Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS6894.roa
File: AS6894.roa (raw, json)
Hash identifier: tRrTOkhHFaRm8E9j5ciWicfSAMTPH3wlaNtOcIvbKdg=
Subject key identifier: 4A:02:A2:36:4F:EE:2E:A2:F1:2E:69:46:AC:D5:7F:92:E8:6D:35:9C
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 32CC3ADD13F031ABC901D2AAC2BFD4CB75069FD0
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS6894.roa
Signing time: Mon 27 Nov 2023 12:38:37 +0000
ROA not before: Mon 27 Nov 2023 12:33:37 +0000
ROA not after: Mon 25 Nov 2024 12:38:37 +0000
asID: 6894
IP address blocks: 91.206.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 01:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:cc:3a:dd:13:f0:31:ab:c9:01:d2:aa:c2:bf:d4:cb:75:06:9f:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Nov 27 12:33:37 2023 GMT
Not After : Nov 25 12:38:37 2024 GMT
Subject: CN=4A02A2364FEE2EA2F12E6946ACD57F92E86D359C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:67:cc:4d:27:62:af:b6:70:d1:ed:10:aa:ac:
e1:20:36:00:69:00:e6:c1:5f:16:ed:07:23:41:42:
30:9c:f8:f2:fb:ab:5f:d8:bf:3f:e3:74:60:05:38:
31:50:3f:1b:27:8a:1f:3e:5a:e5:21:bc:72:26:24:
e2:8c:6d:25:9c:82:0a:a3:06:8d:80:aa:ca:8f:d5:
a5:11:e9:7a:2a:a2:f8:0d:54:75:f2:dd:17:5e:37:
84:69:78:e3:19:a2:77:3e:30:75:5f:f9:62:f9:46:
99:b2:23:0c:2b:8c:39:4a:f9:23:55:df:0c:e3:46:
8a:2c:65:63:5d:8b:3d:eb:35:b4:57:29:4b:1a:48:
09:39:18:74:25:9d:ac:37:55:c2:46:f7:52:65:94:
9b:43:a1:02:03:b8:b8:40:9a:e8:17:4f:e0:d1:05:
23:0d:a3:05:33:bf:72:ba:a9:9f:4d:6e:52:d4:78:
67:6d:c4:dc:97:32:19:b7:11:61:4e:86:7f:34:4c:
8b:6c:ff:3a:3d:05:9f:ae:96:78:65:1a:02:60:17:
9c:75:0a:ad:f0:0d:b3:da:bc:6c:21:05:45:4d:10:
3f:52:a2:35:5f:3c:92:cf:c5:a8:18:a7:9c:d5:f5:
61:be:63:82:7c:13:63:42:83:90:83:55:60:b8:39:
71:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:02:A2:36:4F:EE:2E:A2:F1:2E:69:46:AC:D5:7F:92:E8:6D:35:9C
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS6894.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.206.2.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:86:74:de:9b:05:0b:25:8b:23:7a:14:50:60:e8:3c:29:71:
0e:04:ae:c2:94:e5:5e:74:d8:d4:09:80:c6:3e:03:44:94:ad:
71:65:e9:2a:78:ef:a7:89:b1:cb:ee:8c:e1:15:a7:f2:6a:0a:
49:43:f2:ca:59:0c:9d:cb:eb:7f:a6:75:c3:67:22:91:8e:cc:
37:50:26:c5:54:26:f6:c3:46:8c:49:02:68:80:2b:c3:ac:4d:
0d:64:52:65:50:f6:f6:6e:c7:ed:e7:a4:dc:8c:33:ba:e0:6d:
18:77:35:2d:a1:ee:90:16:5d:16:02:bd:b5:46:04:8e:5f:03:
fd:c5:1f:7e:ea:4f:f2:c6:d3:52:84:ca:5e:4f:c0:8d:49:ee:
c4:99:a0:92:f0:01:44:04:cf:60:9b:c9:fe:86:2f:f8:dc:71:
d2:52:19:c4:9d:23:d8:50:90:85:4b:11:f3:30:9d:2f:8a:7d:
43:57:07:12:4e:c6:c0:94:14:c2:17:83:9d:1c:5b:cb:a2:7c:
9c:ab:b0:1e:0b:4e:1b:84:36:73:b1:8f:16:ad:e6:e4:42:c3:
b4:7f:53:9d:e3:54:6d:1e:be:7b:76:ad:9c:d5:18:8a:8f:11:
c7:e0:41:16:22:26:1e:7a:f6:85:98:bc:c8:83:72:23:41:95:
ac:d8:d6:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 07:23:12 2024 by rpki-client on console-ams.rpki-client.org