Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/aa1797-4373-4a2f-a074-c73cbe70abb9/1/rn6bC36SFBuDe0Hwc_IxSgkttIk.roa
File: rn6bC36SFBuDe0Hwc_IxSgkttIk.roa (raw, json)
Hash identifier: Pka+TJxnWbMaQQ1Np08vxXIkHaRGmDVvZnuyPKDeCSo=
Subject key identifier: AE:7E:9B:0B:7E:92:14:1B:83:7B:41:F0:73:F2:31:4A:09:2D:B4:89
Certificate issuer: /CN=4aab65873cb2782f13c378f5543c691443d16f79
Certificate serial: 018CC7941836D292C525A009DBFF98091EDC
Authority key identifier: 4A:AB:65:87:3C:B2:78:2F:13:C3:78:F5:54:3C:69:14:43:D1:6F:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SqtlhzyyeC8Tw3j1VDxpFEPRb3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/aa1797-4373-4a2f-a074-c73cbe70abb9/1/rn6bC36SFBuDe0Hwc_IxSgkttIk.roa
Signing time: Tue 02 Jan 2024 00:30:20 +0000
ROA not before: Tue 02 Jan 2024 00:30:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211261
IP address blocks: 185.201.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/aa1797-4373-4a2f-a074-c73cbe70abb9/1/SqtlhzyyeC8Tw3j1VDxpFEPRb3k.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/aa1797-4373-4a2f-a074-c73cbe70abb9/1/SqtlhzyyeC8Tw3j1VDxpFEPRb3k.mft
rsync://rpki.ripe.net/repository/DEFAULT/SqtlhzyyeC8Tw3j1VDxpFEPRb3k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Jun 2024 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:18:36:d2:92:c5:25:a0:09:db:ff:98:09:1e:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4aab65873cb2782f13c378f5543c691443d16f79
Validity
Not Before: Jan 2 00:30:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ae7e9b0b7e92141b837b41f073f2314a092db489
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:28:11:11:a5:74:3d:48:45:60:17:c6:62:ad:
67:00:17:7a:c8:9b:94:f0:28:af:97:de:94:d8:21:
ed:eb:43:3f:f7:de:d4:a8:81:64:6e:22:5a:5c:aa:
56:91:54:0f:9b:a7:d8:a9:af:f4:7f:ba:01:81:ab:
66:b6:ab:d9:59:5e:54:d4:25:f9:61:d8:57:ff:91:
e8:82:7a:52:de:43:c8:69:05:44:11:cb:a5:68:b1:
36:88:e1:a0:86:7c:36:bf:71:75:57:ba:4a:2d:79:
06:8f:5b:7c:ae:8d:3b:8f:66:06:01:87:86:bb:7b:
c5:ac:3e:f8:94:65:ed:d1:39:21:13:38:fc:11:b3:
21:26:7c:46:17:2a:f4:72:64:7e:78:3e:85:ff:14:
f2:59:99:f2:3c:9e:6f:c9:85:de:15:73:83:e4:a6:
aa:ee:7f:b9:10:21:35:db:42:49:1d:ce:a8:25:db:
43:28:58:e1:e3:db:d8:2f:41:6c:da:28:6f:32:5d:
73:e1:45:80:f0:6c:72:2a:98:f7:88:18:9b:f8:22:
97:7a:3c:fa:d3:40:03:b6:72:25:ad:67:c0:79:24:
19:88:52:3d:0d:f2:70:4b:26:ee:25:f2:90:7d:bf:
0d:20:be:a1:d9:e2:ec:3a:b3:88:92:56:c0:11:9e:
b8:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:7E:9B:0B:7E:92:14:1B:83:7B:41:F0:73:F2:31:4A:09:2D:B4:89
X509v3 Authority Key Identifier:
keyid:4A:AB:65:87:3C:B2:78:2F:13:C3:78:F5:54:3C:69:14:43:D1:6F:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SqtlhzyyeC8Tw3j1VDxpFEPRb3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/aa1797-4373-4a2f-a074-c73cbe70abb9/1/rn6bC36SFBuDe0Hwc_IxSgkttIk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/aa1797-4373-4a2f-a074-c73cbe70abb9/1/SqtlhzyyeC8Tw3j1VDxpFEPRb3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.201.6.0/24
Signature Algorithm: sha256WithRSAEncryption
af:1a:2d:98:d8:96:78:c7:9d:6a:6d:1f:6a:88:68:5f:db:3b:
4b:ee:05:8b:45:19:c2:45:ad:2f:3c:b1:a6:d1:e8:5a:b8:54:
72:c7:a9:e8:c4:3a:f1:eb:bd:ef:7e:6c:d9:f7:ee:f9:65:32:
63:b9:e8:6a:a5:e9:6b:7e:af:8a:94:24:14:a6:07:c0:7a:6a:
f5:4f:29:77:8c:41:3d:81:b9:19:bf:dc:bd:bf:fe:63:a5:47:
b9:20:ac:0d:3c:b3:15:cb:9c:28:55:de:c2:ee:59:a4:f2:67:
00:5e:6d:a0:82:43:97:db:3c:e0:78:67:9f:f0:5c:f3:b0:00:
ec:96:98:fd:ad:d5:1d:b5:7e:74:70:42:9e:9e:ca:93:ff:7d:
08:ba:52:87:ad:6f:d7:b5:c6:fc:99:4e:a6:43:24:a6:64:37:
cc:89:06:f1:ce:d0:98:ca:0f:e4:2d:a9:62:c3:9a:ec:4f:ce:
07:fe:ae:b1:f7:5d:f4:00:1c:69:ff:af:3b:7a:c8:a0:06:ad:
20:4a:1e:d9:ab:14:2f:d7:bf:1c:e1:5d:96:64:a2:ab:1a:34:
76:b7:f4:80:aa:48:c1:77:84:af:5d:af:a9:a6:74:36:0d:77:
d7:a6:78:31:46:14:da:36:61:70:16:e7:72:2b:0f:bb:fd:1e:
df:5d:3f:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 17 00:54:18 2024 by rpki-client on console-ams.rpki-client.org