Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/6GGhCdAIPy1ElJ_u_jrozzVY1eo.roa
File: 6GGhCdAIPy1ElJ_u_jrozzVY1eo.roa (raw, json)
Hash identifier: PLFgA9klUSF9wFWJax3lAmyqQ38hfRKp9TyQ/RsalyQ=
Subject key identifier: E8:61:A1:09:D0:08:3F:2D:44:94:9F:EE:FE:3A:E8:CF:35:58:D5:EA
Certificate issuer: /CN=0dd441c3ffae829842249e944b03851081f4d9e0
Certificate serial: 018CC5DCA9AC6EC2A3CE98498AD860D92723
Authority key identifier: 0D:D4:41:C3:FF:AE:82:98:42:24:9E:94:4B:03:85:10:81:F4:D9:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DdRBw_-ugphCJJ6USwOFEIH02eA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/6GGhCdAIPy1ElJ_u_jrozzVY1eo.roa
Signing time: Mon 01 Jan 2024 16:30:22 +0000
ROA not before: Mon 01 Jan 2024 16:30:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44016
IP address blocks: 91.235.168.0/24 maxlen: 24
193.23.60.0/24 maxlen: 24
2a09:8400::/29 maxlen: 48
2a0f:75c0::/29 maxlen: 48
2001:67c:2d78::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.mft
rsync://rpki.ripe.net/repository/DEFAULT/DdRBw_-ugphCJJ6USwOFEIH02eA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 May 2024 13:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:a9:ac:6e:c2:a3:ce:98:49:8a:d8:60:d9:27:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dd441c3ffae829842249e944b03851081f4d9e0
Validity
Not Before: Jan 1 16:30:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e861a109d0083f2d44949feefe3ae8cf3558d5ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:c0:44:fe:97:34:07:03:b7:c1:bf:a6:b4:6f:
74:50:44:1d:08:e0:a8:46:76:42:bd:71:d5:48:ed:
d6:22:71:dc:e0:fd:17:d8:7f:60:e0:02:83:d1:c7:
84:06:71:85:15:08:81:4c:c6:d8:df:76:e6:77:65:
cc:5c:8e:81:f4:15:21:fc:61:2b:4d:b3:17:52:f5:
88:e0:99:65:53:8e:88:dd:4a:47:34:19:d4:4f:1a:
4b:6f:ed:6a:eb:e1:8c:fb:71:b8:d3:8a:e3:f6:d5:
de:eb:37:d1:b3:af:d9:dd:57:50:cb:5b:02:7c:0b:
32:ef:4f:f3:ef:93:bd:dc:b8:48:c5:d0:21:aa:94:
46:d8:ab:14:e2:a7:8f:2a:c1:ed:b6:9e:7e:d3:5c:
2e:f8:25:09:52:02:e8:fe:e8:5e:25:82:b8:7a:29:
57:d4:90:e9:45:d4:df:ef:96:18:c4:8c:7f:cd:95:
61:96:74:76:86:93:c1:62:df:61:4a:2d:14:e9:50:
c2:77:62:1a:74:02:4d:0e:09:d5:aa:35:b4:2c:a1:
3f:5c:03:cc:a7:b1:4c:d1:b3:f1:12:ee:2b:b9:f5:
af:1f:8e:63:8b:e7:af:41:76:3b:5c:9f:f7:d2:20:
f9:2c:ce:8e:6b:0b:44:74:ef:37:ac:06:fa:52:c4:
3a:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:61:A1:09:D0:08:3F:2D:44:94:9F:EE:FE:3A:E8:CF:35:58:D5:EA
X509v3 Authority Key Identifier:
keyid:0D:D4:41:C3:FF:AE:82:98:42:24:9E:94:4B:03:85:10:81:F4:D9:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DdRBw_-ugphCJJ6USwOFEIH02eA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/6GGhCdAIPy1ElJ_u_jrozzVY1eo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.235.168.0/24
193.23.60.0/24
IPv6:
2001:67c:2d78::/48
2a09:8400::/29
2a0f:75c0::/29
Signature Algorithm: sha256WithRSAEncryption
07:80:26:c2:71:30:b8:65:55:52:ee:5d:58:f5:f3:9d:ed:06:
90:f5:81:66:ad:e7:2c:e3:39:9b:1f:4d:d0:8a:29:d8:5d:c3:
f7:a8:06:01:28:69:73:f6:c6:fd:fe:a7:64:b3:36:ce:93:7f:
42:dd:3d:29:6c:a7:a3:8d:74:32:00:49:a9:17:03:6c:71:e5:
14:b7:d7:cf:60:20:9c:f6:d8:5d:b6:74:dd:5f:ce:6a:e2:6e:
94:a3:0a:9b:0d:c5:bf:6a:1d:ae:84:d7:29:2b:f4:20:4a:36:
da:bb:b7:81:67:ab:89:de:d7:13:fe:12:b8:ac:32:b1:e6:af:
52:bf:76:94:7c:a0:c7:0a:b4:c5:72:28:e9:bc:26:a1:6b:be:
df:3c:c1:f4:0a:20:31:8d:86:aa:bd:32:96:ba:2b:21:ba:96:
34:08:16:f1:d9:4e:6c:fc:78:b5:84:63:8a:fc:1d:7c:75:f6:
ae:2a:5b:e4:59:f9:66:6b:d7:3d:b7:3a:e8:3b:b6:27:78:c4:
38:0c:26:1c:5f:11:98:49:ac:23:59:ad:65:8d:f8:34:99:8f:
84:9a:bb:9a:55:42:0a:aa:5d:03:b7:26:41:48:c5:87:21:1a:
b3:f7:97:d2:40:c4:5a:e8:91:83:b2:3d:13:33:ef:ea:7d:73:
16:6f:83:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 29 18:55:38 2024 by rpki-client on console-fra.rpki-client.org