWiysdM=
Subject key identifier: EA:04:95:D5:8C:0B:11:A5:00:E7:B7:9A:63:51:E7:7E:A4:2A:BC:AA
Certificate issuer: /CN=94bc3cdac46408c0c8a3581788b510d0f04e9d1f
Certificate serial: 018CC56EEFC0816975B01B968097D70ECD27
Authority key identifier: 94:BC:3C:DA:C4:64:08:C0:C8:A3:58:17:88:B5:10:D0:F0:4E:9D:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lLw82sRkCMDIo1gXiLUQ0PBOnR8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/9df809-a8e8-4e12-a25a-c60472e9f717/1/6gSV1YwLEaUA57eaY1HnfqQqvKo.roa
Signing time: Mon 01 Jan 2024 14:30:30 +0000
ROA not before: Mon 01 Jan 2024 14:30:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 38987
IP address blocks: 185.13.184.0/22 maxlen: 22
62.133.128.0/19 maxlen: 19
37.72.120.0/21 maxlen: 21
2a02:22e0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/9df809-a8e8-4e12-a25a-c60472e9f717/1/lLw82sRkCMDIo1gXiLUQ0PBOnR8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/9df809-a8e8-4e12-a25a-c60472e9f717/1/lLw82sRkCMDIo1gXiLUQ0PBOnR8.mft
rsync://rpki.ripe.net/repository/DEFAULT/lLw82sRkCMDIo1gXiLUQ0PBOnR8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:ef:c0:81:69:75:b0:1b:96:80:97:d7:0e:cd:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94bc3cdac46408c0c8a3581788b510d0f04e9d1f
Validity
Not Before: Jan 1 14:30:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ea0495d58c0b11a500e7b79a6351e77ea42abcaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:f0:f7:ed:26:f0:6b:d7:ea:eb:29:e2:e5:0e:
c4:01:45:f7:f2:e1:52:ab:63:aa:1e:0f:1f:4f:92:
33:3b:86:ac:09:60:bc:0e:92:29:fe:08:4e:4a:78:
2a:64:ae:04:f7:9f:23:e7:92:cf:31:63:d9:b3:ab:
02:5f:00:29:f7:15:c2:62:2f:15:9e:96:5b:c1:bf:
3a:e2:46:1f:67:b2:17:7f:3e:d3:73:ce:f5:b4:a8:
cd:7b:59:7f:f3:99:33:d3:4d:30:7e:72:e7:ed:66:
91:5c:de:05:b3:cc:d1:84:05:cf:43:2e:29:05:18:
e3:66:78:ee:1b:1c:30:86:7c:2b:cf:4f:04:71:d8:
bb:49:6e:8f:2c:ec:27:fd:5d:f7:b0:16:24:be:c3:
a6:68:40:02:f4:02:36:b3:9f:a2:8d:f1:fe:58:3f:
36:8c:d2:e4:ee:d2:02:b2:1c:7f:2e:d4:65:84:ca:
f3:3f:18:ab:b9:59:41:b9:01:0a:92:60:16:cb:4d:
7a:a9:0a:27:bd:21:b8:db:74:07:ec:6c:e9:ea:d8:
8b:99:04:f7:4b:c2:58:2c:54:77:4e:94:cc:fa:8a:
7e:53:31:51:6e:25:db:7b:6d:1c:5f:dd:5d:84:fd:
2a:44:46:b7:16:1d:7d:71:bc:df:85:9e:ba:1a:88:
c8:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:04:95:D5:8C:0B:11:A5:00:E7:B7:9A:63:51:E7:7E:A4:2A:BC:AA
X509v3 Authority Key Identifier:
keyid:94:BC:3C:DA:C4:64:08:C0:C8:A3:58:17:88:B5:10:D0:F0:4E:9D:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lLw82sRkCMDIo1gXiLUQ0PBOnR8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/9df809-a8e8-4e12-a25a-c60472e9f717/1/6gSV1YwLEaUA57eaY1HnfqQqvKo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/9df809-a8e8-4e12-a25a-c60472e9f717/1/lLw82sRkCMDIo1gXiLUQ0PBOnR8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.72.120.0/21
