Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/490f3c-6f7c-4564-9c6b-66979a0480b0/1/6-kOU57nB3qFD0UDvYSRz4e4_Bo.roa
File: 6-kOU57nB3qFD0UDvYSRz4e4_Bo.roa (raw, json)
Hash identifier: pflLUIckbK3CgE+H2WN0LjceYUNj1ZSICb4PW8A/zys=
Subject key identifier: EB:E9:0E:53:9E:E7:07:7A:85:0F:45:03:BD:84:91:CF:87:B8:FC:1A
Certificate issuer: /CN=55ac802b857fe4257223a8e55085a50b3b770ec6
Certificate serial: 018CC5013ADFEE576BF404DE9FCE35AB0358
Authority key identifier: 55:AC:80:2B:85:7F:E4:25:72:23:A8:E5:50:85:A5:0B:3B:77:0E:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VayAK4V_5CVyI6jlUIWlCzt3DsY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/490f3c-6f7c-4564-9c6b-66979a0480b0/1/6-kOU57nB3qFD0UDvYSRz4e4_Bo.roa
Signing time: Mon 01 Jan 2024 12:30:41 +0000
ROA not before: Mon 01 Jan 2024 12:30:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 33941
IP address blocks: 84.21.128.0/19 maxlen: 19
84.21.136.0/22 maxlen: 22
84.21.142.0/23 maxlen: 23
84.21.145.0/24 maxlen: 24
84.21.151.0/24 maxlen: 24
84.21.150.0/23 maxlen: 23
84.21.150.0/24 maxlen: 24
84.21.152.0/23 maxlen: 23
84.21.146.0/23 maxlen: 23
84.21.152.0/24 maxlen: 24
84.21.153.0/24 maxlen: 24
2a01:570:1::/48 maxlen: 48
2a01:570::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/490f3c-6f7c-4564-9c6b-66979a0480b0/1/VayAK4V_5CVyI6jlUIWlCzt3DsY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/490f3c-6f7c-4564-9c6b-66979a0480b0/1/VayAK4V_5CVyI6jlUIWlCzt3DsY.mft
rsync://rpki.ripe.net/repository/DEFAULT/VayAK4V_5CVyI6jlUIWlCzt3DsY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:3a:df:ee:57:6b:f4:04:de:9f:ce:35:ab:03:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55ac802b857fe4257223a8e55085a50b3b770ec6
Validity
Not Before: Jan 1 12:30:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ebe90e539ee7077a850f4503bd8491cf87b8fc1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:e7:31:5c:89:8a:94:1f:31:ec:c4:e4:6e:53:
32:b9:b2:5c:5c:f2:39:fd:f4:f6:ac:d7:fd:1c:1a:
e5:ce:f2:1d:92:48:3e:76:ee:c1:e9:2b:e6:23:ad:
83:24:d4:19:9f:13:45:b6:ca:85:dd:55:0c:c1:2a:
7c:b0:49:76:ff:37:e9:97:95:b6:78:62:cf:13:9e:
22:c0:c1:3e:6b:13:ab:b5:65:6e:a8:a9:78:d7:62:
c3:d2:e3:5d:c6:64:82:a5:ce:9d:9b:72:76:38:a8:
2c:c2:1c:7a:19:0f:9d:71:a5:e8:6e:2e:04:e3:e8:
20:9b:32:20:be:e5:ad:a6:48:10:4e:f2:3a:17:cd:
5b:11:03:ea:1a:a7:67:ab:44:d1:1f:88:f0:a2:b5:
a2:d8:74:cb:65:40:c2:1c:98:96:4d:ef:63:34:78:
90:9b:51:fa:50:ab:1c:cf:f6:93:e5:6f:a8:e1:cf:
3b:58:6b:f4:53:5e:e6:99:76:0f:82:13:56:47:dc:
bf:0e:e4:ca:b9:d8:4b:08:21:79:cb:5b:ec:53:f6:
2a:15:a9:dd:f8:01:3b:14:e0:0b:b6:6c:b5:2f:7e:
3f:7a:33:a1:13:7c:c8:92:ff:3d:51:64:1d:c7:5e:
00:37:43:29:6a:04:52:6a:aa:94:f2:62:c2:75:4a:
e2:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:E9:0E:53:9E:E7:07:7A:85:0F:45:03:BD:84:91:CF:87:B8:FC:1A
X509v3 Authority Key Identifier:
