Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/a8f471-c243-4cc6-970d-ff7dc04ba385/1/L6-OBv4carTvpW9MmvmwLF-0s6Y.roa
File: L6-OBv4carTvpW9MmvmwLF-0s6Y.roa (raw, json)
Hash identifier: zkE9m8m0oy9NnvXZTDmuQtj4iHrzPj+xPgaG145AepY=
Subject key identifier: 2F:AF:8E:06:FE:1C:6A:B4:EF:A5:6F:4C:9A:F9:B0:2C:5F:B4:B3:A6
Certificate issuer: /CN=80e506fcf1d7cf649d388e975ca26252e219fc7c
Certificate serial: 018CC8DF09E80CDB67D9AA0E43D338D5269C
Authority key identifier: 80:E5:06:FC:F1:D7:CF:64:9D:38:8E:97:5C:A2:62:52:E2:19:FC:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gOUG_PHXz2SdOI6XXKJiUuIZ_Hw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/a8f471-c243-4cc6-970d-ff7dc04ba385/1/L6-OBv4carTvpW9MmvmwLF-0s6Y.roa
Signing time: Tue 02 Jan 2024 06:31:49 +0000
ROA not before: Tue 02 Jan 2024 06:31:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205495
IP address blocks: 185.216.82.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/a8f471-c243-4cc6-970d-ff7dc04ba385/1/gOUG_PHXz2SdOI6XXKJiUuIZ_Hw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/a8f471-c243-4cc6-970d-ff7dc04ba385/1/gOUG_PHXz2SdOI6XXKJiUuIZ_Hw.mft
rsync://rpki.ripe.net/repository/DEFAULT/gOUG_PHXz2SdOI6XXKJiUuIZ_Hw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 01:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:09:e8:0c:db:67:d9:aa:0e:43:d3:38:d5:26:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80e506fcf1d7cf649d388e975ca26252e219fc7c
Validity
Not Before: Jan 2 06:31:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2faf8e06fe1c6ab4efa56f4c9af9b02c5fb4b3a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:39:36:16:54:32:2f:4f:32:35:fe:a9:7b:02:
af:08:9b:55:a2:bc:43:09:79:d8:64:5e:0d:5b:46:
f2:79:d3:90:7d:19:82:63:af:90:02:53:fe:1a:3b:
5f:70:f7:57:f4:65:3a:79:5c:0a:bd:58:ec:b1:6c:
52:3e:52:c0:fc:ca:92:62:74:a3:8d:0d:7f:96:d9:
87:80:9a:8a:85:56:b3:5c:cd:02:fc:0b:5a:c4:31:
0a:d7:c2:c3:8b:59:5c:f2:aa:62:1e:72:62:7f:f1:
cd:c6:14:4c:dd:13:bc:b4:40:bf:de:b7:0c:4b:fa:
f4:09:c3:10:7a:01:89:59:12:df:bf:b0:97:c3:04:
93:b5:e9:d9:26:88:69:c2:b7:28:a7:b6:7d:74:22:
67:82:7c:76:0c:99:24:1e:79:0f:a3:43:63:82:f6:
f3:60:90:c4:86:45:6c:ca:fb:31:6a:ae:6c:81:66:
aa:09:4f:7f:5b:ce:56:71:b6:42:d3:ee:d7:61:be:
dd:bb:32:79:e3:f6:90:86:20:dd:f5:5f:fc:f5:b4:
83:48:86:46:c5:87:86:56:de:46:f0:9d:86:23:32:
a3:d1:5a:ee:8d:44:8f:7f:f9:05:82:64:ff:f1:65:
ac:95:97:33:21:20:a2:00:96:b7:4d:06:b1:d0:82:
a7:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:AF:8E:06:FE:1C:6A:B4:EF:A5:6F:4C:9A:F9:B0:2C:5F:B4:B3:A6
X509v3 Authority Key Identifier:
keyid:80:E5:06:FC:F1:D7:CF:64:9D:38:8E:97:5C:A2:62:52:E2:19:FC:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gOUG_PHXz2SdOI6XXKJiUuIZ_Hw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a8f471-c243-4cc6-970d-ff7dc04ba385/1/L6-OBv4carTvpW9MmvmwLF-0s6Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a8f471-c243-4cc6-970d-ff7dc04ba385/1/gOUG_PHXz2SdOI6XXKJiUuIZ_Hw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.216.82.0/23
Signature Algorithm: sha256WithRSAEncryption
62:59:ae:c2:39:5d:20:6a:6c:ee:0a:df:81:aa:1a:5c:12:27:
48:8d:e9:69:b7:c0:4a:8a:f4:92:85:ec:27:cb:f4:d9:f4:ac:
95:d7:a2:6f:c4:31:9d:93:bd:cc:41:47:e1:ea:e1:71:c9:87:
b4:1c:db:38:2b:2c:93:0b:ec:e7:5f:24:7c:04:38:68:5e:eb:
4c:7c:5c:1c:9d:13:4e:57:a3:78:7a:35:5e:08:78:84:cf:cb:
33:d7:6f:b3:74:8c:b1:b9:00:2c:4f:b0:bd:d3:36:46:0b:73:
f9:fb:4b:6f:b5:fc:11:62:e9:6c:13:b2:17:a2:98:39:b7:ce:
04:9e:16:e7:39:97:c2:fb:83:d8:ad:61:94:41:3c:bb:60:b7:
d7:4e:f1:cd:55:ae:d3:c1:ed:4b:6b:cb:6c:54:3f:3f:fb:b7:
9d:da:d8:bb:76:b3:80:9b:a5:77:8e:f6:b2:0b:44:e2:d3:15:
79:3d:5d:ff:fe:b7:61:d3:78:c8:47:3a:8c:fe:64:1b:80:2c:
e5:66:e3:0b:9d:23:8e:bc:cb:cd:7b:8b:2f:8f:64:8e:ab:ce:
7a:b6:68:9f:c7:7f:7b:71:d3:2b:68:47:67:be:26:91:38:32:
0e:f7:1d:c8:9e:07:f1:51:5e:14:42:f9:d4:12:ed:f6:54:92:
85:25:67:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:19:02 2024 by rpki-client on console-fra.rpki-client.org