Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/6nRRVSolaovwlTQuWDZP_DQXN1I.roa
File: 6nRRVSolaovwlTQuWDZP_DQXN1I.roa (raw, json)
Hash identifier: yw6jk74biX7RSqUMdW6HGI7HKmDFs2fZvqomRaf5cIc=
Subject key identifier: EA:74:51:55:2A:25:6A:8B:F0:95:34:2E:58:36:4F:FC:34:17:37:52
Certificate issuer: /CN=2455d7fee4a499ecaf11d2d3da8e389de323412f
Certificate serial: 018E802532866D1BE12C535732C0878C7883
Authority key identifier: 24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/6nRRVSolaovwlTQuWDZP_DQXN1I.roa
Signing time: Wed 27 Mar 2024 13:41:45 +0000
ROA not before: Wed 27 Mar 2024 13:41:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208949
IP address blocks: 45.94.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.mft
rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 13 May 2024 07:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:80:25:32:86:6d:1b:e1:2c:53:57:32:c0:87:8c:78:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2455d7fee4a499ecaf11d2d3da8e389de323412f
Validity
Not Before: Mar 27 13:41:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ea7451552a256a8bf095342e58364ffc34173752
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:5a:e5:ac:7d:72:fc:04:bb:3a:64:67:63:9f:
74:a1:fa:23:fb:39:1a:de:71:5e:ae:1c:2e:ff:bf:
99:44:3e:bc:7c:97:d3:52:3e:3e:25:8b:20:65:9c:
ba:47:a8:9c:dc:72:63:55:8a:6b:c0:67:31:3d:7a:
8a:13:10:b7:49:b2:91:f5:d5:57:b5:a8:04:9e:40:
04:0d:df:fc:55:fb:9c:91:06:da:c8:99:d4:a2:c2:
f8:5f:08:ff:ce:f7:e3:c4:47:60:ac:ce:60:e0:4a:
6d:ed:df:af:ba:9e:aa:59:8b:c2:41:88:ea:91:d4:
45:1e:4c:51:99:60:a6:d0:4c:8c:9a:eb:16:2c:7f:
fc:07:d1:d5:a2:fb:43:6b:05:ff:19:0c:bf:2b:5e:
7f:3d:aa:1f:30:72:fb:d7:21:a2:82:9d:94:ab:bd:
db:6f:b3:5e:07:14:48:05:16:75:fd:18:59:ea:55:
7c:a0:dd:ed:b3:74:01:ed:e0:35:74:93:47:16:2d:
c2:03:aa:e9:7c:19:df:c8:be:cb:f1:56:2d:73:a4:
f2:31:a5:19:99:df:77:a5:94:b2:b6:60:4f:ee:cd:
d7:4a:ff:31:5d:d6:d8:0b:f7:ec:13:e2:78:f6:c5:
e2:18:61:a7:92:bd:91:c6:fa:f4:85:94:85:b3:ad:
52:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:74:51:55:2A:25:6A:8B:F0:95:34:2E:58:36:4F:FC:34:17:37:52
X509v3 Authority Key Identifier:
keyid:24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/6nRRVSolaovwlTQuWDZP_DQXN1I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.55.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:d4:fe:1c:a2:c0:63:15:25:bc:52:11:e3:79:3c:57:4d:1a:
32:e2:a2:d0:86:c5:28:77:20:5e:40:c4:37:ee:a8:24:fa:6a:
43:79:39:35:93:93:5e:e1:70:f9:f8:c4:a3:6f:08:22:61:7a:
24:46:6a:8f:ef:9e:d2:15:14:ac:5d:1c:3b:2c:85:c8:5c:61:
cc:26:ba:5c:18:aa:2f:a7:ca:a1:c5:0c:a1:a0:6f:34:fc:27:
0c:8e:29:69:de:53:6c:db:0e:46:9e:be:b3:34:bd:f9:af:1f:
3f:6f:31:e7:ff:2d:42:ef:e5:d4:e4:6c:dc:18:3f:d2:cc:33:
ac:79:6a:f5:b6:ec:41:83:36:34:92:61:07:db:bf:0c:05:03:
11:8d:c4:79:5f:b6:76:8b:e7:4f:ff:4d:9e:76:4e:03:40:5d:
f1:76:ba:da:9c:5e:f7:d7:16:ae:29:cb:f5:b2:38:0e:d9:18:
c0:38:41:d7:4a:1b:60:23:0e:79:40:dc:2e:df:c5:18:d0:5c:
17:f9:6a:01:0a:09:13:78:da:8f:cd:2e:a0:bd:40:eb:40:64:
95:cd:aa:f4:45:b9:61:89:37:0c:77:31:13:43:96:fd:1a:cd:
66:3c:d3:88:af:09:a9:60:e6:42:ed:63:6c:9e:cf:b2:0e:11:
85:17:8a:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 12:15:05 2024 by rpki-client on console-fra.rpki-client.org