Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/4f76b4-7d56-47a0-ac5b-653f239fe9a0/1/6jKQEI0_IIZRWhRQZl17EuWs7Jw.roa
File: 6jKQEI0_IIZRWhRQZl17EuWs7Jw.roa (raw, json)
Hash identifier: M9UkSNlIZdCDlYO6yyyHL02NpRSz5Y3pR5vyfGp5DGs=
Subject key identifier: EA:32:90:10:8D:3F:20:86:51:5A:14:50:66:5D:7B:12:E5:AC:EC:9C
Certificate issuer: /CN=5a5e66b2759e50bb69bb0a4409eeb3ba48c46c56
Certificate serial: 018CC80116B3A7AC1B352AB62746157350AF
Authority key identifier: 5A:5E:66:B2:75:9E:50:BB:69:BB:0A:44:09:EE:B3:BA:48:C4:6C:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wl5msnWeULtpuwpECe6zukjEbFY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/4f76b4-7d56-47a0-ac5b-653f239fe9a0/1/6jKQEI0_IIZRWhRQZl17EuWs7Jw.roa
Signing time: Tue 02 Jan 2024 02:29:23 +0000
ROA not before: Tue 02 Jan 2024 02:29:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58030
IP address blocks: 91.238.0.0/24 maxlen: 24
91.237.255.0/24 maxlen: 24
91.237.254.0/24 maxlen: 24
2001:67c:1158::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/4f76b4-7d56-47a0-ac5b-653f239fe9a0/1/Wl5msnWeULtpuwpECe6zukjEbFY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/4f76b4-7d56-47a0-ac5b-653f239fe9a0/1/Wl5msnWeULtpuwpECe6zukjEbFY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wl5msnWeULtpuwpECe6zukjEbFY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:16:b3:a7:ac:1b:35:2a:b6:27:46:15:73:50:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a5e66b2759e50bb69bb0a4409eeb3ba48c46c56
Validity
Not Before: Jan 2 02:29:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ea3290108d3f2086515a1450665d7b12e5acec9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:9a:cc:08:9f:14:1e:15:7e:90:fb:09:8e:5d:
93:e2:cb:79:7f:15:a1:6f:34:24:31:d8:30:b9:ca:
c7:4a:94:10:7c:8a:01:ea:ff:04:88:46:59:8a:08:
f4:ab:20:a9:54:4c:f4:3f:4a:e8:20:2d:d5:1a:3c:
f7:5f:f8:a7:8a:9a:ec:46:6c:22:e6:c2:12:99:b4:
cf:ee:85:ca:47:42:24:c7:f1:07:fe:5e:d1:9d:b8:
f8:68:11:0e:1b:37:07:19:31:58:f7:e5:2a:32:ef:
48:99:1a:e6:da:ed:4a:62:99:ab:dd:dc:8d:c6:a7:
27:b0:12:15:87:50:21:26:0d:1d:6d:87:6c:65:5d:
a4:22:6e:8f:e0:c2:eb:29:98:e8:fb:02:19:e7:4a:
73:e7:20:6e:d1:d2:9a:ad:f7:81:40:4a:50:1e:8b:
09:c5:27:05:f3:f5:00:28:69:c7:ce:91:de:79:0b:
16:ed:b5:d0:92:8d:ce:78:b3:74:b3:c8:70:fd:87:
46:a6:a5:b5:59:b4:1a:81:3e:5e:d2:a3:77:e1:38:
15:dc:b9:5f:14:ce:a8:73:f7:8b:df:e9:43:f5:32:
f7:c9:cf:46:8f:9d:35:ed:cf:c3:62:31:e6:a4:92:
d2:97:10:0d:61:51:da:88:73:51:6a:a7:17:b2:f8:
5c:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:32:90:10:8D:3F:20:86:51:5A:14:50:66:5D:7B:12:E5:AC:EC:9C
X509v3 Authority Key Identifier:
keyid:5A:5E:66:B2:75:9E:50:BB:69:BB:0A:44:09:EE:B3:BA:48:C4:6C:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wl5msnWeULtpuwpECe6zukjEbFY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/4f76b4-7d56-47a0-ac5b-653f239fe9a0/1/6jKQEI0_IIZRWhRQZl17EuWs7Jw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/4f76b4-7d56-47a0-ac5b-653f239fe9a0/1/Wl5msnWeULtpuwpECe6zukjEbFY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.237.254.0-91.238.0.255
IPv6:
2001:67c:1158::/48
Signature Algorithm: sha256WithRSAEncryption
7d:52:9f:e6:a1:dc:07:5d:48:b4:1d:94:57:c6:92:d9:fb:c4:
55:e5:ca:3b:6c:cd:15:5d:25:20:9c:5d:d0:4a:d0:11:06:f7:
17:62:5e:3f:be:12:68:79:af:21:43:38:de:5c:57:4d:9c:47:
b8:80:84:bb:d8:cd:14:fc:fc:99:22:63:96:20:90:11:f0:8e:
8b:69:2e:8f:40:a0:9a:7a:ff:fe:7e:9c:25:1f:46:d9:bd:d4:
2a:7d:bf:a4:c0:3b:4a:b6:42:4c:02:43:aa:31:c3:d9:3e:00:
f1:84:62:3d:e8:3c:59:c9:72:ca:09:de:a5:40:3b:b7:5f:ba:
af:48:02:2f:f8:7b:be:a2:2b:44:fb:24:79:0e:31:6e:b2:67:
68:dd:af:a2:b8:08:58:e0:79:3b:0c:79:9f:e3:99:95:18:46:
98:85:c7:75:76:a4:a9:10:5a:56:ab:f9:13:f2:2f:94:de:b1:
4e:d6:b8:4e:35:7b:b7:d9:4a:07:ba:0e:08:90:55:a1:51:2a:
73:91:2c:7d:04:5f:cc:f7:95:64:24:b1:51:8b:10:70:b2:51:
c0:64:21:a9:1d:4f:a1:16:b3:63:0a:fc:a3:62:4f:bf:d9:3e:
d7:d3:f5:27:90:69:98:fe:48:a8:bc:ad:57:bd:73:ac:11:db:
10:36:95:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:14:30 2024 by rpki-client on console-ams.rpki-client.org