Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/wt2B69tCZA_A3YI4TnnVgvsJ5lc.roa
File: wt2B69tCZA_A3YI4TnnVgvsJ5lc.roa (raw, json)
Hash identifier: qrAmUWiYvJCRnMiDRAoZV55T8eXfRYDce8yWe4xHCUA=
Subject key identifier: C2:DD:81:EB:DB:42:64:0F:C0:DD:82:38:4E:79:D5:82:FB:09:E6:57
Certificate issuer: /CN=6161470d39be4ba2dd5df8fa47b16396278e670a
Certificate serial: 018CC34940AA5F4958A23771641213C8C38C
Authority key identifier: 61:61:47:0D:39:BE:4B:A2:DD:5D:F8:FA:47:B1:63:96:27:8E:67:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YWFHDTm-S6LdXfj6R7FjlieOZwo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/wt2B69tCZA_A3YI4TnnVgvsJ5lc.roa
Signing time: Mon 01 Jan 2024 04:30:06 +0000
ROA not before: Mon 01 Jan 2024 04:30:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211796
IP address blocks: 91.188.248.0/24 maxlen: 24
91.202.244.0/24 maxlen: 24
2a0c:6ec0:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/YWFHDTm-S6LdXfj6R7FjlieOZwo.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/YWFHDTm-S6LdXfj6R7FjlieOZwo.mft
rsync://rpki.ripe.net/repository/DEFAULT/YWFHDTm-S6LdXfj6R7FjlieOZwo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 10:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:40:aa:5f:49:58:a2:37:71:64:12:13:c8:c3:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6161470d39be4ba2dd5df8fa47b16396278e670a
Validity
Not Before: Jan 1 04:30:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c2dd81ebdb42640fc0dd82384e79d582fb09e657
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:3d:bb:e4:e2:6d:17:ec:b6:e5:d0:c2:38:a3:
38:d2:ce:41:96:51:1a:d5:62:b6:fc:47:17:2c:6b:
43:b7:ef:06:c2:fc:f1:6e:3b:a4:28:c2:29:dd:83:
32:b1:b4:a8:76:23:96:78:9f:25:cd:22:bc:27:a1:
aa:d8:d7:c8:8a:17:01:06:82:7c:27:af:a2:42:06:
31:30:a9:31:58:2c:1e:c8:05:c9:52:83:fd:56:38:
dc:94:8b:1e:77:91:06:91:60:26:1b:7d:7e:9a:87:
62:52:ad:e1:e2:58:8e:84:77:f4:9a:dd:76:50:c8:
1d:2f:29:d7:19:a0:6f:cb:71:7e:bd:35:69:08:88:
a0:80:fd:bd:cf:44:49:8c:d8:c7:ec:f6:fe:98:e6:
7d:fa:7e:9b:b6:47:b9:a3:41:70:bf:02:f7:43:53:
3d:61:89:b0:55:70:41:bb:9f:fa:27:ef:8d:9d:23:
6a:2c:34:2c:3a:b0:c6:a3:8a:61:ff:54:ac:44:cb:
44:83:8f:f4:72:ca:71:b3:29:52:62:ef:db:a2:67:
dd:57:b1:fb:92:eb:21:1b:b2:78:55:89:ad:6d:e8:
2d:9d:be:89:6a:3f:a5:db:12:fa:ca:cd:83:08:13:
33:8b:a1:dc:91:5b:92:22:64:8b:25:d6:00:fa:e8:
bd:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:DD:81:EB:DB:42:64:0F:C0:DD:82:38:4E:79:D5:82:FB:09:E6:57
X509v3 Authority Key Identifier:
keyid:61:61:47:0D:39:BE:4B:A2:DD:5D:F8:FA:47:B1:63:96:27:8E:67:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YWFHDTm-S6LdXfj6R7FjlieOZwo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/wt2B69tCZA_A3YI4TnnVgvsJ5lc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/YWFHDTm-S6LdXfj6R7FjlieOZwo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.188.248.0/24
91.202.244.0/24
IPv6:
2a0c:6ec0:1::/48
Signature Algorithm: sha256WithRSAEncryption
6a:b9:5b:d8:86:e1:e8:83:c5:2f:0e:54:ca:90:74:a5:50:b6:
a6:69:a7:5a:30:68:50:e6:65:4f:8c:1a:9b:97:69:6c:10:3e:
7f:ed:53:56:2d:71:1b:6f:d1:30:27:b7:01:ca:6f:c5:37:22:
73:cb:37:5c:f4:b7:10:3a:ba:89:92:06:02:47:d3:b6:4b:89:
27:06:ed:7b:0f:a8:26:e0:72:fe:ff:50:c7:e3:d9:70:a3:a8:
2e:1a:fa:37:c9:00:b2:28:2a:23:66:39:38:01:74:2e:27:ed:
2a:20:40:64:a8:32:9b:32:6d:09:73:32:6b:56:b4:a2:52:16:
b6:de:69:4c:7f:93:90:f4:f0:87:a2:e9:f3:2f:2d:af:a5:19:
74:12:3e:52:32:62:8a:0c:e0:90:f9:8a:6d:21:89:70:73:4d:
7b:ef:2d:6e:16:a6:53:1f:a0:8e:14:d3:de:4d:c6:5d:34:f5:
1b:4c:5a:8e:9f:02:e1:b7:f4:41:ef:bc:8b:8a:e1:22:a5:5e:
4a:98:23:bf:0d:f1:aa:bc:0b:04:69:15:ae:6f:10:83:1f:fe:
37:da:b8:5b:60:19:22:b4:8b:23:83:a4:61:80:91:a6:e5:a4:
bb:39:56:06:90:4a:4e:66:f2:a0:f8:71:55:e8:5a:44:e2:ff:
ca:29:26:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 17:49:20 2024 by rpki-client on console-fra.rpki-client.org