Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/52bcda-f97e-4765-aa95-cd2f5771da98/1/6jDHYIMC4_q4yjw4w_9fCDluUPY.roa
File: 6jDHYIMC4_q4yjw4w_9fCDluUPY.roa (raw, json)
Hash identifier: mEP19G0RBm17/6pVuoMnSwZMt7W4tKXGc2svA3SvXWU=
Subject key identifier: EA:30:C7:60:83:02:E3:FA:B8:CA:3C:38:C3:FF:5F:08:39:6E:50:F6
Certificate issuer: /CN=5a155e32c4a9cda1a81bd9c7370dc34ab00653a0
Certificate serial: 018CC8DF79E5B0807AC698634F2F8DA108A8
Authority key identifier: 5A:15:5E:32:C4:A9:CD:A1:A8:1B:D9:C7:37:0D:C3:4A:B0:06:53:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WhVeMsSpzaGoG9nHNw3DSrAGU6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/52bcda-f97e-4765-aa95-cd2f5771da98/1/6jDHYIMC4_q4yjw4w_9fCDluUPY.roa
Signing time: Tue 02 Jan 2024 06:32:18 +0000
ROA not before: Tue 02 Jan 2024 06:32:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205521
IP address blocks: 185.215.124.0/24 maxlen: 24
185.215.125.0/24 maxlen: 24
185.215.124.0/22 maxlen: 22
185.215.126.0/24 maxlen: 24
185.215.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/52bcda-f97e-4765-aa95-cd2f5771da98/1/WhVeMsSpzaGoG9nHNw3DSrAGU6A.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/52bcda-f97e-4765-aa95-cd2f5771da98/1/WhVeMsSpzaGoG9nHNw3DSrAGU6A.mft
rsync://rpki.ripe.net/repository/DEFAULT/WhVeMsSpzaGoG9nHNw3DSrAGU6A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 12:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:79:e5:b0:80:7a:c6:98:63:4f:2f:8d:a1:08:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a155e32c4a9cda1a81bd9c7370dc34ab00653a0
Validity
Not Before: Jan 2 06:32:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ea30c7608302e3fab8ca3c38c3ff5f08396e50f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:25:89:cc:12:d2:32:cf:39:00:72:f4:46:9a:
d1:4f:61:c2:64:2f:5f:97:6b:62:7a:2f:de:66:de:
b7:88:7c:a1:58:5a:4c:6b:9e:a1:a7:1c:ae:08:48:
37:b8:0b:14:38:e6:97:15:0b:36:a9:3d:fc:8f:cc:
ab:18:a0:b6:8d:21:94:95:f0:c4:3f:f5:85:d5:cc:
40:ae:eb:8f:a8:b5:86:1f:0d:da:90:09:27:95:24:
cc:56:f1:72:c4:e3:e0:d5:4a:cb:b4:ff:e1:9a:d0:
14:d4:89:f2:80:b6:46:f5:ea:4c:33:a1:41:a0:9e:
7a:af:57:af:4b:14:8b:84:8f:06:f3:f4:80:a6:d1:
6e:9b:e5:bb:1d:03:4f:31:92:6f:ef:4d:de:ef:32:
8a:04:0d:ed:55:1d:99:ec:a1:e6:82:77:ca:af:8b:
95:4e:ea:66:22:ff:77:bf:94:16:68:06:e2:b0:1f:
b1:be:24:fb:aa:20:77:a6:96:45:fe:77:e4:30:67:
c9:f3:07:2f:06:7e:79:96:a8:a2:8a:e3:9b:03:84:
31:83:9a:1c:77:04:91:d9:5b:94:4d:5b:3c:a9:56:
ba:cd:5d:08:eb:59:1b:34:df:84:a3:71:73:43:ff:
f5:9e:94:fb:f5:ab:25:81:24:4d:61:0d:82:ca:10:
74:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:30:C7:60:83:02:E3:FA:B8:CA:3C:38:C3:FF:5F:08:39:6E:50:F6
X509v3 Authority Key Identifier:
