Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/3394e3-736e-4879-b8db-89aaea36285e/1/6GpDY-zNw1Mn3K9ZisVZKhl5n9c.roa
File: 6GpDY-zNw1Mn3K9ZisVZKhl5n9c.roa (raw, json)
Hash identifier: nj/QGp+gRiQIiIuyeU2yYR5iF/0/VUln4uQhmUHuhNo=
Subject key identifier: E8:6A:43:63:EC:CD:C3:53:27:DC:AF:59:8A:C5:59:2A:19:79:9F:D7
Certificate issuer: /CN=e85b83c87c4a3d8315025379f72987520bb5d046
Certificate serial: 018CC2DB06D2669161B9BD22BC633A82905A
Authority key identifier: E8:5B:83:C8:7C:4A:3D:83:15:02:53:79:F7:29:87:52:0B:B5:D0:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6FuDyHxKPYMVAlN59ymHUgu10EY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/3394e3-736e-4879-b8db-89aaea36285e/1/6GpDY-zNw1Mn3K9ZisVZKhl5n9c.roa
Signing time: Mon 01 Jan 2024 02:29:43 +0000
ROA not before: Mon 01 Jan 2024 02:29:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58269
IP address blocks: 94.30.181.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/3394e3-736e-4879-b8db-89aaea36285e/1/6FuDyHxKPYMVAlN59ymHUgu10EY.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/3394e3-736e-4879-b8db-89aaea36285e/1/6FuDyHxKPYMVAlN59ymHUgu10EY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6FuDyHxKPYMVAlN59ymHUgu10EY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 01:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:06:d2:66:91:61:b9:bd:22:bc:63:3a:82:90:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e85b83c87c4a3d8315025379f72987520bb5d046
Validity
Not Before: Jan 1 02:29:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e86a4363eccdc35327dcaf598ac5592a19799fd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:c0:60:39:81:bc:33:15:47:ab:01:42:51:cc:
a2:1a:7d:39:8a:49:34:63:a1:bc:77:b9:c6:39:b3:
ea:8f:f0:8b:c9:f1:ef:8e:e8:00:93:42:c7:17:f9:
97:51:1f:f7:b8:d8:34:3c:70:e7:b7:9d:1a:c5:96:
34:b6:0d:6f:0e:da:66:d3:aa:ee:16:83:2d:f6:4f:
03:37:4a:26:ea:65:d5:95:44:15:74:df:73:53:14:
99:05:f4:a7:83:0b:68:ee:ba:fb:a4:c2:32:9c:5e:
18:6d:b0:05:db:e8:b9:db:57:5f:13:d6:fc:20:48:
d2:37:5c:ac:79:c8:5b:88:3a:d4:e0:fd:b9:5f:ee:
21:bd:8f:2f:82:83:9a:ab:6c:c8:b3:19:72:4f:21:
61:e1:6b:4a:12:b1:f6:78:23:52:d4:68:d3:86:b8:
78:d6:a1:6a:7e:58:48:e7:12:0c:c0:0c:3f:70:63:
b3:92:d4:33:2f:38:43:bf:ee:6c:05:7c:2c:41:3e:
cb:87:56:fa:bf:2a:20:cf:9a:ad:93:2c:0e:de:1f:
6b:76:cc:85:03:55:44:25:93:40:66:a0:79:f1:1e:
98:47:e3:02:fd:6d:4a:64:3d:11:13:a7:1c:cc:26:
69:ec:c6:ba:5d:48:76:fb:b2:9c:43:a4:cb:6f:70:
30:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:6A:43:63:EC:CD:C3:53:27:DC:AF:59:8A:C5:59:2A:19:79:9F:D7
X509v3 Authority Key Identifier:
keyid:E8:5B:83:C8:7C:4A:3D:83:15:02:53:79:F7:29:87:52:0B:B5:D0:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6FuDyHxKPYMVAlN59ymHUgu10EY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3394e3-736e-4879-b8db-89aaea36285e/1/6GpDY-zNw1Mn3K9ZisVZKhl5n9c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3394e3-736e-4879-b8db-89aaea36285e/1/6FuDyHxKPYMVAlN59ymHUgu10EY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.30.181.0/24
