Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/63509c-5676-4eaf-99d4-eecd28e28e35/1/i6VGNw8lc-FYQpsHvgRSugY9Dqw.roa
File: i6VGNw8lc-FYQpsHvgRSugY9Dqw.roa (raw, json)
Hash identifier: 4KKxxwsg2BXZTAxXF5n7+WSSdboLSKVjBi8PnDJwjJg=
Subject key identifier: 8B:A5:46:37:0F:25:73:E1:58:42:9B:07:BE:04:52:BA:06:3D:0E:AC
Certificate issuer: /CN=ee8ba8824c5c8d207326a4a3ab893ebb8f5096ad
Certificate serial: 018CC26D8012E1FADEA9E9A172D1B05B11A3
Authority key identifier: EE:8B:A8:82:4C:5C:8D:20:73:26:A4:A3:AB:89:3E:BB:8F:50:96:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7ouogkxcjSBzJqSjq4k-u49Qlq0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/63509c-5676-4eaf-99d4-eecd28e28e35/1/i6VGNw8lc-FYQpsHvgRSugY9Dqw.roa
Signing time: Mon 01 Jan 2024 00:30:05 +0000
ROA not before: Mon 01 Jan 2024 00:30:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 139341
IP address blocks: 51.39.179.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/63509c-5676-4eaf-99d4-eecd28e28e35/1/7ouogkxcjSBzJqSjq4k-u49Qlq0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/63509c-5676-4eaf-99d4-eecd28e28e35/1/7ouogkxcjSBzJqSjq4k-u49Qlq0.mft
rsync://rpki.ripe.net/repository/DEFAULT/7ouogkxcjSBzJqSjq4k-u49Qlq0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Jun 2024 22:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:80:12:e1:fa:de:a9:e9:a1:72:d1:b0:5b:11:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee8ba8824c5c8d207326a4a3ab893ebb8f5096ad
Validity
Not Before: Jan 1 00:30:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8ba546370f2573e158429b07be0452ba063d0eac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:06:62:df:66:3e:d0:45:4c:c8:8f:25:31:e7:
29:4f:a9:61:16:6c:35:0f:a9:b6:26:8a:f7:b5:69:
ce:2c:90:16:10:85:43:b9:54:63:a3:0e:db:bd:20:
37:71:33:c4:8c:f8:e2:68:27:0a:c7:c6:fe:11:41:
2f:49:61:2b:66:91:5c:e5:6d:a8:ee:eb:df:31:ac:
d8:92:da:02:5f:45:6a:a3:88:cf:2d:b6:34:31:7a:
4a:f7:13:50:9f:da:b7:4e:76:76:19:91:c6:ea:b6:
be:20:4a:0f:57:e5:39:75:f9:02:9c:89:03:fd:ec:
1d:64:60:e5:7f:52:a3:72:d7:99:ae:a6:67:ef:e0:
b0:50:1e:56:2b:81:8d:c4:27:a9:06:b3:43:e3:18:
bf:72:99:11:94:a8:04:02:f6:19:da:51:ac:23:76:
b4:b2:96:ef:24:67:81:8a:12:82:b6:8b:53:f9:2c:
ce:39:55:71:53:19:9e:20:74:c9:9d:0b:85:a3:ef:
08:38:62:5f:86:71:a2:75:ad:9c:d2:31:ed:05:46:
6a:2b:ed:b2:f6:cc:a2:ec:13:13:d3:83:2d:a6:8c:
57:59:52:0e:e0:99:75:3b:6b:8b:5e:e0:0e:0b:11:
72:da:f2:85:c2:d8:5f:33:b4:77:15:df:2d:87:cc:
8f:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:A5:46:37:0F:25:73:E1:58:42:9B:07:BE:04:52:BA:06:3D:0E:AC
X509v3 Authority Key Identifier:
keyid:EE:8B:A8:82:4C:5C:8D:20:73:26:A4:A3:AB:89:3E:BB:8F:50:96:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7ouogkxcjSBzJqSjq4k-u49Qlq0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/63509c-5676-4eaf-99d4-eecd28e28e35/1/i6VGNw8lc-FYQpsHvgRSugY9Dqw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/63509c-5676-4eaf-99d4-eecd28e28e35/1/7ouogkxcjSBzJqSjq4k-u49Qlq0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.39.179.0/24
Signature Algorithm: sha256WithRSAEncryption
26:5f:a6:63:d1:2f:da:a7:d2:8f:7e:09:5f:56:25:f3:3f:67:
d2:34:7f:dc:f8:a4:28:4c:06:5e:1e:ae:28:16:64:cc:6e:2f:
25:ac:5b:68:15:f5:6c:db:b1:ee:c1:12:c1:81:bb:f9:6c:48:
33:d2:d3:b5:39:0a:49:9f:4d:6f:db:41:38:d8:f1:2e:ae:72:
3d:3d:59:42:72:d3:e5:15:dc:d6:6f:eb:c6:1d:7f:aa:a6:8b:
6d:08:1b:c7:c1:e3:69:4b:d6:fe:97:0c:98:df:52:34:af:c0:
cd:42:3b:73:90:5a:ee:4e:5f:b5:5d:52:56:6b:0c:a1:0b:ed:
26:48:78:33:7a:e3:5d:d0:a5:b3:d4:8e:9a:76:06:cb:04:82:
da:d0:12:c1:95:fa:a0:24:e5:2e:33:7a:f6:0f:11:54:b9:ba:
26:a8:2f:47:28:f6:e9:e2:07:76:c3:bd:12:e7:e3:63:a6:86:
9e:8c:8d:a6:92:99:b1:c7:33:1f:20:c5:32:56:a9:8a:d1:17:
de:0c:6f:ae:b2:5b:e0:61:20:49:5f:f9:bf:a7:52:c0:2d:57:
a7:9d:4a:af:23:26:5d:32:ac:c4:d5:2b:e0:54:ad:6a:57:cb:
9f:36:f1:07:13:93:26:1e:b6:6e:8e:8b:3f:f3:15:54:94:2a:
fd:68:e8:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 04:28:21 2024 by rpki-client on console-ams.rpki-client.org