Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/71e09c-28f3-4825-806f-a0dc354f4ca3/1/WW9JIejGWV8K4W-RMgqktlBEUN4.roa
File: WW9JIejGWV8K4W-RMgqktlBEUN4.roa (raw, json)
Hash identifier: k6O/MGWfQxNo9yqSFCDJxEggr7s/H+XEW+H5XJLUapA=
Subject key identifier: 59:6F:49:21:E8:C6:59:5F:0A:E1:6F:91:32:0A:A4:B6:50:44:50:DE
Certificate issuer: /CN=e9aab1446100a8fce03df19d755e06329ee24713
Certificate serial: 018CC56E0200E9E0F126ACBD0FE357646213
Authority key identifier: E9:AA:B1:44:61:00:A8:FC:E0:3D:F1:9D:75:5E:06:32:9E:E2:47:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6aqxRGEAqPzgPfGddV4GMp7iRxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/71e09c-28f3-4825-806f-a0dc354f4ca3/1/WW9JIejGWV8K4W-RMgqktlBEUN4.roa
Signing time: Mon 01 Jan 2024 14:29:30 +0000
ROA not before: Mon 01 Jan 2024 14:29:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206804
IP address blocks: 46.246.1.0/24 maxlen: 24
178.73.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/71e09c-28f3-4825-806f-a0dc354f4ca3/1/6aqxRGEAqPzgPfGddV4GMp7iRxM.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/71e09c-28f3-4825-806f-a0dc354f4ca3/1/6aqxRGEAqPzgPfGddV4GMp7iRxM.mft
rsync://rpki.ripe.net/repository/DEFAULT/6aqxRGEAqPzgPfGddV4GMp7iRxM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 30 Jun 2024 20:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:02:00:e9:e0:f1:26:ac:bd:0f:e3:57:64:62:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9aab1446100a8fce03df19d755e06329ee24713
Validity
Not Before: Jan 1 14:29:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=596f4921e8c6595f0ae16f91320aa4b6504450de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:7c:28:4b:3e:fb:b8:57:41:6e:17:95:33:70:
9f:83:33:a2:9c:91:e4:42:a5:a9:80:28:1e:92:41:
5a:82:10:d9:9c:4a:4e:d6:d5:a3:07:ea:e4:ef:e5:
11:06:9a:69:0a:e2:6c:72:16:2e:ef:19:98:0f:44:
b1:71:c7:9d:ab:c7:24:28:1e:22:7e:18:ff:54:37:
c8:ae:46:9e:23:23:7b:36:4a:3d:a4:78:5d:11:bd:
21:ee:ca:f3:85:01:1a:89:25:ab:15:07:dd:9c:08:
61:ce:3f:f4:6c:e3:f1:f3:68:9a:b9:04:eb:29:b8:
cd:41:a1:13:b7:a8:1c:b3:7a:20:a6:af:b2:5d:d2:
8f:b5:3a:cc:d5:57:a1:b2:28:2a:07:28:bc:15:21:
6a:dc:c6:53:30:aa:a8:20:0f:36:e9:71:cc:f6:fe:
78:41:23:17:68:5b:be:aa:99:10:ae:9e:fc:7b:a1:
6d:6b:ef:98:6f:60:1d:7c:d1:72:4e:70:07:6a:10:
03:a9:61:cf:15:75:39:e8:e2:9c:ce:b0:fd:ae:b1:
eb:fd:4a:3f:da:7d:6e:93:55:b4:cf:c7:a2:a3:8d:
79:af:77:58:01:da:b7:08:f5:a9:9c:94:c9:f1:3b:
84:ff:70:3a:f0:89:6d:16:38:cc:05:13:d3:bd:3f:
ae:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:6F:49:21:E8:C6:59:5F:0A:E1:6F:91:32:0A:A4:B6:50:44:50:DE
X509v3 Authority Key Identifier:
keyid:E9:AA:B1:44:61:00:A8:FC:E0:3D:F1:9D:75:5E:06:32:9E:E2:47:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6aqxRGEAqPzgPfGddV4GMp7iRxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/71e09c-28f3-4825-806f-a0dc354f4ca3/1/WW9JIejGWV8K4W-RMgqktlBEUN4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/71e09c-28f3-4825-806f-a0dc354f4ca3/1/6aqxRGEAqPzgPfGddV4GMp7iRxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.246.1.0/24
178.73.220.0/24
Signature Algorithm: sha256WithRSAEncryption
88:62:65:4e:d8:05:98:c7:4a:34:d1:1b:46:32:06:2e:ba:cb:
ac:06:73:51:a1:48:43:8d:c0:03:95:4f:a4:af:2d:b9:04:eb:
c3:7e:fb:58:61:fe:33:b5:32:5e:ae:df:28:f8:c2:80:e5:1c:
1b:45:bf:35:7f:ee:82:ff:25:00:9c:af:73:df:77:c8:6f:77:
16:ee:58:8b:8e:2b:1e:7d:0f:71:a5:bb:1e:75:b1:55:57:7d:
7d:4d:75:16:2f:f8:b9:dd:06:c4:44:41:ff:2c:c2:56:16:53:
c8:14:d4:06:79:22:d5:f2:cf:2c:8e:a4:24:17:9f:c0:51:5c:
e1:c7:72:45:d8:1a:10:6d:24:50:0b:fc:8d:db:1a:2c:5e:a7:
be:95:9c:63:b2:9f:f5:18:c0:fe:12:44:8c:7f:cb:b7:f3:5e:
2a:87:2a:72:c8:98:09:12:33:cf:80:b7:c1:b4:bc:5c:69:3a:
8b:6b:03:3f:dc:e0:9a:fe:84:6b:2a:65:7a:1b:25:ff:8a:ba:
9a:a1:6b:c1:89:02:fc:9b:39:75:2e:e6:74:6a:94:47:83:ee:
06:1c:5b:97:1c:39:3e:fe:d1:fc:e5:80:54:94:1a:37:dc:f2:
49:6e:ca:5c:24:1f:26:1a:7d:2c:16:3c:45:20:0e:51:c1:1b:
f5:72:42:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 30 02:52:49 2024 by rpki-client on console-fra.rpki-client.org