Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/7a9506-5ee6-4220-bdfc-649d1c18dd8c/1/n6EGhW2Xx1XgOG1D7B43OtOJZSw.roa
File: n6EGhW2Xx1XgOG1D7B43OtOJZSw.roa (raw, json)
Hash identifier: DElhcLHt8gdbl92exyR9G6omlCBzxw0BH7KwuulkM44=
Subject key identifier: 9F:A1:06:85:6D:97:C7:55:E0:38:6D:43:EC:1E:37:3A:D3:89:65:2C
Certificate issuer: /CN=ed770674837d28ea60c2878f342cdb35f1e3b1c5
Certificate serial: 018CC493528ECF4B9698FDF89FAF7F3B5D4C
Authority key identifier: ED:77:06:74:83:7D:28:EA:60:C2:87:8F:34:2C:DB:35:F1:E3:B1:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7XcGdIN9KOpgwoePNCzbNfHjscU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/7a9506-5ee6-4220-bdfc-649d1c18dd8c/1/n6EGhW2Xx1XgOG1D7B43OtOJZSw.roa
Signing time: Mon 01 Jan 2024 10:30:38 +0000
ROA not before: Mon 01 Jan 2024 10:30:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50064
IP address blocks: 185.51.85.0/24 maxlen: 24
185.51.84.0/24 maxlen: 24
185.51.84.0/22 maxlen: 22
185.51.87.0/24 maxlen: 24
185.51.86.0/24 maxlen: 24
46.167.58.0/24 maxlen: 24
46.167.57.0/24 maxlen: 24
46.167.56.0/21 maxlen: 21
46.167.56.0/24 maxlen: 24
46.167.62.0/24 maxlen: 24
46.167.61.0/24 maxlen: 24
46.167.60.0/24 maxlen: 24
46.167.59.0/24 maxlen: 24
46.167.63.0/24 maxlen: 24
2a01:b160::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/7a9506-5ee6-4220-bdfc-649d1c18dd8c/1/7XcGdIN9KOpgwoePNCzbNfHjscU.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/7a9506-5ee6-4220-bdfc-649d1c18dd8c/1/7XcGdIN9KOpgwoePNCzbNfHjscU.mft
rsync://rpki.ripe.net/repository/DEFAULT/7XcGdIN9KOpgwoePNCzbNfHjscU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 16:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:52:8e:cf:4b:96:98:fd:f8:9f:af:7f:3b:5d:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed770674837d28ea60c2878f342cdb35f1e3b1c5
Validity
Not Before: Jan 1 10:30:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9fa106856d97c755e0386d43ec1e373ad389652c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:a9:88:aa:12:c7:7a:f7:9c:c6:27:b5:ac:a2:
f7:7e:da:e7:7c:20:b7:92:37:b9:0d:e3:83:ef:e5:
ae:e8:ac:87:5d:7e:96:48:26:54:4a:d2:27:35:91:
d4:9f:11:74:04:3f:a9:ec:15:1a:f1:2a:3c:2a:d2:
33:7f:c5:b0:ea:a8:6e:60:c5:88:0a:5c:a6:eb:2e:
3a:8b:d9:cc:17:98:76:e8:ca:f9:b6:4a:67:fb:f2:
60:20:61:bb:5e:f6:94:13:cf:4f:8b:45:37:e3:6a:
11:d1:19:97:fb:c4:b0:78:6e:50:f9:e1:8f:6e:d4:
55:ac:6d:16:dd:2d:ee:b4:6a:e3:31:d8:57:76:cb:
98:9a:87:3d:95:a8:f0:47:9c:c4:e9:e0:5e:11:35:
2f:2f:72:2a:c9:82:56:79:43:57:be:35:ee:85:3a:
0a:03:c9:8b:36:32:48:b4:db:ac:94:e1:7a:cd:58:
d9:f6:c0:b7:cd:45:e0:44:19:b7:b2:d7:c3:a7:96:
a4:17:bb:f8:49:95:4e:e6:0d:4e:b2:b0:c2:70:de:
b3:e0:e2:62:61:6b:da:01:7a:52:71:81:17:af:f7:
5b:c3:e5:3b:dd:f7:87:36:85:a4:86:de:dc:10:96:
9c:d9:2e:dc:7d:2b:76:7c:b9:b6:06:94:ea:b5:08:
a6:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:A1:06:85:6D:97:C7:55:E0:38:6D:43:EC:1E:37:3A:D3:89:65:2C
X509v3 Authority Key Identifier:
keyid:ED:77:06:74:83:7D:28:EA:60:C2:87:8F:34:2C:DB:35:F1:E3:B1:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7XcGdIN9KOpgwoePNCzbNfHjscU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/7a9506-5ee6-4220-bdfc-649d1c18dd8c/1/n6EGhW2Xx1XgOG1D7B43OtOJZSw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/7a9506-5ee6-4220-bdfc-649d1c18dd8c/1/7XcGdIN9KOpgwoePNCzbNfHjscU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.167.56.0/21
185.51.84.0/22
IPv6:
2a01:b160::/32
Signature Algorithm: sha256WithRSAEncryption
d0:52:bd:dc:67:5f:d3:75:86:13:20:65:f3:34:65:82:4b:f9:
80:50:c6:ad:00:0b:0c:31:48:07:5c:e9:5c:4e:97:e8:8d:c8:
90:47:23:07:1f:8d:e3:e2:3b:f1:29:d2:b5:2b:7b:75:5e:eb:
58:2a:11:70:94:f3:95:e6:62:75:9d:73:4e:8d:fd:fc:4f:b1:
8c:01:9f:24:35:50:23:d2:de:16:d5:2a:7c:d8:08:5d:f6:fd:
5d:8f:75:1c:d1:71:d2:da:c7:af:d3:bb:9c:c7:e3:a2:16:cc:
bc:d3:35:c8:ac:64:5f:73:4c:54:93:37:46:1d:bb:a3:f2:6f:
d3:10:38:ef:d9:f5:41:81:8d:01:be:23:0f:58:ac:a4:a0:95:
bd:f8:10:eb:bc:31:83:8f:13:1d:4e:be:d3:60:35:2b:f4:02:
ba:03:05:45:de:3e:04:2d:c2:82:6a:13:85:25:f9:88:24:7f:
bd:b4:cc:0b:4b:f4:c5:7d:55:e3:e2:59:fd:43:81:63:3b:12:
43:ef:32:64:08:c3:5e:e8:cd:1a:a1:72:00:14:cd:41:98:67:
85:97:34:ab:8e:bf:e4:9b:2f:94:fa:a1:7b:d1:23:d4:dd:58:
95:7d:66:d6:e4:a3:f3:de:6b:d3:0f:08:c5:a5:03:95:d7:6f:
92:a9:2d:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 20:00:35 2024 by rpki-client on console-ams.rpki-client.org