keyid:55:AC:80:2B:85:7F:E4:25:72:23:A8:E5:50:85:A5:0B:3B:77:0E:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VayAK4V_5CVyI6jlUIWlCzt3DsY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/490f3c-6f7c-4564-9c6b-66979a0480b0/1/6-kOU57nB3qFD0UDvYSRz4e4_Bo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/490f3c-6f7c-4564-9c6b-66979a0480b0/1/VayAK4V_5CVyI6jlUIWlCzt3DsY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.21.128.0/19
IPv6:
2a01:570::/32
Signature Algorithm: sha256WithRSAEncryption
c0:2d:30:3c:d0:56:04:9f:68:9b:5e:a6:ca:89:15:a6:b2:8f:
d1:f7:92:e2:75:5d:be:76:37:94:07:69:fa:29:1c:b4:29:4c:
cf:7c:f2:62:82:9c:2a:fb:02:09:63:b7:37:61:50:aa:66:61:
51:69:d0:8f:e1:4b:a5:5e:6b:90:4a:07:fb:74:19:94:dc:90:
0a:28:1f:d0:d1:02:29:8d:89:73:8f:af:ec:79:2d:68:ad:76:
7a:8d:8e:09:4d:4b:25:aa:d8:cc:39:9b:44:3f:57:3b:d1:e6:
f8:e8:98:99:db:20:8e:58:f3:f8:a5:97:17:12:3d:34:4c:7d:
b4:20:67:3b:45:ee:27:1d:29:64:88:2a:fa:86:9b:b5:35:90:
6b:37:2f:e2:75:49:74:4e:04:b7:70:44:84:17:9c:e2:36:e6:
04:1e:b7:f3:33:75:57:d4:40:a8:90:e2:48:08:58:d9:c6:8d:
ea:6a:94:52:a2:2d:8f:70:a0:6d:1d:0c:c6:62:15:4e:0e:e2:
f8:02:60:9b:dc:3f:62:22:1a:0e:66:e0:cb:fa:63:0d:35:31:
74:6c:49:18:c0:99:dd:88:91:23:62:9e:b1:dd:05:f0:73:ce:
51:81:5c:03:48:af:cc:1a:56:15:be:0c:dd:81:a1:aa:1c:99:
d6:df:44:21
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYzFATrf7ldr9ATen841qwNYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1YWM4MDJiODU3ZmU0MjU3MjIzYThlNTUwODVhNTBiM2I3
NzBlYzYwHhcNMjQwMTAxMTIzMDQxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYmU5MGU1MzllZTcwNzdhODUwZjQ1MDNiZDg0OTFjZjg3YjhmYzFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmOcxXImKlB8x7MTkblMyubJcXPI5
/fT2rNf9HBrlzvIdkkg+du7B6SvmI62DJNQZnxNFtsqF3VUMwSp8sEl2/zfpl5W2
eGLPE54iwME+axOrtWVuqKl412LD0uNdxmSCpc6dm3J2OKgswhx6GQ+dcaXobi4E
4+ggmzIgvuWtpkgQTvI6F81bEQPqGqdnq0TRH4jworWi2HTLZUDCHJiWTe9jNHiQ
m1H6UKscz/aT5W+o4c87WGv0U17mmXYPghNWR9y/DuTKudhLCCF5y1vsU/YqFand
+AE7FOALtmy1L34/ejOhE3zIkv89UWQdx14AN0MpagRSaqqU8mLCdUri/wIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFOvpDlOe5wd6hQ9FA72Ekc+HuPwaMB8GA1UdIwQY
MBaAFFWsgCuFf+QlciOo5VCFpQs7dw7GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVmF5QUs0Vl81Q1Z5STZqbFVJV2xDenQzRHNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC80OTBmM2MtNmY3Yy00NTY0LTljNmIt
NjY5NzlhMDQ4MGIwLzEvNi1rT1U1N25CM3FGRDBVRHZZU1J6NGU0X0JvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC80OTBmM2MtNmY3Yy00NTY0LTljNmItNjY5NzlhMDQ4MGIw
LzEvVmF5QUs0Vl81Q1Z5STZqbFVJV2xDenQzRHNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQFVBWAMA0E
AgACMAcDBQAqAQVwMA0GCSqGSIb3DQEBCwUAA4IBAQDALTA80FYEn2ibXqbKiRWm
so/R95LidV2+djeUB2n6KRy0KUzPfPJigpwq+wIJY7c3YVCqZmFRadCP4UulXmuQ
Sgf7dBmU3JAKKB/Q0QIpjYlzj6/seS1orXZ6jY4JTUslqtjMOZtEP1c70eb46JiZ
2yCOWPP4pZcXEj00TH20IGc7Re4nHSlkiCr6hpu1NZBrNy/idUl0TgS3cESEF5zi
NuYEHrfzM3VX1ECokOJICFjZxo3qapRSoi2PcKBtHQzGYhVODuL4AmCb3D9iIhoO
ZuDL+mMNNTF0bEkYwJndiJEjYp6x3QXwc85RgVwDSK/MGlYVvgzdgaGqHJnW30Qh
-----END CERTIFICATE-----
Generated at Fri Jun 7 23:41:53 2024 by rpki-client on console-ams.rpki-client.org