Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/433edf-aaf8-4669-877c-e3781d8fe74c/1/6Hj2RLsto-Fqmi_EHa70j3NmaDg.roa
File: 6Hj2RLsto-Fqmi_EHa70j3NmaDg.roa (raw, json)
Hash identifier: aWZTEw0XmRqgQ//hTKY0/Nsq9uCRsnChvaQalEUvXFo=
Subject key identifier: E8:78:F6:44:BB:2D:A3:E1:6A:9A:2F:C4:1D:AE:F4:8F:73:66:68:38
Certificate issuer: /CN=6135c1f7b7140c872e7f3ff3462b4edc631d7674
Certificate serial: 018CC94CCAB3996ACF9527ADDCA9CF9F19FD
Authority key identifier: 61:35:C1:F7:B7:14:0C:87:2E:7F:3F:F3:46:2B:4E:DC:63:1D:76:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YTXB97cUDIcufz_zRitO3GMddnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/433edf-aaf8-4669-877c-e3781d8fe74c/1/6Hj2RLsto-Fqmi_EHa70j3NmaDg.roa
Signing time: Tue 02 Jan 2024 08:31:42 +0000
ROA not before: Tue 02 Jan 2024 08:31:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 52000
IP address blocks: 194.147.148.0/24 maxlen: 24
194.147.149.0/24 maxlen: 24
194.147.115.0/24 maxlen: 24
2a0f:4240::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/433edf-aaf8-4669-877c-e3781d8fe74c/1/YTXB97cUDIcufz_zRitO3GMddnQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/433edf-aaf8-4669-877c-e3781d8fe74c/1/YTXB97cUDIcufz_zRitO3GMddnQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/YTXB97cUDIcufz_zRitO3GMddnQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 May 2024 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4c:ca:b3:99:6a:cf:95:27:ad:dc:a9:cf:9f:19:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6135c1f7b7140c872e7f3ff3462b4edc631d7674
Validity
Not Before: Jan 2 08:31:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e878f644bb2da3e16a9a2fc41daef48f73666838
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:30:26:07:35:c1:cf:16:cd:ad:80:c3:d1:ae:
3b:e4:11:d5:10:66:2a:96:43:8b:2f:90:3b:c5:44:
63:e1:8d:16:76:44:52:26:65:08:df:81:c1:0d:77:
21:11:75:ec:cd:e0:02:81:3d:6b:cf:07:72:b6:e5:
d6:22:98:b6:41:46:50:35:e9:8d:19:61:2a:ec:78:
18:3d:80:83:36:bc:12:04:b3:73:c0:10:e2:35:b7:
55:31:34:fa:ee:54:d3:b1:0a:f0:2b:b7:7e:74:a2:
c8:53:88:6f:9f:75:af:c6:e5:11:c9:f4:03:d3:24:
35:5e:31:17:41:3a:d0:fb:32:b3:b5:b0:1c:28:77:
2f:52:9f:e7:0a:48:1d:4a:a3:5b:c3:8a:03:11:47:
78:91:2a:91:91:06:d8:79:85:42:9a:4b:db:0d:17:
ab:f3:53:96:55:c1:89:31:be:31:76:d4:25:ca:d6:
3f:11:79:3a:cd:e3:2c:c9:e4:fb:94:5e:12:21:1d:
04:e8:d7:88:30:c4:09:63:97:3d:5e:ca:ff:fa:3e:
bb:68:21:27:0e:31:15:f4:2b:38:41:1b:90:90:4a:
c3:4c:d4:0c:f4:ed:5b:44:04:94:09:a0:3d:f6:e7:
4b:78:69:26:88:d7:ba:2a:70:e7:0b:4e:74:48:50:
1f:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:78:F6:44:BB:2D:A3:E1:6A:9A:2F:C4:1D:AE:F4:8F:73:66:68:38
X509v3 Authority Key Identifier:
keyid:61:35:C1:F7:B7:14:0C:87:2E:7F:3F:F3:46:2B:4E:DC:63:1D:76:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YTXB97cUDIcufz_zRitO3GMddnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/433edf-aaf8-4669-877c-e3781d8fe74c/1/6Hj2RLsto-Fqmi_EHa70j3NmaDg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/433edf-aaf8-4669-877c-e3781d8fe74c/1/YTXB97cUDIcufz_zRitO3GMddnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.147.115.0/24
194.147.148.0/23
IPv6:
2a0f:4240::/29
Signature Algorithm: sha256WithRSAEncryption
2c:b5:6d:f5:22:53:85:64:de:0b:9b:7b:ff:54:5b:06:10:2b:
bf:c4:ab:62:6a:ca:86:33:4a:5e:b7:b2:4b:07:8a:b3:e9:0b:
29:ac:35:4a:96:d4:d5:d5:6c:cd:49:67:f2:27:0c:4f:f0:9a:
d4:2b:81:76:d5:9d:52:db:47:51:2e:9e:4a:77:be:3f:3e:49:
92:f9:89:b0:6d:c5:25:79:ba:34:0b:df:fa:b2:5d:65:c5:b9:
7c:12:65:3f:51:4e:83:c5:46:74:6b:1e:0b:17:29:2d:e9:a0:
2a:2f:05:a3:db:3b:7c:4c:1a:27:13:f9:67:34:11:fc:cb:61:
93:16:37:43:55:2c:23:b0:3e:c1:44:d0:ac:da:a4:e8:8f:b8:
8c:cf:59:c8:cb:34:b6:73:16:7b:fc:49:86:a9:c8:04:d8:82:
e8:4d:70:f7:ab:2e:1d:5d:8e:47:5f:c4:58:2a:2b:83:76:5b:
87:08:bd:b4:e5:bc:49:ff:fb:4b:9f:78:eb:27:d7:3c:cd:15:
c5:14:db:2f:f9:18:31:0f:3f:29:ca:1b:32:dd:8d:bb:a7:f2:
b8:31:e3:e3:3e:a6:6e:45:9a:8c:e0:86:a9:54:5c:db:58:63:
b1:31:55:d5:bb:d8:f3:3f:75:da:f8:96:66:e7:0c:ae:9a:62:
06:3c:91:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 01:03:28 2024 by rpki-client on console-ams.rpki-client.org