Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/13fcd1-d806-4e56-8533-475dbbb0c08c/1/6a46YrwCxDkIpn9YXwBKmMM5WY4.roa
File: 6a46YrwCxDkIpn9YXwBKmMM5WY4.roa (raw, json)
Hash identifier: EUbZrutKFl1FnCdm/bTAxnWdVwtOEY/wRTH8eg03XNw=
Subject key identifier: E9:AE:3A:62:BC:02:C4:39:08:A6:7F:58:5F:00:4A:98:C3:39:59:8E
Certificate issuer: /CN=b91464767773f1239b646bb66bdcf4f7fb1206ce
Certificate serial: 0191655CAF74263235BB774549486568AB0A
Authority key identifier: B9:14:64:76:77:73:F1:23:9B:64:6B:B6:6B:DC:F4:F7:FB:12:06:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRRkdndz8SObZGu2a9z09_sSBs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/13fcd1-d806-4e56-8533-475dbbb0c08c/1/6a46YrwCxDkIpn9YXwBKmMM5WY4.roa
Signing time: Sun 18 Aug 2024 12:00:58 +0000
ROA not before: Sun 18 Aug 2024 12:00:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203735
IP address blocks: 91.192.5.0/24 maxlen: 24
91.192.7.0/24 maxlen: 24
2a0c:64c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/13fcd1-d806-4e56-8533-475dbbb0c08c/1/uRRkdndz8SObZGu2a9z09_sSBs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/13fcd1-d806-4e56-8533-475dbbb0c08c/1/uRRkdndz8SObZGu2a9z09_sSBs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/uRRkdndz8SObZGu2a9z09_sSBs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:65:5c:af:74:26:32:35:bb:77:45:49:48:65:68:ab:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b91464767773f1239b646bb66bdcf4f7fb1206ce
Validity
Not Before: Aug 18 12:00:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e9ae3a62bc02c43908a67f585f004a98c339598e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d6:b2:9b:5e:ea:7b:cf:b4:38:fb:e8:b7:0b:
e9:6c:b7:51:9f:68:3e:0e:75:18:73:dd:a7:d2:b3:
40:3f:fa:f7:95:20:8a:40:01:a5:fe:45:25:6e:36:
4a:75:ef:61:7b:6e:a9:7c:b4:a6:2e:b5:25:a0:46:
b1:35:fd:4f:66:02:bc:12:c1:ad:7b:52:63:a2:e1:
b1:a4:2e:92:04:c8:56:61:f7:75:6b:17:b7:75:ae:
9a:48:84:d1:be:99:4c:ca:ac:60:41:83:97:3e:50:
4d:21:8a:db:f5:49:bc:5e:dc:e7:1b:66:fa:c3:7b:
b2:c7:5c:5f:b0:b5:94:56:a7:c0:49:5e:da:8a:4b:
0d:1e:e9:91:f0:0a:e7:e1:2f:fd:0d:3c:61:34:2e:
ab:af:30:78:f6:e6:dc:9c:7c:b3:80:08:aa:7c:96:
19:dc:17:b2:53:a5:50:e7:2f:39:82:2a:62:c4:59:
d3:30:75:c0:c3:ad:71:55:67:5e:96:36:b3:cd:70:
c1:38:3e:3d:11:b4:f2:b1:41:ec:8b:0d:56:0f:3c:
df:a8:99:5e:d6:cb:43:00:5c:c7:6b:c2:b7:cc:96:
94:e0:c7:22:39:cd:bb:0d:c8:54:47:c6:98:bb:47:
36:9b:6f:c9:03:5e:db:08:47:dd:50:04:8d:2e:7c:
8b:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:AE:3A:62:BC:02:C4:39:08:A6:7F:58:5F:00:4A:98:C3:39:59:8E
X509v3 Authority Key Identifier:
keyid:B9:14:64:76:77:73:F1:23:9B:64:6B:B6:6B:DC:F4:F7:FB:12:06:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRRkdndz8SObZGu2a9z09_sSBs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/13fcd1-d806-4e56-8533-475dbbb0c08c/1/6a46YrwCxDkIpn9YXwBKmMM5WY4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/13fcd1-d806-4e56-8533-475dbbb0c08c/1/uRRkdndz8SObZGu2a9z09_sSBs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.192.5.0/24
91.192.7.0/24
IPv6:
2a0c:64c0::/29
Signature Algorithm: sha256WithRSAEncryption
b1:5c:a2:33:14:dd:84:c8:a3:a1:c0:46:e6:91:ab:45:6e:c2:
43:2a:54:8e:92:ca:dd:2f:39:88:a2:ea:e0:82:db:47:5b:d2:
1d:4b:c6:df:84:e1:c4:4d:c8:fe:0f:05:0e:84:15:63:e3:80:
f1:66:0c:80:c1:a9:80:85:bb:d2:85:7f:5a:b8:e6:52:db:99:
21:0e:d3:9a:25:52:71:0c:06:34:87:eb:11:d7:4d:5d:ea:a0:
07:f6:fc:9e:05:5b:ed:6b:c7:b6:bd:21:37:31:93:b2:b6:a9:
cf:f9:6d:d9:46:ad:3b:70:b0:3d:01:58:36:f8:0f:d1:84:09:
43:f5:24:21:c2:59:d6:38:06:4b:58:f7:57:2f:3a:27:01:f6:
f0:1d:42:e8:6d:f3:a7:c1:e5:d9:98:72:f2:a6:13:40:d8:74:
a6:3e:91:d0:1b:0a:73:ad:a0:b2:b3:54:d0:e5:5d:d3:03:eb:
99:34:39:aa:64:a6:b6:68:a2:3d:6a:d3:44:4d:2c:e8:98:a6:
48:22:14:2d:da:30:e7:41:af:13:b6:9a:12:ae:18:fa:b2:bc:
8b:a2:b8:de:ca:6f:ce:47:54:86:b6:72:18:26:c9:75:0b:9e:
d9:21:cd:3d:ca:44:aa:2b:42:e4:ff:d6:fe:15:43:ce:cc:e6:
32:53:2c:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:14:07 2024 by rpki-client on console-ams.rpki-client.org