Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/6Pu_1k3s11zYfwblPWBjKjgOh6Y.roa
File: 6Pu_1k3s11zYfwblPWBjKjgOh6Y.roa (raw, json)
Hash identifier: qW8BuAv46sUhwKyLGaO/MD9Ma/S40t2lcedk3o6KpCQ=
Subject key identifier: E8:FB:BF:D6:4D:EC:D7:5C:D8:7F:06:E5:3D:60:63:2A:38:0E:87:A6
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018CCA2A799BCD9F718F5D47C2DCED6AAA48
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/6Pu_1k3s11zYfwblPWBjKjgOh6Y.roa
Signing time: Tue 02 Jan 2024 12:33:50 +0000
ROA not before: Tue 02 Jan 2024 12:33:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49418
IP address blocks: 194.87.228.0/24 maxlen: 24
212.192.250.0/24 maxlen: 24
212.192.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 17:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:79:9b:cd:9f:71:8f:5d:47:c2:dc:ed:6a:aa:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 2 12:33:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e8fbbfd64decd75cd87f06e53d60632a380e87a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:b6:e7:a4:88:97:06:0e:41:d4:78:48:df:14:
d6:67:f8:87:76:79:aa:07:0d:00:ee:86:b3:3a:df:
e1:b7:ba:65:0e:6f:b9:33:71:0a:e9:47:e6:97:d7:
f3:e5:9a:cd:ff:63:75:e3:da:0c:e6:69:01:15:4c:
2d:ae:d2:cd:af:f6:f0:f5:ed:7b:7a:8e:b7:84:b3:
3d:84:72:d1:4f:1e:8e:3a:34:57:25:8d:db:83:a6:
84:34:39:10:74:ac:12:8d:ae:68:e3:2b:8e:f2:dc:
ab:1f:d7:11:d7:9c:39:db:0a:11:e6:72:1d:14:41:
df:d8:f3:c0:4c:0b:8b:40:b3:02:96:d5:81:e9:63:
db:78:c3:03:b9:3f:e2:97:05:25:4f:3f:35:9e:98:
3a:21:e8:be:37:c0:39:c8:b7:d2:f7:5f:08:40:d3:
b1:35:1e:51:a6:be:47:27:aa:81:88:ec:c3:f7:85:
cd:38:4e:60:66:02:43:80:8c:13:dd:2e:11:1a:09:
a4:1b:1e:a7:71:fc:fc:f8:9b:f3:ef:de:80:17:97:
46:5c:89:2c:5b:f0:c5:09:d3:2b:00:92:58:60:e0:
f9:4b:49:bc:21:3e:66:b5:7e:f3:c9:ef:39:4b:42:
d5:32:bd:2d:43:6e:84:88:b2:21:07:0f:99:c6:d5:
0b:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:FB:BF:D6:4D:EC:D7:5C:D8:7F:06:E5:3D:60:63:2A:38:0E:87:A6
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/6Pu_1k3s11zYfwblPWBjKjgOh6Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.228.0/24
212.192.250.0/24
212.192.255.0/24
Signature Algorithm: sha256WithRSAEncryption
35:f4:7c:45:13:8b:9a:15:9d:67:2b:50:df:30:4f:10:1d:0b:
75:f2:82:b1:6c:2f:35:41:9d:4b:a4:85:09:cb:42:dd:bf:e6:
09:d6:5d:44:66:22:bc:09:4d:34:56:07:55:1e:ee:44:2a:1c:
3c:99:74:70:7e:8e:f0:63:4b:c9:dd:3c:b3:6b:03:45:bb:f7:
28:a6:b5:c6:ac:b5:2a:16:ce:52:4a:20:89:bf:19:c4:97:38:
0e:c7:29:ff:17:55:b7:7f:b1:45:de:5c:16:41:14:97:32:59:
8a:f1:e9:1b:ad:84:30:07:70:f3:f1:a5:63:23:5a:c8:d6:0e:
10:3e:39:af:ca:13:43:62:52:7e:e6:51:2d:eb:6d:10:07:4b:
8c:7d:9e:ec:a9:28:b7:a8:0d:93:46:53:e9:82:22:61:51:c6:
bc:ef:33:d1:26:74:23:f5:53:8c:83:a7:4c:88:8e:8c:1f:10:
62:c3:eb:c9:e8:9d:34:5d:47:3f:02:e5:7d:6f:7a:c2:95:4f:
fb:6f:1a:fe:90:58:3f:c2:d7:d6:9b:5c:1f:67:8c:d1:fc:99:
24:00:5c:ad:04:b3:01:65:3e:1c:12:ff:a2:79:03:75:5e:c5:
24:7f:ee:0a:42:0a:90:86:e1:3b:e5:61:a9:38:e9:84:7a:a6:
7d:cd:d6:1c
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYzKKnmbzZ9xj11HwtztaqpIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjQwMTAyMTIzMzUwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlOGZiYmZkNjRkZWNkNzVjZDg3ZjA2ZTUzZDYwNjMyYTM4MGU4N2E2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAirbnpIiXBg5B1HhI3xTWZ/iHdnmq
Bw0A7oazOt/ht7plDm+5M3EK6Ufml9fz5ZrN/2N149oM5mkBFUwtrtLNr/bw9e17
eo63hLM9hHLRTx6OOjRXJY3bg6aENDkQdKwSja5o4yuO8tyrH9cR15w52woR5nId
FEHf2PPATAuLQLMCltWB6WPbeMMDuT/ilwUlTz81npg6Iei+N8A5yLfS918IQNOx
NR5Rpr5HJ6qBiOzD94XNOE5gZgJDgIwT3S4RGgmkGx6ncfz8+Jvz796AF5dGXIks
W/DFCdMrAJJYYOD5S0m8IT5mtX7zye85S0LVMr0tQ26EiLIhBw+ZxtUL7QIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFOj7v9ZN7Ndc2H8G5T1gYyo4DoemMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvNlB1XzFrM3MxMXpZZndibFBXQmpLamdPaDZZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAwlfkAwQA
1MD6AwQA1MD/MA0GCSqGSIb3DQEBCwUAA4IBAQA19HxFE4uaFZ1nK1DfME8QHQt1
8oKxbC81QZ1LpIUJy0Ldv+YJ1l1EZiK8CU00VgdVHu5EKhw8mXRwfo7wY0vJ3Tyz
awNFu/coprXGrLUqFs5SSiCJvxnElzgOxyn/F1W3f7FF3lwWQRSXMlmK8ekbrYQw
B3Dz8aVjI1rI1g4QPjmvyhNDYlJ+5lEt620QB0uMfZ7sqSi3qA2TRlPpgiJhUca8
7zPRJnQj9VOMg6dMiI6MHxBiw+vJ6J00XUc/AuV9b3rClU/7bxr+kFg/wtfWm1wf
Z4zR/JkkAFytBLMBZT4cEv+ieQN1XsUkf+4KQgqQhuE75WGpOOmEeqZ9zdYc
-----END CERTIFICATE-----
Generated at Sat May 18 01:45:39 2024 by rpki-client on console-fra.rpki-client.org