Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/1-6HZ9_UqoNNZFbRX6p6m5oYvnU4.roa
File: 1-6HZ9_UqoNNZFbRX6p6m5oYvnU4.roa (raw, json)
Hash identifier: wIYE+ej2RFWhSCAZtcxGa+qziZdl+yMJxQsZYDwy/ow=
Subject key identifier: FB:A1:D9:F7:F5:2A:A0:D3:59:15:B4:57:EA:9E:A6:E6:86:2F:9D:4E
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 018CCA29C8A9B1292911FFCE1ABAC882364E
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/1-6HZ9_UqoNNZFbRX6p6m5oYvnU4.roa
Signing time: Tue 02 Jan 2024 12:33:05 +0000
ROA not before: Tue 02 Jan 2024 12:33:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211421
IP address blocks: 213.176.121.0/24 maxlen: 24
62.60.196.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.mft
rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 08:39:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:c8:a9:b1:29:29:11:ff:ce:1a:ba:c8:82:36:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Jan 2 12:33:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fba1d9f7f52aa0d35915b457ea9ea6e6862f9d4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:5b:b8:a6:de:45:ba:32:92:6e:4d:94:7d:97:
bc:3e:9e:24:f0:be:64:fc:c1:87:57:ec:04:99:c0:
eb:b8:86:a7:58:03:01:ff:4a:b2:99:b3:84:a3:e1:
34:c9:c6:ac:21:11:88:ff:d6:c3:b4:21:6b:6d:df:
d1:d7:26:1a:a8:e5:2b:0e:12:d1:b5:8a:79:d9:0b:
7f:f5:fd:7b:87:3f:21:bf:32:34:c6:3a:51:17:db:
8f:26:cf:3d:05:e6:5d:01:15:a2:d7:b5:d0:8c:ea:
cb:9e:9f:62:12:1e:e7:b5:03:da:21:a8:e5:15:d1:
3f:8c:25:67:68:5c:4a:36:cf:27:57:a3:e4:28:dc:
09:6e:23:7e:9f:9c:73:dd:54:eb:30:1e:f0:8d:2b:
47:84:9c:a5:e9:ee:7c:d1:b6:97:7e:ff:7a:72:47:
e8:1d:70:53:c3:c0:9a:56:c6:78:b0:98:bc:16:fa:
15:ad:2c:ed:73:32:67:66:cd:cb:96:10:10:ca:53:
a9:d8:fb:33:73:ed:3a:c4:b6:28:f8:c2:7b:de:b4:
df:32:04:0f:d6:80:f7:67:e2:64:e8:b2:15:5c:50:
05:19:fa:e4:9d:86:e3:41:63:96:3e:bc:33:81:4d:
14:f4:24:31:66:7e:a6:3e:74:66:e2:09:ce:61:0b:
e7:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:A1:D9:F7:F5:2A:A0:D3:59:15:B4:57:EA:9E:A6:E6:86:2F:9D:4E
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/1-6HZ9_UqoNNZFbRX6p6m5oYvnU4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.196.0/22
213.176.121.0/24
Signature Algorithm: sha256WithRSAEncryption
08:64:e7:98:57:76:bb:04:da:21:0e:ec:04:69:84:c5:41:44:
f8:2f:2e:24:4f:d2:62:01:8e:fc:32:4f:af:84:08:83:bf:ea:
f3:a9:c4:e4:94:2d:d2:6c:95:b4:c4:3d:1d:8e:6d:c9:41:45:
0c:77:5a:ca:f1:e0:04:dd:05:77:ff:19:ca:71:80:c6:39:2c:
03:4b:78:84:9b:83:64:92:66:88:cf:75:98:4c:44:b7:40:be:
82:1c:ed:56:3a:fe:60:b5:ec:39:48:bc:c9:fe:10:fe:d8:c5:
a7:4e:74:47:c3:11:e1:eb:dd:cd:bf:27:49:9e:6a:ec:00:39:
bb:61:8d:ba:6c:74:30:58:72:d9:ff:3d:0c:d2:fe:28:49:e2:
c6:fe:f9:9e:79:bf:a1:9b:70:2d:8b:ce:98:99:8b:34:dd:51:
34:f2:e4:5d:39:27:da:3d:e7:dd:3a:f4:13:7f:54:df:69:11:
e3:cc:5e:80:14:e6:28:a1:0a:b6:01:fd:de:ee:2f:8b:2a:9b:
7d:01:f1:90:4f:d9:20:3f:c5:09:6b:1a:b8:d6:1b:59:1f:42:
65:ff:70:e9:55:9d:04:8e:16:d8:4d:9e:b1:25:99:c6:92:be:
1f:a0:47:1e:7c:10:15:76:8e:81:09:c2:fa:da:85:44:55:e8:
57:1d:79:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 11:42:20 2024 by rpki-client on console-fra.rpki-client.org