Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/c0bb52-70de-4af0-a9fb-900034f00d9e/1/6zs7RAfPVGFiIa8KsCMrU6CGVSk.roa
File: 6zs7RAfPVGFiIa8KsCMrU6CGVSk.roa (raw, json)
Hash identifier: QTwzDsNVAYHzQQOn8HRPBxhE1fShm2TDQBVS31KZVmE=
Subject key identifier: EB:3B:3B:44:07:CF:54:61:62:21:AF:0A:B0:23:2B:53:A0:86:55:29
Certificate issuer: /CN=7aef069e7e3ed5bf70f682ce40c5810ff3e5e378
Certificate serial: 018CC4924C941F42879B623B3C22C65C9A0D
Authority key identifier: 7A:EF:06:9E:7E:3E:D5:BF:70:F6:82:CE:40:C5:81:0F:F3:E5:E3:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eu8Gnn4-1b9w9oLOQMWBD_Pl43g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/c0bb52-70de-4af0-a9fb-900034f00d9e/1/6zs7RAfPVGFiIa8KsCMrU6CGVSk.roa
Signing time: Mon 01 Jan 2024 10:29:31 +0000
ROA not before: Mon 01 Jan 2024 10:29:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57316
IP address blocks: 85.204.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/c0bb52-70de-4af0-a9fb-900034f00d9e/1/eu8Gnn4-1b9w9oLOQMWBD_Pl43g.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/c0bb52-70de-4af0-a9fb-900034f00d9e/1/eu8Gnn4-1b9w9oLOQMWBD_Pl43g.mft
rsync://rpki.ripe.net/repository/DEFAULT/eu8Gnn4-1b9w9oLOQMWBD_Pl43g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 16:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:92:4c:94:1f:42:87:9b:62:3b:3c:22:c6:5c:9a:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7aef069e7e3ed5bf70f682ce40c5810ff3e5e378
Validity
Not Before: Jan 1 10:29:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=eb3b3b4407cf54616221af0ab0232b53a0865529
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:81:be:0f:4e:e1:83:b4:44:22:22:5b:d2:c0:
08:c4:e2:d4:87:ed:eb:e3:26:a2:22:70:39:17:fc:
07:ba:bb:a6:77:c8:c1:15:ac:db:e0:16:e0:bf:0d:
9d:b7:d1:b8:66:ef:53:a1:40:68:8e:b2:ea:f1:04:
c8:18:96:33:d5:3e:1c:d6:46:80:bd:a9:db:4a:95:
0f:e5:79:89:90:47:63:9a:7f:da:9a:33:ca:f8:a4:
40:9a:8f:59:ad:97:e0:53:a7:a5:64:d0:b2:ee:53:
4d:e7:9d:8d:74:c2:03:c8:69:e8:d7:28:f1:f4:dc:
2c:77:66:9c:c2:2d:93:f0:8e:5b:1a:98:c8:2b:46:
1d:e5:8b:d0:81:fd:99:48:1c:3a:a3:f6:10:4f:08:
73:51:62:e7:b1:5e:1e:f6:37:ce:f4:d4:23:39:51:
a4:8b:66:ce:6b:6f:52:2c:8b:c6:40:1d:68:bb:6c:
f8:08:5e:e4:4d:9a:b6:1e:ef:a5:78:0a:77:c8:82:
76:b9:3f:6c:e9:d3:35:18:cf:c8:a5:a3:df:13:0f:
ae:6c:7a:7e:68:43:1d:90:d4:e9:89:af:2f:c9:9e:
fe:7e:19:10:36:57:c0:2b:64:2b:5a:ac:6b:48:8d:
bd:cd:d8:3b:fa:1b:67:af:b9:41:a9:38:2f:5a:d0:
48:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:3B:3B:44:07:CF:54:61:62:21:AF:0A:B0:23:2B:53:A0:86:55:29
X509v3 Authority Key Identifier:
keyid:7A:EF:06:9E:7E:3E:D5:BF:70:F6:82:CE:40:C5:81:0F:F3:E5:E3:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eu8Gnn4-1b9w9oLOQMWBD_Pl43g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/c0bb52-70de-4af0-a9fb-900034f00d9e/1/6zs7RAfPVGFiIa8KsCMrU6CGVSk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/c0bb52-70de-4af0-a9fb-900034f00d9e/1/eu8Gnn4-1b9w9oLOQMWBD_Pl43g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.204.47.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:b5:f3:8a:3e:be:f8:87:98:bc:b8:25:3a:0c:97:40:ee:d0:
65:dd:d8:17:8a:11:9e:72:2e:21:b2:0c:5b:00:9e:0c:f7:42:
8d:d1:ec:91:45:5e:48:33:be:ce:e5:ea:90:63:b5:74:c7:ff:
b9:f2:50:3b:1e:34:c5:81:cb:b2:10:41:3a:34:9e:a6:b5:37:
80:32:bc:72:7f:25:9c:fb:eb:d2:00:7f:21:ec:dd:12:dd:0d:
c7:7c:56:63:9f:45:8d:d5:da:bc:05:de:07:b5:5b:50:30:f6:
99:73:23:36:ab:6b:bb:5f:e4:41:e4:2d:29:4d:25:46:51:79:
89:44:af:44:e0:cf:87:d1:12:ac:45:73:c4:8b:73:42:b2:83:
c1:11:73:f8:c8:05:3a:59:e1:b1:b2:88:40:7b:cf:bc:69:dd:
d8:15:bf:cb:be:9a:37:2c:2b:00:7b:d4:71:6c:f0:a7:d8:52:
d0:3a:73:fb:c5:f7:6a:df:b1:0d:e8:ae:99:4b:bc:f5:91:c4:
b0:1e:c2:0b:97:fd:67:73:9a:7e:f8:fc:fd:14:9d:80:8e:f0:
4d:96:bb:82:82:55:8e:de:86:de:ce:cc:b1:21:3c:4f:77:12:
a4:f8:1f:65:dd:2e:4f:1a:29:ba:06:0a:e9:98:6f:e2:ef:ea:
af:66:79:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 29 00:09:33 2024 by rpki-client on console-fra.rpki-client.org