Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/6WmXeuQKrPGkhDE4qPfCvkGonek.roa
File: 6WmXeuQKrPGkhDE4qPfCvkGonek.roa (raw, json)
Hash identifier: hPS82uf2lOQYKYL365Uk1hgjktO8iLw3s5pYOUy9kgA=
Subject key identifier: E9:69:97:7A:E4:0A:AC:F1:A4:84:31:38:A8:F7:C2:BE:41:A8:9D:E9
Certificate issuer: /CN=1056bcd426fd87cd6f4147e133216d03112b181b
Certificate serial: 018CC3B6DBC43261D58F4B4AA4666FAB5221
Authority key identifier: 10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/6WmXeuQKrPGkhDE4qPfCvkGonek.roa
Signing time: Mon 01 Jan 2024 06:29:50 +0000
ROA not before: Mon 01 Jan 2024 06:29:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9123
IP address blocks: 81.31.246.0/24 maxlen: 24
81.31.244.0/24 maxlen: 24
81.31.245.0/24 maxlen: 24
185.84.162.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft
rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:db:c4:32:61:d5:8f:4b:4a:a4:66:6f:ab:52:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1056bcd426fd87cd6f4147e133216d03112b181b
Validity
Not Before: Jan 1 06:29:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e969977ae40aacf1a4843138a8f7c2be41a89de9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:0c:33:c6:6e:8f:c2:9e:c0:0f:9d:64:6f:fc:
7d:b0:b1:8b:e6:0e:5b:b9:8c:da:d8:aa:c0:e6:f0:
53:d6:08:57:c7:d5:d7:e0:9f:88:b3:01:4e:8c:5e:
d5:e4:92:3d:e0:08:53:53:32:40:da:1d:c2:65:12:
78:f2:8f:fd:eb:a4:da:4d:27:f8:f8:a1:2c:9e:0e:
f4:fc:31:2c:0c:21:75:c1:8e:74:ba:f6:e4:be:8e:
2b:8d:43:37:b0:fe:29:d1:1c:e9:c6:86:44:85:f8:
43:d1:51:60:25:97:ff:d1:3f:7a:cd:42:82:da:77:
ec:39:91:70:2a:72:78:d6:bd:4f:41:44:97:82:ad:
af:1f:3e:d4:3c:b7:62:85:f3:4d:50:11:2e:63:16:
ca:8a:62:27:95:9b:bb:5c:0d:03:25:c8:11:0b:1f:
9f:b3:b5:d3:c2:36:96:27:36:52:33:2b:da:5f:43:
de:0d:0b:d3:c7:0c:5d:a4:c5:3d:93:8f:ab:54:22:
1f:c9:76:66:28:65:80:28:d0:03:a0:90:ba:84:d2:
04:42:4a:14:67:3b:a0:59:1b:83:6f:ee:da:8f:4c:
5e:b7:6c:0d:e3:a4:04:be:1d:af:4e:d8:f0:46:8f:
6e:1d:81:bd:2b:69:f5:9a:8d:db:1b:9f:e0:bb:da:
c9:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:69:97:7A:E4:0A:AC:F1:A4:84:31:38:A8:F7:C2:BE:41:A8:9D:E9
X509v3 Authority Key Identifier:
keyid:10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/6WmXeuQKrPGkhDE4qPfCvkGonek.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.31.244.0-81.31.246.255
185.84.162.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:fd:26:3e:1f:cb:9d:af:48:5f:b1:fe:14:a7:60:24:c4:c6:
71:77:e5:cc:89:67:09:ee:77:9e:79:34:40:c6:a6:16:b4:c8:
b4:2f:1f:60:d4:51:d7:8f:61:9a:ab:c0:2b:44:28:40:68:63:
7e:dd:7a:f6:5d:c4:3c:2d:8d:1c:8d:1d:4f:63:39:72:77:8f:
92:25:2d:0a:11:ac:18:6e:31:28:26:18:d8:40:a1:65:5b:45:
45:18:73:6e:c9:31:78:8c:a5:7c:9a:01:d8:cd:bd:e8:0e:1f:
be:18:cc:f2:e0:31:34:54:e3:76:a3:a7:29:39:e0:a1:cd:59:
fa:5c:a7:1e:88:94:29:f1:cc:8b:fa:8d:01:15:f6:cd:36:68:
ca:4f:54:f0:50:1e:41:70:a8:ae:e6:8b:fc:65:8f:00:f3:c8:
cb:7b:75:88:fd:a1:51:6d:18:13:6d:f4:52:ec:a7:70:15:08:
94:40:2b:3a:ea:3d:23:01:e3:2d:0e:1b:51:49:ef:2e:86:ab:
cd:6e:bc:51:4e:e7:15:c9:17:5c:e7:b9:56:46:8d:eb:77:de:
45:92:3c:ce:34:ee:f3:e9:2f:d9:5f:eb:aa:64:63:d3:5e:75:
6d:a0:7e:00:cf:33:d7:51:42:e4:93:13:5d:ff:fc:96:02:1a:
7c:c7:62:1c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Nov 22 13:38:58 2024 by rpki-client on console-fra.rpki-client.org