Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/6266af-ffbb-4462-baa6-5739ed83c691/1/y0Xv1ZX6EKYHHOHc9A83tVqa8WA.roa
File: y0Xv1ZX6EKYHHOHc9A83tVqa8WA.roa (raw, json)
Hash identifier: RBCnpAuixht2hHxQj4g4Z1H4aBRTK4I93Js2PqWMqzw=
Subject key identifier: CB:45:EF:D5:95:FA:10:A6:07:1C:E1:DC:F4:0F:37:B5:5A:9A:F1:60
Certificate issuer: /CN=6fe561f84c5bab17d503bf93d3c3d325c2a2252e
Certificate serial: 018CC4938EB87E8BC170E49478A1D640CB34
Authority key identifier: 6F:E5:61:F8:4C:5B:AB:17:D5:03:BF:93:D3:C3:D3:25:C2:A2:25:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b-Vh-ExbqxfVA7-T08PTJcKiJS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/6266af-ffbb-4462-baa6-5739ed83c691/1/y0Xv1ZX6EKYHHOHc9A83tVqa8WA.roa
Signing time: Mon 01 Jan 2024 10:30:53 +0000
ROA not before: Mon 01 Jan 2024 10:30:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61028
IP address blocks: 185.133.112.0/22 maxlen: 24
188.209.160.0/19 maxlen: 24
109.226.128.0/18 maxlen: 24
2a0d:c80::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/6266af-ffbb-4462-baa6-5739ed83c691/1/b-Vh-ExbqxfVA7-T08PTJcKiJS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/6266af-ffbb-4462-baa6-5739ed83c691/1/b-Vh-ExbqxfVA7-T08PTJcKiJS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/b-Vh-ExbqxfVA7-T08PTJcKiJS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 16:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:8e:b8:7e:8b:c1:70:e4:94:78:a1:d6:40:cb:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fe561f84c5bab17d503bf93d3c3d325c2a2252e
Validity
Not Before: Jan 1 10:30:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cb45efd595fa10a6071ce1dcf40f37b55a9af160
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e7:0c:ef:fa:81:8a:21:c8:7e:27:2c:2c:f8:
0a:d8:96:ac:58:ec:0d:7d:b4:34:6a:c5:b4:05:83:
57:0c:07:aa:d3:78:d9:14:c5:93:c3:bc:26:3b:6e:
94:69:96:e1:5d:b9:8a:e2:c5:5a:0b:63:7d:d1:56:
e1:79:fc:0b:03:e1:d4:71:2a:ac:7d:6c:07:01:c3:
ca:12:28:91:00:78:ef:d1:c4:92:e6:77:d3:e1:66:
2c:bc:92:55:be:46:bb:cd:46:7b:2a:36:2c:3d:6d:
d1:d8:fe:f6:c9:f8:60:fc:3b:b2:51:da:b5:35:02:
87:bc:1a:89:a0:38:73:28:28:30:ef:59:9a:0b:10:
77:52:9c:6d:13:1c:f1:48:e6:93:7a:5c:2c:b1:3a:
4c:fa:84:63:d5:b4:95:88:9f:1e:ea:33:12:ed:23:
60:aa:20:5f:cf:64:c2:21:c7:4c:a0:43:7c:14:5f:
1c:13:7b:f9:64:fe:7b:7a:60:be:74:d0:47:ea:7b:
17:11:13:30:29:00:40:9b:b0:18:43:4a:f8:35:e3:
e6:87:60:bf:41:e1:37:38:0f:b8:ba:2d:ba:46:03:
51:d0:e2:f3:30:a9:ab:46:c1:1c:71:ac:c5:1b:74:
3c:92:2a:a9:b9:7c:e2:56:46:af:bc:e2:bf:f4:05:
cd:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:45:EF:D5:95:FA:10:A6:07:1C:E1:DC:F4:0F:37:B5:5A:9A:F1:60
X509v3 Authority Key Identifier:
keyid:6F:E5:61:F8:4C:5B:AB:17:D5:03:BF:93:D3:C3:D3:25:C2:A2:25:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b-Vh-ExbqxfVA7-T08PTJcKiJS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6266af-ffbb-4462-baa6-5739ed83c691/1/y0Xv1ZX6EKYHHOHc9A83tVqa8WA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6266af-ffbb-4462-baa6-5739ed83c691/1/b-Vh-ExbqxfVA7-T08PTJcKiJS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.226.128.0/18
185.133.112.0/22
188.209.160.0/19
IPv6:
2a0d:c80::/29
Signature Algorithm: sha256WithRSAEncryption
8e:cb:c4:38:2a:02:d9:8e:50:86:6d:47:56:0a:e2:0e:d7:a4:
32:bf:e5:58:4e:e1:0a:f7:d3:b7:6c:9d:cf:69:16:04:37:76:
25:44:86:41:e5:f9:e1:2b:89:b9:94:72:7d:32:df:ee:2b:6a:
4a:51:38:29:5c:59:64:5b:07:68:0a:e1:de:ca:b0:c8:9e:68:
c6:6a:e4:58:a6:74:07:c4:08:f8:00:69:34:63:ed:e0:d0:1b:
9a:29:49:4e:32:3b:56:ee:7e:00:74:7f:2b:78:c5:a6:98:c2:
55:8f:4f:ca:12:5a:fc:65:94:96:98:fa:45:d5:1e:65:0c:7b:
cd:8a:47:8c:d6:72:7e:53:e6:e8:36:3f:62:37:77:2a:5f:e2:
df:c2:fd:21:73:eb:53:99:cb:09:20:1e:b9:aa:5e:20:a5:ab:
60:6d:58:31:70:16:e2:cf:85:8a:cb:cc:ff:de:52:00:52:f6:
06:f8:9a:71:66:01:21:fe:d3:a9:b6:82:62:6f:0a:c2:8a:30:
fc:99:4d:a9:bb:dc:8d:43:cd:22:e7:ce:dc:4f:9a:00:c8:39:
81:c8:79:ae:6d:4a:25:37:fc:62:cd:d8:45:43:41:00:fc:02:
e2:ac:57:ac:e5:4c:68:b4:be:2a:5b:0a:9c:f6:75:28:4d:b3:
34:cc:69:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 21:35:22 2024 by rpki-client on console-ams.rpki-client.org