62.133.128.0/19
185.13.184.0/22
IPv6:
2a02:22e0::/32
Signature Algorithm: sha256WithRSAEncryption
26:08:7c:8e:50:c0:7f:4f:60:cc:1b:84:2f:ee:50:be:54:b3:
c9:b8:28:2c:ad:b4:b6:3c:da:91:5e:9e:b2:fb:82:9d:64:bf:
40:f4:e6:ff:4b:f6:0d:d9:df:bf:5f:f3:6f:d2:55:8b:91:5c:
d0:98:ac:e7:39:8d:37:31:a8:91:23:03:59:3d:29:9e:c4:31:
a6:a7:fe:a8:1c:24:de:2b:b9:7d:9d:f4:37:a2:89:8b:57:85:
cc:81:2a:7a:0f:6b:2e:d1:72:d8:a9:6e:cb:1c:aa:de:51:85:
4d:a9:1b:2d:44:08:44:d5:d4:9f:ee:ae:18:9a:95:fe:fd:09:
de:a3:fc:ed:71:8c:b8:a7:9d:70:fc:f4:fa:b5:fd:29:07:c2:
79:ea:f3:04:08:31:cb:47:9c:cc:12:71:ca:71:f2:9e:c4:58:
56:93:96:db:2d:ac:19:3e:4d:3c:67:1b:75:66:8c:28:91:5f:
4b:4c:b6:21:02:33:61:9a:b6:f5:8b:b0:64:96:7c:02:8f:c5:
7c:f9:06:c9:ca:15:f3:9c:2b:21:f3:40:20:a8:96:03:97:bf:
84:84:b6:49:66:c3:e7:ae:bf:eb:eb:ef:6c:79:94:0a:8b:fd:
b2:8f:ce:d4:37:01:45:14:70:3c:0e:c4:8d:3e:8a:db:67:be:
fb:8e:e2:00
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgISAYzFbu/AgWl1sBuWgJfXDs0nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0YmMzY2RhYzQ2NDA4YzBjOGEzNTgxNzg4YjUxMGQwZjA0
ZTlkMWYwHhcNMjQwMTAxMTQzMDMwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYTA0OTVkNThjMGIxMWE1MDBlN2I3OWE2MzUxZTc3ZWE0MmFiY2FhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiPD37Sbwa9fq6yni5Q7EAUX38uFS
q2OqHg8fT5IzO4asCWC8DpIp/ghOSngqZK4E958j55LPMWPZs6sCXwAp9xXCYi8V
npZbwb864kYfZ7IXfz7Tc871tKjNe1l/85kz000wfnLn7WaRXN4Fs8zRhAXPQy4p
BRjjZnjuGxwwhnwrz08Ecdi7SW6PLOwn/V33sBYkvsOmaEAC9AI2s5+ijfH+WD82
jNLk7tICshx/LtRlhMrzPxiruVlBuQEKkmAWy016qQonvSG423QH7Gzp6tiLmQT3
S8JYLFR3TpTM+op+UzFRbiXbe20cX91dhP0qREa3Fh19cbzfhZ66GojIGQIDAQAB
o4ICJDCCAiAwHQYDVR0OBBYEFOoEldWMCxGlAOe3mmNR536kKryqMB8GA1UdIwQY
MBaAFJS8PNrEZAjAyKNYF4i1ENDwTp0fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbEx3ODJzUmtDTURJbzFnWGlMVVEwUEJPblI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS85ZGY4MDktYThlOC00ZTEyLWEyNWEt
YzYwNDcyZTlmNzE3LzEvNmdTVjFZd0xFYVVBNTdlYVkxSG5mcVFxdktvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS85ZGY4MDktYThlOC00ZTEyLWEyNWEtYzYwNDcyZTlmNzE3
LzEvbEx3ODJzUmtDTURJbzFnWGlMVVEwUEJPblI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQDJUh4AwQF
PoWAAwQCuQ24MA0EAgACMAcDBQAqAiLgMA0GCSqGSIb3DQEBCwUAA4IBAQAmCHyO
UMB/T2DMG4Qv7lC+VLPJuCgsrbS2PNqRXp6y+4KdZL9A9Ob/S/YN2d+/X/Nv0lWL
kVzQmKznOY03MaiRIwNZPSmexDGmp/6oHCTeK7l9nfQ3oomLV4XMgSp6D2su0XLY
qW7LHKreUYVNqRstRAhE1dSf7q4YmpX+/Qneo/ztcYy4p51w/PT6tf0pB8J56vME
CDHLR5zMEnHKcfKexFhWk5bbLawZPk08Zxt1ZowokV9LTLYhAjNhmrb1i7BklnwC
j8V8+QbJyhXznCsh80AgqJYDl7+EhLZJZsPnrr/r6+9seZQKi/2yj87UNwFFFHA8
DsSNPorbZ777juIA
-----END CERTIFICATE-----
Generated at Fri Jun 7 23:46:00 2024 by rpki-client on console-fra.rpki-client.org