Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/c6NlzaPaJjE9d3Upl1SsnnDAVKs.roa
File: c6NlzaPaJjE9d3Upl1SsnnDAVKs.roa (raw, json)
Hash identifier: Lo7EcrrAGADtVHFg0U7vmMDBN/ZmmjcXFXoFYIdLRiU=
Subject key identifier: 73:A3:65:CD:A3:DA:26:31:3D:77:75:29:97:54:AC:9E:70:C0:54:AB
Certificate issuer: /CN=a4bcc12afa4f05739f45f605e221c64c3c0d2ed6
Certificate serial: 018CC349527AF2ACF418681399E9C2750C5E
Authority key identifier: A4:BC:C1:2A:FA:4F:05:73:9F:45:F6:05:E2:21:C6:4C:3C:0D:2E:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pLzBKvpPBXOfRfYF4iHGTDwNLtY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/c6NlzaPaJjE9d3Upl1SsnnDAVKs.roa
Signing time: Mon 01 Jan 2024 04:30:11 +0000
ROA not before: Mon 01 Jan 2024 04:30:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197254
IP address blocks: 46.229.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.mft
rsync://rpki.ripe.net/repository/DEFAULT/pLzBKvpPBXOfRfYF4iHGTDwNLtY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 19:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:52:7a:f2:ac:f4:18:68:13:99:e9:c2:75:0c:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4bcc12afa4f05739f45f605e221c64c3c0d2ed6
Validity
Not Before: Jan 1 04:30:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=73a365cda3da26313d7775299754ac9e70c054ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e5:bf:77:b4:61:2c:ed:8d:0d:37:4c:15:7b:
f2:3f:ac:03:1a:16:d4:6e:99:44:bc:50:ef:58:07:
64:68:58:09:90:f8:c5:b1:01:db:02:33:03:ce:14:
dc:0f:6f:3a:10:29:6c:79:1a:68:f2:04:bf:29:da:
53:ad:64:be:5a:85:a3:55:bf:8e:7c:f9:4b:44:7f:
34:dd:4b:9e:e6:25:6f:1b:a7:3e:1b:83:7d:da:18:
d5:41:c1:9e:6a:ed:a0:9c:94:ac:2d:47:63:03:92:
e1:54:bf:65:29:96:82:ae:3f:51:19:c8:63:59:8f:
db:c1:98:8f:7a:38:ac:eb:46:7b:b1:29:80:3e:bc:
37:91:e4:80:83:90:f7:54:f4:2f:4f:da:44:56:d0:
b3:c9:f5:d5:1f:ac:42:8a:aa:fd:05:fc:01:05:a8:
e2:67:97:6d:a9:02:a5:ea:a9:7a:be:c0:5e:ac:4a:
d4:fc:27:f8:2f:e6:97:52:d5:7f:f6:da:f4:83:e7:
19:79:4c:40:37:4a:a2:12:05:6b:2c:5a:34:88:9a:
d4:d1:69:53:c7:43:6d:2a:8c:b0:d0:06:ff:dc:f0:
18:da:36:bf:5c:e0:6d:12:c0:f8:7d:66:1d:ba:5d:
a5:84:fd:b6:b4:08:58:5a:dc:a5:69:a7:cf:a2:23:
4f:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:A3:65:CD:A3:DA:26:31:3D:77:75:29:97:54:AC:9E:70:C0:54:AB
X509v3 Authority Key Identifier:
keyid:A4:BC:C1:2A:FA:4F:05:73:9F:45:F6:05:E2:21:C6:4C:3C:0D:2E:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLzBKvpPBXOfRfYF4iHGTDwNLtY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/c6NlzaPaJjE9d3Upl1SsnnDAVKs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.229.61.0/24
Signature Algorithm: sha256WithRSAEncryption
86:7f:17:21:46:d7:11:88:15:3f:97:b8:92:be:48:02:b4:b5:
e3:bf:cb:a5:37:7d:87:9e:01:d8:c7:a5:0e:8b:9c:cd:a4:c5:
a9:28:0d:7d:77:bb:e5:94:9b:bc:32:92:75:9f:7a:35:dc:38:
06:f7:5e:c4:62:ed:2a:e6:96:f8:ab:22:b9:4b:0e:67:e7:dc:
dd:f0:ef:5b:a4:31:fe:1f:fe:55:11:36:2a:5a:15:28:5d:c7:
5b:9b:c9:56:a8:fa:d0:c3:d6:28:3b:c0:70:11:1a:7f:2b:a6:
0d:03:57:a7:50:64:a9:26:ce:6c:78:f0:c9:cd:3e:05:73:27:
c0:9a:0a:20:df:45:64:c0:40:6f:91:5c:8a:88:c0:e9:9e:ae:
cf:94:81:f3:d5:9b:89:1e:f8:34:06:f1:8c:10:1a:7c:2b:08:
13:61:f8:3a:91:a0:78:59:38:d4:11:8c:0e:1a:7e:d1:61:cd:
24:57:8f:ed:f3:32:de:99:4a:08:61:2c:6a:b3:6e:1b:17:9d:
0e:cf:52:54:0e:92:87:54:6e:02:ed:12:64:f0:28:41:b8:b6:
1f:dc:84:b5:d4:f9:b4:ad:f8:66:41:8d:d8:7d:1c:f0:07:b1:
e6:46:01:fb:85:0e:1e:91:9a:6a:20:27:2f:41:9b:99:9c:1d:
dc:03:14:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 01:05:26 2024 by rpki-client on console-fra.rpki-client.org