Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/6zHO8Czy88SHXFiKXKb5bYn5glA.roa
File: 6zHO8Czy88SHXFiKXKb5bYn5glA.roa (raw, json)
Hash identifier: ulSbAArluBoKii2HDvaoKKebd+uGYt+Jqd/riT60woE=
Subject key identifier: EB:31:CE:F0:2C:F2:F3:C4:87:5C:58:8A:5C:A6:F9:6D:89:F9:82:50
Certificate issuer: /CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Certificate serial: 018CC94DFCF62CD46D5A0FFF6B10C0AC8B3C
Authority key identifier: 30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/6zHO8Czy88SHXFiKXKb5bYn5glA.roa
Signing time: Tue 02 Jan 2024 08:33:00 +0000
ROA not before: Tue 02 Jan 2024 08:33:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48690
IP address blocks: 195.187.141.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.mft
rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 15:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:fc:f6:2c:d4:6d:5a:0f:ff:6b:10:c0:ac:8b:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Validity
Not Before: Jan 2 08:33:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=eb31cef02cf2f3c4875c588a5ca6f96d89f98250
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:7f:fd:d0:4e:2f:23:77:8a:16:0d:e1:21:68:
a8:a9:30:20:9c:b4:19:ad:54:fa:05:b8:fe:e9:8d:
6e:17:aa:2b:2c:62:d2:a9:7b:ba:94:e2:05:bb:0c:
8b:ef:5a:86:d4:29:41:4e:35:2d:0e:92:83:cc:a9:
11:41:df:fe:69:15:2a:78:02:d4:28:79:1e:2e:62:
ee:f9:5c:34:7d:c4:39:10:da:24:fd:54:58:d5:f2:
36:7e:86:96:2e:d6:89:86:3d:e4:6f:14:ee:2e:a4:
29:17:5e:f6:f1:74:1c:7f:65:8d:cb:f7:e7:a1:b3:
30:11:16:79:9f:4a:66:84:0a:a8:b2:68:a0:74:68:
2a:3c:9f:9e:d2:65:e4:6d:ce:04:b0:b4:85:1f:87:
4d:33:99:88:50:f5:56:d0:50:9f:1e:e6:77:da:42:
6f:de:0a:4b:58:6d:f5:af:85:9f:8c:9c:20:22:1a:
28:89:d1:da:16:eb:0d:9b:57:95:3f:cc:f1:0c:9d:
b2:7d:37:45:69:7a:31:e0:27:2a:fa:44:e8:c8:ad:
f1:8f:f6:be:93:9c:fb:c9:03:08:88:41:73:7b:9e:
b9:d5:ab:8c:aa:1a:ca:15:09:10:ff:8d:15:63:73:
eb:c2:17:76:de:97:0e:45:b0:8d:b8:0f:37:25:8a:
88:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:31:CE:F0:2C:F2:F3:C4:87:5C:58:8A:5C:A6:F9:6D:89:F9:82:50
X509v3 Authority Key Identifier:
keyid:30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/6zHO8Czy88SHXFiKXKb5bYn5glA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.187.141.0/24
Signature Algorithm: sha256WithRSAEncryption
71:f3:1c:1a:35:b1:cb:f2:43:b8:26:78:67:41:1d:77:bc:8d:
d1:69:f2:65:ed:1c:c5:97:de:6f:5a:38:0d:c8:99:27:49:59:
0d:ba:94:6a:9d:ba:24:7e:a7:36:fc:1b:d8:9a:c8:74:80:8c:
1e:b0:ab:0d:b5:39:58:48:13:49:15:c7:86:94:d4:88:81:c3:
7d:b3:78:32:c6:22:3c:5d:bc:ba:07:f9:c5:5d:9b:5f:26:51:
22:d8:04:13:5f:d2:ad:8a:b0:3c:df:a2:29:2c:11:40:cf:8b:
99:cb:88:65:5b:19:e8:7e:b2:67:fd:42:5a:1e:0b:ca:4f:91:
27:2f:ba:f0:b7:84:2a:3c:12:16:1f:18:d6:64:90:f0:a1:36:
9a:ca:0f:a8:91:60:c6:e7:d0:f3:4b:fb:84:fb:9d:27:9e:d6:
e0:95:93:bb:c2:dd:48:6b:35:57:c5:c7:08:75:0d:80:83:8d:
7a:d7:f0:93:64:aa:38:60:d9:87:1a:a8:0d:d7:13:7b:ea:20:
15:c0:15:d5:05:aa:29:d1:31:c2:bd:d6:f4:e3:ec:9a:1c:9e:
3f:2a:2f:78:4a:cf:80:17:71:86:63:20:30:2f:05:ce:41:d8:
b1:88:ce:94:0a:a6:c0:75:d1:26:72:40:95:25:29:54:99:52:
82:c6:5b:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 20:27:38 2024 by rpki-client on console-ams.rpki-client.org