Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/e61614-ebc5-4731-8560-9d1812999a35/1/GiRurU4TIch_Wxmf59K5LTLVo_w.roa
File: GiRurU4TIch_Wxmf59K5LTLVo_w.roa (raw, json)
Hash identifier: cl8gbwsrNYWST0FTMRMSjlTj78lqy9/uGPHn3IatzHU=
Subject key identifier: 1A:24:6E:AD:4E:13:21:C8:7F:5B:19:9F:E7:D2:B9:2D:32:D5:A3:FC
Certificate issuer: /CN=b4a90f6896678442afaee1baaaa6b2a2decacd3b
Certificate serial: 018CC94DCA3075AEC824B95889E1D7F43468
Authority key identifier: B4:A9:0F:68:96:67:84:42:AF:AE:E1:BA:AA:A6:B2:A2:DE:CA:CD:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tKkPaJZnhEKvruG6qqayot7KzTs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/e61614-ebc5-4731-8560-9d1812999a35/1/GiRurU4TIch_Wxmf59K5LTLVo_w.roa
Signing time: Tue 02 Jan 2024 08:32:47 +0000
ROA not before: Tue 02 Jan 2024 08:32:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203164
IP address blocks: 185.150.62.0/23 maxlen: 23
185.150.62.0/24 maxlen: 24
185.150.63.0/24 maxlen: 24
185.150.61.0/24 maxlen: 24
185.150.60.0/23 maxlen: 23
185.150.60.0/24 maxlen: 24
185.150.60.0/22 maxlen: 22
2a07:6e00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/e61614-ebc5-4731-8560-9d1812999a35/1/tKkPaJZnhEKvruG6qqayot7KzTs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/e61614-ebc5-4731-8560-9d1812999a35/1/tKkPaJZnhEKvruG6qqayot7KzTs.mft
rsync://rpki.ripe.net/repository/DEFAULT/tKkPaJZnhEKvruG6qqayot7KzTs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:ca:30:75:ae:c8:24:b9:58:89:e1:d7:f4:34:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4a90f6896678442afaee1baaaa6b2a2decacd3b
Validity
Not Before: Jan 2 08:32:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1a246ead4e1321c87f5b199fe7d2b92d32d5a3fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:88:83:c5:b1:ce:3b:bb:a4:10:ab:72:af:34:
d2:af:fe:5b:87:b0:0e:83:fc:f6:79:2f:09:a6:8b:
95:49:31:99:17:96:bf:46:7c:38:b1:6e:38:8b:d2:
da:f9:87:36:b8:54:f6:8e:1e:0a:6a:c6:e7:d1:19:
33:89:21:02:06:47:72:47:e2:57:40:18:e8:ed:6a:
67:d6:db:4e:8e:79:92:19:c4:f0:18:85:af:68:b1:
5c:e3:62:62:2e:ac:dd:5b:c0:a0:dc:fc:cb:00:0b:
5c:e2:c6:11:2f:8d:c7:93:b9:48:58:84:22:cb:c5:
a4:48:0a:84:15:0e:88:3c:a3:eb:ac:26:8c:a4:78:
ed:15:40:5c:e8:8a:ca:07:86:0a:48:8a:98:ad:9d:
00:42:60:11:2f:6f:49:cb:9c:6c:c1:40:fb:16:bf:
30:2c:84:ec:5f:e1:14:8f:70:d1:7c:0a:86:a2:62:
fb:cd:0d:59:10:24:47:6a:ae:26:41:cf:4b:2f:a1:
1c:38:e7:69:0c:90:78:10:f9:84:56:c7:c8:97:d7:
74:7d:28:a8:42:7e:0d:55:6b:28:fb:f5:5c:06:4d:
85:f6:66:e8:61:95:7c:53:93:e3:09:38:4a:95:d5:
6d:0b:80:70:52:38:b2:b7:58:a3:b2:b1:71:9d:68:
2b:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:24:6E:AD:4E:13:21:C8:7F:5B:19:9F:E7:D2:B9:2D:32:D5:A3:FC
X509v3 Authority Key Identifier:
keyid:B4:A9:0F:68:96:67:84:42:AF:AE:E1:BA:AA:A6:B2:A2:DE:CA:CD:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tKkPaJZnhEKvruG6qqayot7KzTs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/e61614-ebc5-4731-8560-9d1812999a35/1/GiRurU4TIch_Wxmf59K5LTLVo_w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/e61614-ebc5-4731-8560-9d1812999a35/1/tKkPaJZnhEKvruG6qqayot7KzTs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.150.60.0/22
IPv6:
2a07:6e00::/29
Signature Algorithm: sha256WithRSAEncryption
09:1b:a0:4c:13:2f:68:c9:fd:40:1b:ff:1d:3e:85:36:61:b5:
85:0d:1e:89:f7:80:28:c6:83:75:fa:47:67:5c:89:d9:49:0c:
d4:b5:b6:6c:7a:97:f1:9f:0b:9f:05:76:11:59:49:32:ca:5b:
da:01:39:ff:44:83:68:d9:64:32:ed:32:14:c4:11:69:9c:6d:
ce:2c:cb:0a:d0:4a:8f:bc:cf:55:ef:1f:3c:34:03:6f:d8:fe:
81:9d:95:ee:3c:02:92:f5:d8:7f:37:7c:48:de:5c:72:6f:ac:
93:37:22:9c:5f:fa:52:3c:8e:4c:67:a8:a0:44:04:e7:2a:da:
eb:30:4d:fc:60:a9:6f:f4:c3:8f:aa:29:e9:02:78:c7:75:22:
ab:5d:0b:ed:25:b9:6d:53:d9:45:23:00:1f:d6:fb:80:b3:01:
23:c7:11:5a:8d:b1:77:fb:30:4b:39:ee:62:f7:a7:80:a6:25:
cb:fe:d1:38:d4:05:ab:58:c5:18:9e:6d:09:5c:33:58:23:e7:
59:cc:b3:78:a6:40:c2:bf:30:a5:8f:64:20:65:2d:e9:d0:3f:
73:78:94:9c:58:1d:57:0b:d2:ab:88:f7:83:ce:bc:a9:19:cb:
e6:47:8a:f9:5c:66:2b:48:0e:12:36:7c:db:42:34:a3:04:a8:
87:9b:67:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 17:02:43 2024 by rpki-client on console-ams.rpki-client.org