keyid:5A:15:5E:32:C4:A9:CD:A1:A8:1B:D9:C7:37:0D:C3:4A:B0:06:53:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WhVeMsSpzaGoG9nHNw3DSrAGU6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/52bcda-f97e-4765-aa95-cd2f5771da98/1/6jDHYIMC4_q4yjw4w_9fCDluUPY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/52bcda-f97e-4765-aa95-cd2f5771da98/1/WhVeMsSpzaGoG9nHNw3DSrAGU6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.215.124.0/22
Signature Algorithm: sha256WithRSAEncryption
9d:60:04:6b:5a:e3:e8:4e:62:ae:15:49:8d:16:d3:5f:62:88:
dc:1f:79:a2:c1:55:2b:5f:34:19:6e:11:0e:41:61:49:1e:c4:
aa:ef:02:4c:59:27:4e:20:6a:41:32:7f:0c:f7:31:f8:70:fe:
56:e1:f3:75:e7:6b:c5:83:b4:c3:4a:a1:9c:4d:17:ed:95:5d:
a1:3f:ca:e4:a8:7f:e8:0c:bb:8f:b5:eb:f0:2c:e7:f9:7b:82:
0f:e2:cc:0e:72:24:88:b3:43:cf:0c:2d:75:a5:f9:78:85:e0:
c2:74:e6:a1:e8:11:04:b1:3e:e3:c3:14:11:8e:cb:dc:d2:de:
4e:21:1e:a2:0a:d2:3b:f4:fe:1c:0b:b2:13:2f:fd:62:5e:8f:
7d:1a:b1:04:c1:f9:c3:19:63:d1:e2:8e:5e:9f:42:14:5d:b7:
47:47:c4:47:b7:39:73:f9:18:6a:5a:27:ac:a4:66:15:cb:af:
6a:e4:b0:cf:e4:83:5d:05:57:d1:53:76:77:98:ae:a0:b6:fe:
a1:d2:e8:9b:a1:82:f4:17:de:91:1c:96:73:8c:cd:fe:64:53:
94:3a:0a:64:4e:45:c5:ed:1e:53:9b:44:3e:99:fa:1f:d0:74:
17:f7:4c:9c:58:fc:8e:f3:53:48:b1:f4:be:3d:b7:96:40:42:
89:36:8a:8f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzI33nlsIB6xphjTy+NoQioMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhMTU1ZTMyYzRhOWNkYTFhODFiZDljNzM3MGRjMzRhYjAw
NjUzYTAwHhcNMjQwMTAyMDYzMjE4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYTMwYzc2MDgzMDJlM2ZhYjhjYTNjMzhjM2ZmNWYwODM5NmU1MGY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvyWJzBLSMs85AHL0RprRT2HCZC9f
l2tiei/eZt63iHyhWFpMa56hpxyuCEg3uAsUOOaXFQs2qT38j8yrGKC2jSGUlfDE
P/WF1cxAruuPqLWGHw3akAknlSTMVvFyxOPg1UrLtP/hmtAU1InygLZG9epMM6FB
oJ56r1evSxSLhI8G8/SAptFum+W7HQNPMZJv703e7zKKBA3tVR2Z7KHmgnfKr4uV
TupmIv93v5QWaAbisB+xviT7qiB3ppZF/nfkMGfJ8wcvBn55lqiiiuObA4Qxg5oc
dwSR2VuUTVs8qVa6zV0I61kbNN+Eo3FzQ//1npT79aslgSRNYQ2CyhB0rwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOowx2CDAuP6uMo8OMP/Xwg5blD2MB8GA1UdIwQY
MBaAFFoVXjLEqc2hqBvZxzcNw0qwBlOgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV2hWZU1zU3B6YUdvRzluSE53M0RTckFHVTZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS81MmJjZGEtZjk3ZS00NzY1LWFhOTUt
Y2QyZjU3NzFkYTk4LzEvNmpESFlJTUM0X3E0eWp3NHdfOWZDRGx1VVBZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS81MmJjZGEtZjk3ZS00NzY1LWFhOTUtY2QyZjU3NzFkYTk4
LzEvV2hWZU1zU3B6YUdvRzluSE53M0RTckFHVTZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCudd8MA0G
CSqGSIb3DQEBCwUAA4IBAQCdYARrWuPoTmKuFUmNFtNfYojcH3miwVUrXzQZbhEO
QWFJHsSq7wJMWSdOIGpBMn8M9zH4cP5W4fN152vFg7TDSqGcTRftlV2hP8rkqH/o
DLuPtevwLOf5e4IP4swOciSIs0PPDC11pfl4heDCdOah6BEEsT7jwxQRjsvc0t5O
IR6iCtI79P4cC7ITL/1iXo99GrEEwfnDGWPR4o5en0IUXbdHR8RHtzlz+RhqWies
pGYVy69q5LDP5INdBVfRU3Z3mK6gtv6h0uiboYL0F96RHJZzjM3+ZFOUOgpkTkXF
7R5Tm0Q+mfof0HQX90ycWPyO81NIsfS+PbeWQEKJNoqP
-----END CERTIFICATE-----
Generated at Sat Nov 23 20:56:39 2024 by rpki-client on console-ams.rpki-client.org