Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/88fff5-dfd9-4008-95b7-785e5883644d/1/6sY0wcEFZeSYcju4pVNR2ED5Ues.roa
File: 6sY0wcEFZeSYcju4pVNR2ED5Ues.roa (raw, json)
Hash identifier: 8POaLtbEhQR5YNRSnxkHiBtTlL7qcWPj6lSYY7AqQuE=
Subject key identifier: EA:C6:34:C1:C1:05:65:E4:98:72:3B:B8:A5:53:51:D8:40:F9:51:EB
Certificate issuer: /CN=d8d662dcc6fe3b81ef3de2fca3cfcedc11ebaa43
Certificate serial: 018FAF1CF9ECE1BB039B0FFF09AEC7271261
Authority key identifier: D8:D6:62:DC:C6:FE:3B:81:EF:3D:E2:FC:A3:CF:CE:DC:11:EB:AA:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2NZi3Mb-O4HvPeL8o8_O3BHrqkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/88fff5-dfd9-4008-95b7-785e5883644d/1/6sY0wcEFZeSYcju4pVNR2ED5Ues.roa
Signing time: Sat 25 May 2024 09:37:42 +0000
ROA not before: Sat 25 May 2024 09:37:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35372
IP address blocks: 46.36.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/88fff5-dfd9-4008-95b7-785e5883644d/1/2NZi3Mb-O4HvPeL8o8_O3BHrqkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/88fff5-dfd9-4008-95b7-785e5883644d/1/2NZi3Mb-O4HvPeL8o8_O3BHrqkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/2NZi3Mb-O4HvPeL8o8_O3BHrqkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:af:1c:f9:ec:e1:bb:03:9b:0f:ff:09:ae:c7:27:12:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8d662dcc6fe3b81ef3de2fca3cfcedc11ebaa43
Validity
Not Before: May 25 09:37:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=eac634c1c10565e498723bb8a55351d840f951eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:81:44:12:0c:45:85:40:c8:e2:80:d7:32:5a:
c7:de:f8:c6:4f:31:da:6c:1b:e3:b6:69:b8:4c:28:
63:1b:70:eb:ca:56:9f:26:d7:54:d1:fc:e1:b1:cb:
13:68:52:a0:d7:09:9c:22:25:1e:df:8b:21:00:88:
11:d9:17:b8:5b:54:ba:bb:d3:51:a6:9e:a4:22:05:
ff:b1:71:95:d1:04:94:d5:34:e6:d2:8f:49:31:62:
94:60:91:1a:6b:df:f5:1f:7e:d8:c0:91:5c:ed:57:
10:14:82:f0:a3:ec:15:ca:c7:3b:cc:ef:5c:25:19:
47:05:06:85:f1:f0:74:a8:9c:4a:94:8b:f9:67:69:
68:78:ff:5e:11:28:ab:46:c6:71:0e:00:c9:49:9b:
00:d3:ae:e1:1e:b0:54:17:c5:82:19:1a:1e:cd:9b:
b5:86:49:d3:e8:d6:b1:ba:62:0c:bb:a8:44:a0:01:
23:30:6d:85:87:71:dd:6d:82:25:d3:92:38:fa:60:
12:c1:c0:49:2d:6a:00:77:b4:67:2d:de:a9:13:d6:
4c:f6:c3:b5:c4:fe:19:1f:2b:c2:ea:28:35:e4:06:
27:a2:59:c2:47:2a:74:b2:16:f9:72:41:25:56:6e:
4d:d3:b9:f3:66:4b:8e:76:c0:9b:7a:e1:e0:dc:66:
c9:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:C6:34:C1:C1:05:65:E4:98:72:3B:B8:A5:53:51:D8:40:F9:51:EB
X509v3 Authority Key Identifier:
keyid:D8:D6:62:DC:C6:FE:3B:81:EF:3D:E2:FC:A3:CF:CE:DC:11:EB:AA:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2NZi3Mb-O4HvPeL8o8_O3BHrqkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/88fff5-dfd9-4008-95b7-785e5883644d/1/6sY0wcEFZeSYcju4pVNR2ED5Ues.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/88fff5-dfd9-4008-95b7-785e5883644d/1/2NZi3Mb-O4HvPeL8o8_O3BHrqkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.36.103.0/24
Signature Algorithm: sha256WithRSAEncryption
09:38:9f:48:91:f2:16:41:27:d3:13:d7:9e:6d:3b:00:76:a8:
bc:24:10:5c:42:b0:52:3a:7a:62:0b:97:77:46:a0:12:0f:9a:
59:a6:b6:14:d8:83:2c:22:ee:79:63:9a:f4:61:5e:65:f7:cd:
2e:45:f5:38:8e:bc:3e:a4:5e:8a:e5:a3:a4:72:71:f5:6e:42:
75:d5:63:d9:3d:63:e6:27:36:6b:69:f6:b9:08:2f:b3:00:2e:
a6:c8:bd:d1:a5:2d:d9:2b:a6:2c:3a:9c:c1:0a:c5:0d:69:3c:
0a:b7:3c:9c:25:ee:84:d8:7d:db:1e:b3:6d:b2:3e:34:0f:81:
d3:36:3d:64:e1:3a:8d:56:12:7c:2e:d7:bd:a0:c6:79:6e:56:
fe:ae:fc:a3:f7:aa:82:5e:11:1e:da:53:be:3c:80:9f:c1:1b:
d0:9b:32:58:ff:2b:5b:79:35:e8:7f:ac:9e:7e:b0:36:c6:4e:
44:3c:3c:48:74:65:e2:87:f0:b0:85:0a:f0:5c:da:fb:0c:86:
49:bc:16:23:83:04:85:40:8e:33:6a:72:0f:25:0b:f6:79:ac:
d8:81:86:12:2b:1e:72:1f:ff:f3:6f:12:17:7f:14:28:01:d2:
30:2f:97:29:35:7c:60:b1:32:44:e1:38:33:3f:44:46:9b:05:
29:23:f2:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:35:30 2024 by rpki-client on console-fra.rpki-client.org