Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/b247da-3192-4813-bff4-2c7e2e4a9747/1/QvwvKaL59eQh_Eah1ut4EIC3B68.roa
File: QvwvKaL59eQh_Eah1ut4EIC3B68.roa (raw, json)
Hash identifier: xjQQwYippUG0T92RE4ooQMqfZj/+zz7rn0WWYKKeUn4=
Subject key identifier: 42:FC:2F:29:A2:F9:F5:E4:21:FC:46:A1:D6:EB:78:10:80:B7:07:AF
Certificate issuer: /CN=6d6d1f110f595c635ccbe9fbb3090dbb5fcfbd6e
Certificate serial: 018CC86F6C0FA3D3F78F0AE55ED31140B54C
Authority key identifier: 6D:6D:1F:11:0F:59:5C:63:5C:CB:E9:FB:B3:09:0D:BB:5F:CF:BD:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bW0fEQ9ZXGNcy-n7swkNu1_PvW4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/b247da-3192-4813-bff4-2c7e2e4a9747/1/QvwvKaL59eQh_Eah1ut4EIC3B68.roa
Signing time: Tue 02 Jan 2024 04:29:54 +0000
ROA not before: Tue 02 Jan 2024 04:29:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211906
IP address blocks: 185.235.60.0/24 maxlen: 24
2a0c:8cc0::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/b247da-3192-4813-bff4-2c7e2e4a9747/1/bW0fEQ9ZXGNcy-n7swkNu1_PvW4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/b247da-3192-4813-bff4-2c7e2e4a9747/1/bW0fEQ9ZXGNcy-n7swkNu1_PvW4.mft
rsync://rpki.ripe.net/repository/DEFAULT/bW0fEQ9ZXGNcy-n7swkNu1_PvW4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 21:03:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:6c:0f:a3:d3:f7:8f:0a:e5:5e:d3:11:40:b5:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d6d1f110f595c635ccbe9fbb3090dbb5fcfbd6e
Validity
Not Before: Jan 2 04:29:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=42fc2f29a2f9f5e421fc46a1d6eb781080b707af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:00:44:f0:e0:15:68:28:bc:da:0c:51:e1:3c:
88:44:60:0a:fc:bc:df:d8:a1:2f:ce:b5:04:53:e3:
43:25:56:fc:4d:8e:02:df:b6:04:31:0f:11:08:11:
0e:ff:ca:e8:13:05:14:c3:80:ab:95:44:5a:a2:f1:
af:fa:f1:8a:58:c6:29:3d:c1:5e:c7:9c:63:0e:69:
92:88:74:d7:22:71:28:b9:73:92:4b:88:06:89:f1:
fb:b1:dc:9e:ac:10:1d:32:dd:72:0d:f1:64:1e:67:
9d:b7:b0:31:46:71:fc:74:c1:fc:bd:96:eb:f8:82:
ce:8b:5a:38:dc:14:c2:26:ed:81:51:7f:da:e4:fc:
a7:bf:40:48:a8:4c:cc:c4:43:2d:cb:b3:5d:48:10:
74:df:ba:8c:e6:57:dd:ea:f2:d0:5f:83:bb:53:a0:
f5:57:fb:04:da:b0:48:9a:9c:8e:d8:e6:87:7d:65:
c7:aa:a2:85:e3:07:2a:5f:09:ec:f4:d7:11:33:d8:
04:bf:48:4b:ce:52:24:f0:a2:16:53:24:73:c2:02:
48:fe:5c:52:c7:83:17:10:34:4f:04:94:b2:44:fd:
8e:89:c6:37:e5:40:fa:1f:1f:c2:a9:c0:08:8f:8a:
b2:f6:8a:51:88:01:e7:cc:93:6a:0a:13:67:39:07:
c0:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:FC:2F:29:A2:F9:F5:E4:21:FC:46:A1:D6:EB:78:10:80:B7:07:AF
X509v3 Authority Key Identifier:
keyid:6D:6D:1F:11:0F:59:5C:63:5C:CB:E9:FB:B3:09:0D:BB:5F:CF:BD:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bW0fEQ9ZXGNcy-n7swkNu1_PvW4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/b247da-3192-4813-bff4-2c7e2e4a9747/1/QvwvKaL59eQh_Eah1ut4EIC3B68.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/b247da-3192-4813-bff4-2c7e2e4a9747/1/bW0fEQ9ZXGNcy-n7swkNu1_PvW4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.235.60.0/24
IPv6:
2a0c:8cc0::/29
Signature Algorithm: sha256WithRSAEncryption
a0:fa:7b:3f:79:28:85:b3:12:c9:86:5c:58:34:a4:7d:c8:a4:
07:fa:b1:4c:0f:38:56:b3:1e:53:62:1f:af:5c:ee:fb:20:33:
88:8c:e1:6b:30:96:53:b2:15:99:e5:a6:04:a0:d9:5d:55:54:
70:3c:ad:28:3e:59:15:d2:5f:de:1b:40:db:a7:a8:83:ce:12:
82:d2:aa:67:c3:2a:39:36:86:81:98:fc:1d:50:96:cc:08:5f:
3e:2e:34:b8:03:ee:f7:b1:8c:d2:2d:ad:42:58:fe:0b:bb:62:
39:29:00:6f:73:45:84:27:f9:67:20:15:ee:30:35:0d:e5:e5:
bc:7a:3a:2a:76:1f:20:e3:38:0f:78:50:03:c7:c1:7b:6f:90:
c7:cc:a4:56:09:2e:9d:33:3a:d5:32:54:ff:0a:27:89:09:14:
ab:4a:12:bf:f3:f7:5e:3c:34:5a:d7:6d:59:27:92:e8:bd:f7:
bc:28:4d:26:3e:47:94:d3:c5:e5:8c:be:bb:52:1b:e2:84:6b:
25:25:c3:02:1c:ec:8d:be:12:d8:55:27:3a:51:b0:3d:b9:72:
02:32:df:02:2d:2a:2b:a8:7e:d9:5b:c5:ff:0e:84:21:3d:92:
7a:47:d1:9d:ab:61:d9:0a:36:47:ae:8f:e4:af:75:46:ac:ba:
cb:93:4e:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 02:07:55 2024 by rpki-client on console-fra.rpki-client.org