Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/6f6743-0b22-4312-9c1a-b3663a345518/1/dCc51z5eFJlvWeTm-G6X_W2TUe8.roa
File: dCc51z5eFJlvWeTm-G6X_W2TUe8.roa (raw, json)
Hash identifier: 58Yvm/BBly79DUZ7lj7qIwjg10VzurXXrLAmPn5loBA=
Subject key identifier: 74:27:39:D7:3E:5E:14:99:6F:59:E4:E6:F8:6E:97:FD:6D:93:51:EF
Certificate issuer: /CN=0b42fb4831c1daf2d963c47638d703086eeca8de
Certificate serial: 018CC42532174E7D5BDB7B1ADE7CA3FC0667
Authority key identifier: 0B:42:FB:48:31:C1:DA:F2:D9:63:C4:76:38:D7:03:08:6E:EC:A8:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C0L7SDHB2vLZY8R2ONcDCG7sqN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/6f6743-0b22-4312-9c1a-b3663a345518/1/dCc51z5eFJlvWeTm-G6X_W2TUe8.roa
Signing time: Mon 01 Jan 2024 08:30:21 +0000
ROA not before: Mon 01 Jan 2024 08:30:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206360
IP address blocks: 185.220.136.0/30 maxlen: 30
185.220.136.0/24 maxlen: 24
185.220.139.0/24 maxlen: 24
185.220.138.0/24 maxlen: 24
185.220.136.32/28 maxlen: 28
185.220.137.0/24 maxlen: 24
185.220.136.4/30 maxlen: 30
185.220.137.4/30 maxlen: 30
185.220.136.16/29 maxlen: 29
185.220.137.8/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/6f6743-0b22-4312-9c1a-b3663a345518/1/C0L7SDHB2vLZY8R2ONcDCG7sqN4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/6f6743-0b22-4312-9c1a-b3663a345518/1/C0L7SDHB2vLZY8R2ONcDCG7sqN4.mft
rsync://rpki.ripe.net/repository/DEFAULT/C0L7SDHB2vLZY8R2ONcDCG7sqN4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 04:02:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:32:17:4e:7d:5b:db:7b:1a:de:7c:a3:fc:06:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b42fb4831c1daf2d963c47638d703086eeca8de
Validity
Not Before: Jan 1 08:30:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=742739d73e5e14996f59e4e6f86e97fd6d9351ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:66:53:41:89:27:da:e0:a9:b2:01:cc:5f:28:
9d:a4:05:69:28:0c:93:9d:e3:49:04:99:86:d6:ac:
34:cd:61:d7:8d:3b:a8:cd:1d:40:86:d7:a4:b6:18:
1f:37:45:21:9d:cd:9d:93:4e:af:e9:a4:0a:c2:59:
99:26:6f:e5:5f:f0:3c:54:f1:45:86:17:f4:96:23:
ca:53:68:6c:ec:32:82:a7:8e:18:21:3d:ba:e6:ad:
2b:8c:8d:6d:84:36:ee:06:3a:ae:d0:bd:a2:86:5f:
e6:49:fa:ea:ec:c6:bc:d7:a6:28:9a:bb:05:84:60:
69:74:68:ef:7b:ba:e4:35:62:c7:32:74:f1:6e:ea:
82:8d:00:d5:ff:25:a8:43:01:74:ce:52:c5:8e:29:
9a:a8:25:d0:c2:f7:20:3e:5c:ce:55:85:89:8f:f1:
15:47:30:07:19:d9:9e:21:ec:c6:5e:0c:65:80:f3:
0a:92:7d:be:2c:12:1f:00:42:13:25:0d:1d:a5:e0:
2c:9a:11:11:96:7c:76:86:f4:ed:f4:23:c3:ad:0f:
34:36:11:b5:2e:0e:81:92:55:82:4e:d3:79:a6:47:
2e:53:50:b7:29:a6:f1:f3:9b:9f:2d:f2:4e:28:22:
32:f0:7a:83:50:da:bc:68:9e:c8:70:7c:f5:13:94:
d7:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:27:39:D7:3E:5E:14:99:6F:59:E4:E6:F8:6E:97:FD:6D:93:51:EF
X509v3 Authority Key Identifier:
keyid:0B:42:FB:48:31:C1:DA:F2:D9:63:C4:76:38:D7:03:08:6E:EC:A8:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C0L7SDHB2vLZY8R2ONcDCG7sqN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6f6743-0b22-4312-9c1a-b3663a345518/1/dCc51z5eFJlvWeTm-G6X_W2TUe8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6f6743-0b22-4312-9c1a-b3663a345518/1/C0L7SDHB2vLZY8R2ONcDCG7sqN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.220.136.0/22
Signature Algorithm: sha256WithRSAEncryption
55:1a:23:24:82:b3:a8:e5:57:3a:83:4d:15:6b:4d:cc:4c:09:
ec:65:cd:7c:d3:73:18:2b:55:df:cd:ed:22:a0:4a:f3:f4:f4:
c5:a4:c6:3c:f5:82:25:b4:f2:6c:c7:38:ea:1c:5b:b0:82:77:
40:2c:4f:e1:95:3f:b6:0d:8b:b1:03:df:2e:9b:45:ed:5a:21:
9c:7e:33:33:5c:8b:da:6a:e4:06:53:56:ba:1f:03:ce:e9:74:
f9:f8:0b:5d:fb:87:44:80:d3:87:da:5c:ac:c3:b1:83:7f:db:
67:84:f1:76:9f:d7:32:ef:2c:7f:11:ca:7f:e8:b8:8f:f6:6f:
5f:93:07:6b:c4:6f:f6:40:62:f9:3a:9e:83:18:49:c8:0d:4e:
dc:aa:11:6e:7e:01:98:2f:cb:ac:75:33:f7:d9:43:ee:a1:67:
8e:6f:29:8a:12:2c:d1:7e:74:47:49:61:88:ec:68:ea:c3:04:
32:c3:1c:b3:8b:47:62:d9:47:bd:eb:43:30:43:06:98:b0:8a:
9b:0e:5b:35:c7:d6:80:1a:a3:c1:50:70:92:5c:99:62:b2:b5:
1c:f3:04:96:52:76:dc:d1:09:29:eb:bb:21:e8:71:b1:3c:50:
cd:fc:46:f5:0d:d3:d5:1f:ea:85:5d:bc:35:ac:fd:bf:b4:08:
0d:02:f9:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 07:16:19 2024 by rpki-client on console-ams.rpki-client.org