Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/b903e9-6d09-4e20-b926-3692f96e33a9/1/likE5tLfDqbmvsWyIO5Yqt8phy8.roa
File: likE5tLfDqbmvsWyIO5Yqt8phy8.roa (raw, json)
Hash identifier: mc81qngIkjQ4iHS+3FAc6KDwb9oSOYGB1Hthn6oa5hs=
Subject key identifier: 96:29:04:E6:D2:DF:0E:A6:E6:BE:C5:B2:20:EE:58:AA:DF:29:87:2F
Certificate issuer: /CN=6ba26b56cee97f6020941bb17c6a7c6cea0f814a
Certificate serial: 018D6C0310CF27F8CD93C6F941F2737F0B97
Authority key identifier: 6B:A2:6B:56:CE:E9:7F:60:20:94:1B:B1:7C:6A:7C:6C:EA:0F:81:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a6JrVs7pf2AglBuxfGp8bOoPgUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/b903e9-6d09-4e20-b926-3692f96e33a9/1/likE5tLfDqbmvsWyIO5Yqt8phy8.roa
Signing time: Fri 02 Feb 2024 22:49:16 +0000
ROA not before: Fri 02 Feb 2024 22:49:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210779
IP address blocks: 176.105.253.0/24 maxlen: 24
176.105.255.0/24 maxlen: 24
2a0d:c740:a::/48 maxlen: 48
2a0d:c740:f::/48 maxlen: 48
2a0d:c740:2c::/48 maxlen: 48
2a0d:c740:3c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/b903e9-6d09-4e20-b926-3692f96e33a9/1/a6JrVs7pf2AglBuxfGp8bOoPgUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/b903e9-6d09-4e20-b926-3692f96e33a9/1/a6JrVs7pf2AglBuxfGp8bOoPgUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/a6JrVs7pf2AglBuxfGp8bOoPgUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:6c:03:10:cf:27:f8:cd:93:c6:f9:41:f2:73:7f:0b:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ba26b56cee97f6020941bb17c6a7c6cea0f814a
Validity
Not Before: Feb 2 22:49:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=962904e6d2df0ea6e6bec5b220ee58aadf29872f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:7d:eb:b6:d7:24:9d:fb:16:6f:a0:b0:31:3e:
68:de:2e:83:d0:16:2e:40:9b:03:68:bd:67:cf:51:
48:06:37:44:1a:6c:fe:f6:91:40:f1:40:f5:0f:87:
38:d5:7f:f9:43:67:b1:7c:02:c7:39:c9:0d:5e:50:
e7:02:15:7b:88:bb:5b:5c:ad:a7:03:80:6f:f6:e7:
46:4a:ea:51:b2:1a:2f:87:63:46:38:bf:d4:85:de:
eb:2a:c3:4f:d6:61:ea:8b:4d:56:10:09:39:78:ab:
f0:2e:f6:50:4d:83:4f:14:2b:90:74:76:9e:67:4c:
70:1c:1f:e8:e3:3e:85:d5:1c:5b:5e:35:34:73:27:
4c:73:a4:cc:f0:76:81:3d:11:06:d9:ee:94:da:20:
c3:cc:01:11:19:ca:1e:cd:8e:69:b8:37:ed:e3:f2:
4a:43:86:cc:df:96:20:82:70:b1:6f:c7:00:d0:92:
9a:54:0f:55:21:9a:84:8f:0c:32:05:dd:d2:53:4f:
65:bc:54:bc:6f:94:06:16:2d:66:43:08:0b:11:dc:
43:e8:e1:d6:76:90:f9:07:8d:56:86:ab:e3:81:a4:
47:bf:e1:d2:42:6d:85:1f:6e:b1:7b:96:4e:7a:5c:
01:75:12:1d:c4:d2:e1:91:68:c0:49:37:13:04:17:
00:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:29:04:E6:D2:DF:0E:A6:E6:BE:C5:B2:20:EE:58:AA:DF:29:87:2F
X509v3 Authority Key Identifier:
keyid:6B:A2:6B:56:CE:E9:7F:60:20:94:1B:B1:7C:6A:7C:6C:EA:0F:81:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6JrVs7pf2AglBuxfGp8bOoPgUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b903e9-6d09-4e20-b926-3692f96e33a9/1/likE5tLfDqbmvsWyIO5Yqt8phy8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b903e9-6d09-4e20-b926-3692f96e33a9/1/a6JrVs7pf2AglBuxfGp8bOoPgUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.105.253.0/24
176.105.255.0/24
IPv6:
2a0d:c740:a::/48
2a0d:c740:f::/48
2a0d:c740:2c::/48
2a0d:c740:3c::/48
Signature Algorithm: sha256WithRSAEncryption
89:63:23:f1:dd:6f:dd:a7:a9:d4:84:03:1c:6c:dd:19:49:6d:
c7:0a:72:48:4d:0f:e2:7d:b1:f3:b8:7d:b7:21:a8:af:e4:6f:
5a:de:91:fb:d0:78:59:a4:3b:19:cf:6b:1b:be:f5:7a:a3:0c:
a0:8d:69:bd:14:61:d5:ff:7a:37:1a:47:1f:15:a1:61:59:a9:
a3:30:29:f6:28:29:e2:af:63:97:38:b9:ae:32:13:c0:01:90:
27:0c:d1:57:88:c9:62:a8:35:80:04:61:ef:77:1a:ef:e8:7c:
2c:b1:16:1d:e1:3d:9e:e3:eb:18:80:e5:75:6f:b8:20:ad:8a:
4d:83:3f:1c:16:e1:df:9f:6a:be:04:c6:88:c1:9c:43:30:be:
e4:a6:fb:77:76:3c:26:a5:fe:bd:e7:a0:f7:c4:77:47:ff:79:
86:99:8c:a3:b9:e6:3d:dd:89:bc:05:e4:82:38:48:d9:f5:34:
c5:dd:8b:cd:25:36:1b:94:38:7e:cd:2c:fa:c6:0a:77:91:ac:
fe:48:c4:0e:c5:b6:ca:b5:64:b2:bf:a6:5c:70:90:99:8e:d3:
62:7d:48:41:bf:65:7a:d0:ba:f8:6c:69:15:23:0b:b4:bb:9c:
81:b6:04:5a:f2:39:eb:2a:49:41:f1:91:1f:2f:2c:c4:fe:70:
21:d6:9c:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 06:42:11 2024 by rpki-client on console-ams.rpki-client.org