Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/6vVtZLi8grjCTXhvapi7_UNEXKE.roa
File: 6vVtZLi8grjCTXhvapi7_UNEXKE.roa (raw, json)
Hash identifier: exOj8cfPOzHZ2Ddr8FSRJC22d5q/S7VHUeZxutF8FYQ=
Subject key identifier: EA:F5:6D:64:B8:BC:82:B8:C2:4D:78:6F:6A:98:BB:FD:43:44:5C:A1
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0191E180564F9A410707B7205AB21CF77B5F
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/6vVtZLi8grjCTXhvapi7_UNEXKE.roa
Signing time: Wed 11 Sep 2024 14:32:49 +0000
ROA not before: Wed 11 Sep 2024 14:32:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207279
IP address blocks: 2.59.253.0/24 maxlen: 24
79.110.51.0/24 maxlen: 24
87.121.79.0/24 maxlen: 24
94.154.162.0/24 maxlen: 24
109.206.239.0/24 maxlen: 24
193.37.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:e1:80:56:4f:9a:41:07:07:b7:20:5a:b2:1c:f7:7b:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Sep 11 14:32:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=eaf56d64b8bc82b8c24d786f6a98bbfd43445ca1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:65:d8:8b:9d:6c:8a:89:57:15:88:2e:40:50:
92:a2:1c:6a:bc:da:01:e6:cc:f7:45:ba:77:8f:67:
a1:d0:2e:32:20:cb:4f:ee:ae:b6:a9:90:b5:c2:18:
83:70:ce:3d:dd:65:b1:64:1c:41:ec:8f:d9:3f:66:
b9:3b:3b:a3:97:8a:ea:1f:8f:a5:08:93:26:68:1a:
57:df:35:69:e3:34:df:a3:f8:7a:99:44:4f:72:27:
2a:2a:16:62:ca:b7:88:2a:d8:d4:3f:74:29:50:6f:
1b:14:ce:ab:4b:06:76:da:31:49:8e:18:d6:a1:7a:
8e:0c:6d:a6:96:bc:25:e9:cf:ce:9b:89:f4:08:d6:
3b:fc:a6:48:f9:5f:dc:b1:4d:9e:eb:9e:87:66:8a:
9f:82:ef:89:5d:a1:1f:24:02:8b:da:dc:2b:d5:7f:
72:f9:8a:0b:a4:3d:8a:c4:a8:87:ec:62:62:e5:7c:
11:8f:0f:83:ad:64:22:58:df:45:c8:86:81:95:64:
21:b7:79:ce:c3:7e:54:b5:fc:b7:db:21:ae:7f:f9:
17:11:ad:a1:77:52:ac:41:eb:5a:02:e0:10:e6:3a:
8d:c8:22:6d:ce:a6:0d:5b:1f:c4:a3:dd:9a:88:1b:
b5:8b:06:14:f0:b3:67:37:1f:ad:3f:62:33:44:3d:
e5:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:F5:6D:64:B8:BC:82:B8:C2:4D:78:6F:6A:98:BB:FD:43:44:5C:A1
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/6vVtZLi8grjCTXhvapi7_UNEXKE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.253.0/24
79.110.51.0/24
87.121.79.0/24
94.154.162.0/24
109.206.239.0/24
193.37.40.0/24
Signature Algorithm: sha256WithRSAEncryption
59:8c:fa:d6:14:c2:0b:39:ef:5c:af:54:fd:aa:bd:30:a4:c4:
a4:54:d6:eb:ec:77:11:f0:b0:07:2a:57:97:14:16:98:ff:89:
c7:ef:46:9d:b5:c3:74:be:fa:70:56:c1:b1:cd:99:c4:a6:81:
ed:95:7a:fd:65:ed:dd:87:3b:61:54:69:33:ce:65:f0:a3:94:
9a:6c:7a:d9:0c:e3:8d:e0:1a:f1:78:d3:01:7b:92:f6:9b:78:
a9:b2:15:17:e3:84:2c:35:e3:af:36:ba:85:5f:b0:41:dd:52:
8f:26:01:ab:bb:f1:65:6c:6c:ef:77:83:44:7a:af:7f:12:30:
25:cc:41:bf:ec:5a:da:18:fd:c1:7c:89:a2:bf:9e:1d:c8:fd:
d3:16:46:87:6a:4f:ad:67:05:d7:07:f0:e3:0d:bb:ae:5d:e6:
21:61:0d:fe:00:8f:ab:66:21:38:ea:ed:04:08:66:6e:de:2c:
a4:c6:d4:da:f7:ec:7b:9f:8b:c5:d2:65:23:b2:de:90:a9:05:
44:da:fc:25:cd:28:da:f4:d0:3b:d8:5b:83:eb:5d:93:b2:de:
58:24:7b:3e:4c:14:61:59:82:ff:9c:ed:09:7d:cc:2f:cf:68:
35:ef:5d:9a:7f:cd:21:55:fc:ff:ea:62:90:4e:01:71:3b:02:
45:27:d1:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:44:03 2024 by rpki-client on console-fra.rpki-client.org