Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/511d83-7531-4430-a839-0ccc703fe471/1/aGSmrVTkqp3v71GC8OYZKfwyT68.roa
File: aGSmrVTkqp3v71GC8OYZKfwyT68.roa (raw, json)
Hash identifier: bKyHs/t5mbF0kBka2iv2PQFYlrlW6DrlL0egb/ULSOg=
Subject key identifier: 68:64:A6:AD:54:E4:AA:9D:EF:EF:51:82:F0:E6:19:29:FC:32:4F:AF
Certificate issuer: /CN=42e4605bc566ed910cbfe28bc2273db99ae6a68d
Certificate serial: 018CC9BCDEC46D2C094110713B0D7A2AC7C3
Authority key identifier: 42:E4:60:5B:C5:66:ED:91:0C:BF:E2:8B:C2:27:3D:B9:9A:E6:A6:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QuRgW8Vm7ZEMv-KLwic9uZrmpo0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/511d83-7531-4430-a839-0ccc703fe471/1/aGSmrVTkqp3v71GC8OYZKfwyT68.roa
Signing time: Tue 02 Jan 2024 10:34:07 +0000
ROA not before: Tue 02 Jan 2024 10:34:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202105
IP address blocks: 185.206.135.0/24 maxlen: 24
185.206.133.0/24 maxlen: 24
185.206.134.0/24 maxlen: 24
185.206.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/511d83-7531-4430-a839-0ccc703fe471/1/QuRgW8Vm7ZEMv-KLwic9uZrmpo0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/511d83-7531-4430-a839-0ccc703fe471/1/QuRgW8Vm7ZEMv-KLwic9uZrmpo0.mft
rsync://rpki.ripe.net/repository/DEFAULT/QuRgW8Vm7ZEMv-KLwic9uZrmpo0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:de:c4:6d:2c:09:41:10:71:3b:0d:7a:2a:c7:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42e4605bc566ed910cbfe28bc2273db99ae6a68d
Validity
Not Before: Jan 2 10:34:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6864a6ad54e4aa9defef5182f0e61929fc324faf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:80:b9:ba:61:a5:34:1b:2a:53:f6:d4:9f:29:
f4:25:b4:73:c4:12:b4:a5:9b:0a:ee:1d:7c:00:96:
38:a4:68:eb:33:d3:1c:e4:ee:1a:6d:fd:ea:f2:94:
62:d9:67:0d:aa:2e:f4:b1:71:48:52:25:92:41:c8:
71:45:7b:65:9e:41:6d:1c:a4:d2:59:52:5a:0a:3f:
3b:88:e5:36:33:99:4b:eb:5d:c8:94:f8:94:e8:4a:
f0:21:2b:a2:fe:f4:2e:a7:69:73:bb:bc:34:a4:57:
b2:9a:59:2f:31:a0:24:6e:44:2c:f9:6f:94:03:40:
92:c3:cd:4f:ae:18:e8:4a:8c:19:6b:ee:d1:d0:fb:
58:83:32:1e:75:2b:40:e3:80:95:fd:fc:6f:43:1f:
18:98:e7:70:17:87:76:9a:89:e4:bd:e5:68:d3:76:
80:0c:d3:88:ce:ec:a2:95:e1:26:d8:d1:d2:71:0c:
07:56:ea:e5:13:c4:f0:a2:9f:07:ac:d2:0a:c6:b0:
8d:3d:97:c0:f0:7f:d6:f6:6f:2f:e2:f7:92:b6:89:
90:42:7f:b9:a1:1c:82:ee:f3:66:15:c9:3c:9e:ef:
39:03:8d:81:c2:46:fd:2c:fd:9b:ab:d4:01:e8:e3:
f7:c6:eb:65:64:ba:74:10:16:5d:d4:df:c8:78:16:
0c:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:64:A6:AD:54:E4:AA:9D:EF:EF:51:82:F0:E6:19:29:FC:32:4F:AF
X509v3 Authority Key Identifier:
