Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/192bba-1a74-4ba4-90d6-72c4c4b804a7/1/6E_qFEnC7CGbjawkLQ5uJf_n1vE.roa
File: 6E_qFEnC7CGbjawkLQ5uJf_n1vE.roa (raw, json)
Hash identifier: drkG99qMNV7K8ZIyUQVMtp3yEP90A5j9xsoduxlVds8=
Subject key identifier: E8:4F:EA:14:49:C2:EC:21:9B:8D:AC:24:2D:0E:6E:25:FF:E7:D6:F1
Certificate issuer: /CN=83375b43ae8a53d48c888671e67fc17bf27f2b7e
Certificate serial: 018CC5DCC9B41C73B5FE406C184E03F3830D
Authority key identifier: 83:37:5B:43:AE:8A:53:D4:8C:88:86:71:E6:7F:C1:7B:F2:7F:2B:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gzdbQ66KU9SMiIZx5n_Be_J_K34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/192bba-1a74-4ba4-90d6-72c4c4b804a7/1/6E_qFEnC7CGbjawkLQ5uJf_n1vE.roa
Signing time: Mon 01 Jan 2024 16:30:30 +0000
ROA not before: Mon 01 Jan 2024 16:30:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49702
IP address blocks: 185.109.112.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/192bba-1a74-4ba4-90d6-72c4c4b804a7/1/gzdbQ66KU9SMiIZx5n_Be_J_K34.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/192bba-1a74-4ba4-90d6-72c4c4b804a7/1/gzdbQ66KU9SMiIZx5n_Be_J_K34.mft
rsync://rpki.ripe.net/repository/DEFAULT/gzdbQ66KU9SMiIZx5n_Be_J_K34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 21:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:c9:b4:1c:73:b5:fe:40:6c:18:4e:03:f3:83:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83375b43ae8a53d48c888671e67fc17bf27f2b7e
Validity
Not Before: Jan 1 16:30:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e84fea1449c2ec219b8dac242d0e6e25ffe7d6f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:23:83:11:1b:74:3a:6e:51:fc:34:c5:a9:0d:
26:e9:5b:9d:53:b0:c5:a5:67:89:6f:a9:b4:96:15:
5e:b4:18:cc:62:45:64:c6:a3:cd:61:50:4e:08:99:
5d:c7:6e:9d:d1:33:d0:c4:70:e8:7d:c7:fe:dc:0c:
3e:69:4c:d8:3a:ce:aa:3b:07:3b:af:aa:e2:7b:8b:
31:46:26:91:de:d8:e9:50:93:53:39:4b:b8:39:8e:
3d:5e:e9:0f:15:bb:f5:bf:51:8f:8f:10:59:2e:60:
b7:b8:cd:58:a2:d0:6f:5d:91:66:e4:ed:22:b9:10:
3f:12:8f:4b:3b:cf:a5:bd:0a:56:3f:28:74:ca:ff:
b2:c7:a3:23:2c:ed:28:72:41:ab:ea:ce:8c:dd:1e:
6e:e5:b5:9f:17:6a:af:1c:b3:75:c6:86:55:22:b8:
53:bf:62:15:f8:10:59:75:39:2c:6c:ae:92:53:e3:
b6:53:13:db:24:fa:e6:9e:49:a1:99:99:3d:d0:2a:
b4:e5:23:92:80:88:c4:8d:75:58:58:1e:56:bd:3d:
51:70:9d:a3:b9:d6:dd:ae:51:a4:c2:9b:f5:03:b7:
41:9e:f2:f3:37:b8:80:d6:71:16:72:2b:f4:0a:75:
ea:9a:c4:5d:73:5b:b7:45:90:40:d3:bd:87:6c:e9:
3c:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:4F:EA:14:49:C2:EC:21:9B:8D:AC:24:2D:0E:6E:25:FF:E7:D6:F1
X509v3 Authority Key Identifier:
keyid:83:37:5B:43:AE:8A:53:D4:8C:88:86:71:E6:7F:C1:7B:F2:7F:2B:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzdbQ66KU9SMiIZx5n_Be_J_K34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/192bba-1a74-4ba4-90d6-72c4c4b804a7/1/6E_qFEnC7CGbjawkLQ5uJf_n1vE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/192bba-1a74-4ba4-90d6-72c4c4b804a7/1/gzdbQ66KU9SMiIZx5n_Be_J_K34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.109.112.0/22
Signature Algorithm: sha256WithRSAEncryption
13:ad:ce:ad:2c:05:85:eb:83:33:cc:10:e0:ba:56:ef:ff:60:
70:13:c5:5c:f0:41:ca:4a:66:c1:7d:54:d4:93:db:a6:7a:e7:
85:36:5c:6c:9e:d6:ed:b7:97:21:b7:78:b5:1f:0c:cf:6b:5d:
0e:44:25:88:d3:c2:89:af:83:41:65:de:fe:18:af:76:65:60:
87:6c:b9:67:6b:11:0f:8d:d8:4c:da:46:ab:8d:92:99:53:c9:
d7:87:87:14:df:ff:99:50:ae:9b:eb:8a:43:c4:82:a0:aa:a9:
7f:48:c2:10:80:86:3a:c2:43:e0:ab:88:cd:4d:d5:cc:d3:44:
b2:4e:17:4a:65:83:33:0d:50:f3:34:1f:86:bc:1d:93:78:a8:
8c:82:11:c8:6e:77:ca:6f:1c:bb:cc:34:a6:76:bd:39:9b:5c:
f5:83:f6:36:e4:2c:ec:68:4f:41:d4:ed:6e:25:d1:ec:69:79:
40:7e:6b:44:2f:3a:e5:60:45:6c:a5:fe:a7:bf:f0:1a:fe:5d:
b7:6f:04:34:d3:4e:3c:b2:fb:05:19:61:b9:b7:fc:07:46:64:
1d:9a:ae:f0:51:71:07:0f:46:dd:1d:ac:d4:8f:14:4e:b8:4f:
01:36:dd:76:5a:68:87:9e:b3:eb:41:c1:70:4c:28:27:99:9e:
12:45:93:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 01:35:26 2024 by rpki-client on console-ams.rpki-client.org