Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/6N8T1i_ABF23vIEq3W9F_qIZQZM.roa
File: 6N8T1i_ABF23vIEq3W9F_qIZQZM.roa (raw, json)
Hash identifier: lyj1NVEG1KCjARsPfuH/JZs46GFCSi7IlMEf1wgLAMY=
Subject key identifier: E8:DF:13:D6:2F:C0:04:5D:B7:BC:81:2A:DD:6F:45:FE:A2:19:41:93
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0192667EF668D1C636D5A4F40D0B2EB3D008
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/6N8T1i_ABF23vIEq3W9F_qIZQZM.roa
Signing time: Mon 07 Oct 2024 10:20:49 +0000
ROA not before: Mon 07 Oct 2024 10:20:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 53356
IP address blocks: 193.124.44.0/24 maxlen: 24
195.133.17.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 23:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:66:7e:f6:68:d1:c6:36:d5:a4:f4:0d:0b:2e:b3:d0:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Oct 7 10:20:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e8df13d62fc0045db7bc812add6f45fea2194193
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:5f:b7:cd:f8:9a:03:2b:68:61:5d:50:fb:50:
61:bb:a7:6f:02:b4:d3:cd:4b:0b:97:44:a5:7f:35:
24:af:54:5d:d4:49:a3:24:52:d6:6c:7e:c9:e6:a5:
50:03:60:f3:8e:2e:17:0e:1d:1a:9a:73:79:7b:f3:
4c:0b:50:c4:4f:96:95:ea:80:10:c4:52:49:b3:78:
87:6f:65:f1:60:7e:93:ec:75:cf:dd:d6:de:be:93:
34:0c:88:28:8f:03:8d:95:37:16:0d:1c:50:d9:ee:
67:cb:2b:51:77:01:32:c3:59:e6:8c:f4:bc:88:c5:
b6:67:90:a8:e6:93:e5:68:85:b6:11:72:ae:82:79:
64:96:57:35:02:72:66:aa:74:aa:cc:01:30:be:0c:
2a:5a:6b:a2:b6:db:ca:c6:aa:c0:ce:83:5b:59:c4:
95:55:2f:aa:ac:35:88:ff:7e:43:2a:bf:5f:bb:1b:
a5:3b:d5:54:f4:7a:a3:61:39:88:8d:2d:21:7b:81:
58:d0:22:06:28:c0:a5:e6:97:95:28:d7:f6:a4:3a:
4b:17:73:62:ee:64:6d:ca:0d:7e:81:ff:44:d9:ac:
2e:c1:26:a3:81:8f:30:fe:41:df:30:79:5f:7c:a6:
0a:4c:21:9d:93:ff:2d:a8:fb:98:3c:4e:dd:1e:9e:
a0:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:DF:13:D6:2F:C0:04:5D:B7:BC:81:2A:DD:6F:45:FE:A2:19:41:93
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/6N8T1i_ABF23vIEq3W9F_qIZQZM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.44.0/24
195.133.17.0/24
Signature Algorithm: sha256WithRSAEncryption
70:f7:76:c1:40:60:cb:59:e6:80:6c:49:f7:e0:69:21:28:8a:
bc:de:19:f6:a7:90:61:ec:b7:9b:8e:02:6a:0b:28:dd:28:84:
1d:10:f5:cb:76:b6:92:2d:0e:8d:80:a3:97:7f:44:41:e5:1c:
1e:2a:10:17:27:5d:df:da:6e:84:67:70:a9:13:ce:19:29:8f:
b6:32:8d:c7:1e:d9:2a:22:32:f4:fe:e2:d3:78:c6:3a:a9:ac:
6a:f2:ea:3e:09:7f:27:0e:38:6d:66:ec:1a:16:23:f0:b1:a3:
23:5d:aa:27:7d:c0:68:38:7e:cd:f8:fd:63:96:6e:f6:dc:cc:
27:75:b8:57:1f:ef:07:8f:98:7f:c8:68:14:91:f2:b7:1d:1d:
6b:07:b4:51:f8:4f:d7:12:98:d8:2e:1f:91:19:18:51:aa:7a:
d6:5d:58:b5:09:47:ba:41:d8:5e:5b:b2:de:ac:8f:8f:71:2f:
a9:99:6a:0a:e6:c1:c4:20:e2:f0:6d:28:f5:f2:85:28:7c:04:
27:e5:de:79:4a:b6:3d:b2:1f:98:10:f0:11:f1:60:ce:04:57:
f9:fa:d6:13:59:69:fe:03:6c:df:5e:cf:b2:ba:d8:8c:b6:6b:
f7:ae:c2:f0:53:ee:1c:68:a8:9e:61:84:4f:6f:a7:84:83:69:
2a:cc:61:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:51:55 2024 by rpki-client on console-ams.rpki-client.org