Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/6htqL7tsRelm-4hesGqnaGYDhxQ.roa
File: 6htqL7tsRelm-4hesGqnaGYDhxQ.roa (raw, json)
Hash identifier: /NNjDDaomo+niZbrG4Bt6ZN+YqAifyLB853ePdDVghc=
Subject key identifier: EA:1B:6A:2F:BB:6C:45:E9:66:FB:88:5E:B0:6A:A7:68:66:03:87:14
Certificate issuer: /CN=3af09ba33b5ae581b0d29323249314f76aa10511
Certificate serial: 018CC3B73016E6CE3DE8EAC17818D103FE8E
Authority key identifier: 3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/6htqL7tsRelm-4hesGqnaGYDhxQ.roa
Signing time: Mon 01 Jan 2024 06:30:11 +0000
ROA not before: Mon 01 Jan 2024 06:30:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15422
IP address blocks: 217.109.67.0/24 maxlen: 24
194.206.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Jun 2024 21:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:30:16:e6:ce:3d:e8:ea:c1:78:18:d1:03:fe:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3af09ba33b5ae581b0d29323249314f76aa10511
Validity
Not Before: Jan 1 06:30:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ea1b6a2fbb6c45e966fb885eb06aa76866038714
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:02:f8:c2:6a:29:7d:33:bf:47:73:42:0f:ca:
b8:92:d5:1d:57:57:da:04:6e:75:1c:2b:5c:4c:f4:
33:32:5b:53:d8:69:87:88:92:ef:39:38:3f:14:b2:
54:e1:99:31:72:e0:98:e6:45:81:b4:ae:f4:c1:c6:
cd:0d:37:af:8b:7a:ca:86:30:9d:67:1e:99:e5:d1:
d5:7f:b0:a2:ff:1a:55:02:28:c5:f1:a9:00:2d:c0:
c8:fc:72:6c:fa:87:21:09:28:43:e3:a9:0e:f0:c2:
4d:fe:6f:05:ed:09:5f:83:10:61:fa:a2:f7:52:c1:
ec:ea:87:21:fe:17:c4:f6:bc:e6:56:11:6c:8c:54:
16:74:20:d6:59:88:57:97:f7:c8:63:13:f6:9f:4f:
2c:b9:7b:c7:8d:57:33:54:50:87:a4:8b:8e:3c:62:
83:86:6b:0a:07:58:db:2c:f5:5f:64:e4:2d:65:2e:
4f:97:67:0d:0d:6c:b2:e5:b2:60:f0:70:7d:89:62:
29:32:38:c6:89:1b:3b:02:87:ad:86:5e:96:ae:81:
20:a8:42:e5:26:68:79:3a:fe:ec:ff:c0:9e:2f:63:
fd:1f:a5:e4:f0:26:d9:4f:f9:f0:e5:7e:af:af:a5:
4e:10:c9:36:08:05:a0:0b:46:38:4d:14:b1:58:8b:
b6:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:1B:6A:2F:BB:6C:45:E9:66:FB:88:5E:B0:6A:A7:68:66:03:87:14
X509v3 Authority Key Identifier:
keyid:3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/6htqL7tsRelm-4hesGqnaGYDhxQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.206.254.0/24
217.109.67.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:4f:c5:86:74:bb:7a:ee:09:82:18:f5:6b:61:ed:16:9d:c5:
c8:98:15:1d:e7:a0:1d:45:c9:9c:9a:b9:51:72:2c:e3:16:57:
bb:9d:63:24:07:da:f9:fd:e9:07:c5:33:83:05:05:90:28:c8:
3d:dc:3e:cd:72:f6:66:8d:50:86:62:18:59:69:ea:5a:01:15:
ca:62:52:d3:ed:cd:0e:b9:bb:8d:b3:a2:5a:e6:67:cf:35:0d:
b5:ff:31:e6:3d:fc:40:60:c2:ea:25:3e:28:d6:d7:13:bf:d6:
d2:75:20:64:25:a6:99:fc:da:af:8d:7b:69:97:23:4d:36:80:
ce:39:76:9a:cb:c2:9f:32:36:95:38:95:d0:b0:92:43:f1:ae:
d3:c8:99:41:e6:e7:f9:d6:46:c1:99:a5:2f:1b:3f:82:44:52:
47:45:06:cc:0f:89:bd:3d:db:ea:41:ce:20:f2:43:4a:7e:d9:
ff:b3:53:11:b4:ca:f5:94:8a:31:3b:92:d7:c2:cf:27:0c:3e:
c3:f7:2c:9b:29:4b:3e:65:d8:97:8a:43:5b:8f:21:66:22:20:
3e:bf:1d:5f:50:c7:34:9a:d2:ab:de:07:86:d9:1a:12:ad:e4:
a1:3a:04:1a:a7:f8:80:3a:f0:20:27:34:93:c9:cd:07:10:97:
db:66:f1:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 05:04:17 2024 by rpki-client on console-ams.rpki-client.org