keyid:42:E4:60:5B:C5:66:ED:91:0C:BF:E2:8B:C2:27:3D:B9:9A:E6:A6:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QuRgW8Vm7ZEMv-KLwic9uZrmpo0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/511d83-7531-4430-a839-0ccc703fe471/1/aGSmrVTkqp3v71GC8OYZKfwyT68.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/511d83-7531-4430-a839-0ccc703fe471/1/QuRgW8Vm7ZEMv-KLwic9uZrmpo0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.206.132.0/22
Signature Algorithm: sha256WithRSAEncryption
46:81:a4:60:32:61:db:20:01:85:8a:cd:d1:f8:17:c3:e7:e4:
63:e0:9d:8b:0b:7c:fb:17:2e:4c:43:29:2a:7c:6f:e3:b0:61:
09:17:4e:d5:49:33:dd:5d:de:7e:75:54:ec:f8:77:94:58:d6:
e9:3f:42:84:ca:f0:0b:2e:77:46:d3:74:69:5e:9f:c8:6d:da:
a8:81:31:3e:b9:9b:0e:e8:8f:f6:96:35:9b:5e:f6:7f:05:a8:
6d:37:18:76:7a:7a:c0:fb:7d:b9:bd:b8:49:21:a6:dc:a1:c3:
ab:fb:67:f6:ba:3a:2f:6b:27:f0:b6:a3:ba:d6:00:2d:4f:1c:
84:2d:8f:b1:01:3f:ed:66:09:e7:ee:d3:85:f0:10:35:5a:a6:
ca:60:60:96:e5:86:ba:ad:2f:71:3f:53:01:63:35:f7:29:0e:
67:0a:11:64:65:90:17:75:18:43:32:29:85:59:47:50:9d:77:
a2:86:64:42:99:7a:c6:e3:c9:95:b6:f8:32:57:ee:8e:1b:06:
0a:04:8b:9c:e7:3c:1c:fb:9e:c2:31:35:59:07:56:2f:21:ae:
93:53:9e:51:a1:65:af:c2:6b:e0:09:90:cc:d2:42:be:c5:01:
a8:3b:31:41:fd:bb:06:f7:fd:32:db:20:f4:cc:d1:93:58:7d:
8b:ef:99:63
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzJvN7EbSwJQRBxOw16KsfDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyZTQ2MDViYzU2NmVkOTEwY2JmZTI4YmMyMjczZGI5OWFl
NmE2OGQwHhcNMjQwMTAyMTAzNDA3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ODY0YTZhZDU0ZTRhYTlkZWZlZjUxODJmMGU2MTkyOWZjMzI0ZmFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvIC5umGlNBsqU/bUnyn0JbRzxBK0
pZsK7h18AJY4pGjrM9Mc5O4abf3q8pRi2WcNqi70sXFIUiWSQchxRXtlnkFtHKTS
WVJaCj87iOU2M5lL613IlPiU6ErwISui/vQup2lzu7w0pFeymlkvMaAkbkQs+W+U
A0CSw81PrhjoSowZa+7R0PtYgzIedStA44CV/fxvQx8YmOdwF4d2monkveVo03aA
DNOIzuyileEm2NHScQwHVurlE8Twop8HrNIKxrCNPZfA8H/W9m8v4veStomQQn+5
oRyC7vNmFck8nu85A42Bwkb9LP2bq9QB6OP3xutlZLp0EBZd1N/IeBYM2QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGhkpq1U5Kqd7+9RgvDmGSn8Mk+vMB8GA1UdIwQY
MBaAFELkYFvFZu2RDL/ii8InPbma5qaNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXVSZ1c4Vm03WkVNdi1LTHdpYzl1WnJtcG8wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC81MTFkODMtNzUzMS00NDMwLWE4Mzkt
MGNjYzcwM2ZlNDcxLzEvYUdTbXJWVGtxcDN2NzFHQzhPWVpLZnd5VDY4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC81MTFkODMtNzUzMS00NDMwLWE4MzktMGNjYzcwM2ZlNDcx
LzEvUXVSZ1c4Vm03WkVNdi1LTHdpYzl1WnJtcG8wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuc6EMA0G
CSqGSIb3DQEBCwUAA4IBAQBGgaRgMmHbIAGFis3R+BfD5+Rj4J2LC3z7Fy5MQykq
fG/jsGEJF07VSTPdXd5+dVTs+HeUWNbpP0KEyvALLndG03RpXp/IbdqogTE+uZsO
6I/2ljWbXvZ/BahtNxh2enrA+325vbhJIabcocOr+2f2ujovayfwtqO61gAtTxyE
LY+xAT/tZgnn7tOF8BA1WqbKYGCW5Ya6rS9xP1MBYzX3KQ5nChFkZZAXdRhDMimF
WUdQnXeihmRCmXrG48mVtvgyV+6OGwYKBIuc5zwc+57CMTVZB1YvIa6TU55RoWWv
wmvgCZDM0kK+xQGoOzFB/bsG9/0y2yD0zNGTWH2L75lj
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:59:48 2024 by rpki-client on console-ams.rpki-client.org