Signature Algorithm: sha256WithRSAEncryption
42:4b:1f:e0:cb:e3:d2:11:07:cf:62:27:f5:9f:f3:bd:a1:e2:
2b:4e:53:7d:03:c1:e7:38:34:3c:06:54:92:8c:9e:5f:d3:68:
46:64:5c:17:96:93:eb:35:10:51:57:60:c2:9f:c7:81:fe:19:
29:09:34:ae:a1:c0:46:6a:1e:71:91:b1:ad:b1:25:d1:a4:80:
3c:d5:42:c8:3a:92:ee:f6:e7:71:0d:f1:c0:dc:bb:38:a8:80:
cc:53:5a:6d:b8:d8:92:21:81:1a:d0:d9:23:65:2f:34:3e:4c:
55:0a:d2:35:1f:34:7c:fb:76:14:61:27:03:0f:67:4f:d9:4a:
e7:79:25:ec:9d:bc:19:05:f7:5b:87:e1:bc:8f:06:26:d7:58:
92:cd:24:1e:37:29:73:4f:90:9e:22:5e:58:45:40:a9:38:b9:
6a:9c:5d:62:f3:12:c4:35:77:79:27:56:88:c2:58:4b:08:36:
aa:09:31:bf:bd:7d:c3:94:8c:58:34:8d:9d:f8:cd:03:a9:12:
a7:bc:3d:58:82:9a:d0:80:81:46:4a:3e:32:cf:b8:b2:cb:4c:
9a:de:6b:27:54:a5:59:75:c4:59:8b:32:0e:db:14:8f:02:69:
a2:ae:59:dd:84:dc:28:db:09:b7:41:c7:7e:8e:39:91:d5:ab:
80:35:ad:01
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzC2wbSZpFhub0ivGM6gpBaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4NWI4M2M4N2M0YTNkODMxNTAyNTM3OWY3Mjk4NzUyMGJi
NWQwNDYwHhcNMjQwMTAxMDIyOTQzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlODZhNDM2M2VjY2RjMzUzMjdkY2FmNTk4YWM1NTkyYTE5Nzk5ZmQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkcBgOYG8MxVHqwFCUcyiGn05ikk0
Y6G8d7nGObPqj/CLyfHvjugAk0LHF/mXUR/3uNg0PHDnt50axZY0tg1vDtpm06ru
FoMt9k8DN0om6mXVlUQVdN9zUxSZBfSngwto7rr7pMIynF4YbbAF2+i521dfE9b8
IEjSN1ysechbiDrU4P25X+4hvY8vgoOaq2zIsxlyTyFh4WtKErH2eCNS1GjThrh4
1qFqflhI5xIMwAw/cGOzktQzLzhDv+5sBXwsQT7Lh1b6vyogz5qtkywO3h9rdsyF
A1VEJZNAZqB58R6YR+MC/W1KZD0RE6cczCZp7Ma6XUh2+7KcQ6TLb3AwhQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOhqQ2PszcNTJ9yvWYrFWSoZeZ/XMB8GA1UdIwQY
MBaAFOhbg8h8Sj2DFQJTefcph1ILtdBGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNkZ1RHlIeEtQWU1WQWxONTl5bUhVZ3UxMEVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC8zMzk0ZTMtNzM2ZS00ODc5LWI4ZGIt
ODlhYWVhMzYyODVlLzEvNkdwRFktek53MU1uM0s5WmlzVlpLaGw1bjljLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC8zMzk0ZTMtNzM2ZS00ODc5LWI4ZGItODlhYWVhMzYyODVl
LzEvNkZ1RHlIeEtQWU1WQWxONTl5bUhVZ3UxMEVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXh61MA0G
CSqGSIb3DQEBCwUAA4IBAQBCSx/gy+PSEQfPYif1n/O9oeIrTlN9A8HnODQ8BlSS
jJ5f02hGZFwXlpPrNRBRV2DCn8eB/hkpCTSuocBGah5xkbGtsSXRpIA81ULIOpLu
9udxDfHA3Ls4qIDMU1ptuNiSIYEa0NkjZS80PkxVCtI1HzR8+3YUYScDD2dP2Urn
eSXsnbwZBfdbh+G8jwYm11iSzSQeNylzT5CeIl5YRUCpOLlqnF1i8xLENXd5J1aI
wlhLCDaqCTG/vX3DlIxYNI2d+M0DqRKnvD1YgprQgIFGSj4yz7iyy0ya3msnVKVZ
dcRZizIO2xSPAmmirlndhNwo2wm3Qcd+jjmR1auANa0B
-----END CERTIFICATE-----
Generated at Sat Jun 1 07:10:09 2024 by rpki-client on console-fra.rpki-client.org