Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/6V6fDj7ILO-gQs-4WgjWqfrbRQQ.roa
File: 6V6fDj7ILO-gQs-4WgjWqfrbRQQ.roa (raw, json)
Hash identifier: 8SIExKWy/7SISDK2GE12tQvMBZVDmDgvZwxjYXdrujs=
Subject key identifier: E9:5E:9F:0E:3E:C8:2C:EF:A0:42:CF:B8:5A:08:D6:A9:FA:DB:45:04
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 018CC794DC4DF9EA52F657A608B224F7E786
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/6V6fDj7ILO-gQs-4WgjWqfrbRQQ.roa
Signing time: Tue 02 Jan 2024 00:31:10 +0000
ROA not before: Tue 02 Jan 2024 00:31:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 398395
IP address blocks: 109.122.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:dc:4d:f9:ea:52:f6:57:a6:08:b2:24:f7:e7:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Jan 2 00:31:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e95e9f0e3ec82cefa042cfb85a08d6a9fadb4504
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:3d:90:06:86:a1:66:15:50:64:1d:68:57:3d:
85:60:c5:18:32:54:60:ab:ef:2e:aa:50:9c:cd:d5:
2d:b9:f4:6d:1e:30:c1:cb:e8:57:b4:59:f0:53:ff:
67:e7:a8:28:ce:df:f1:bf:50:77:2a:36:70:97:ff:
6d:db:b4:61:83:ed:10:64:0f:62:5a:26:ee:09:13:
55:63:9b:5c:57:7b:92:e3:96:57:5a:57:9f:12:19:
d1:c6:4c:0a:94:17:c9:43:d0:64:c6:54:a9:a6:30:
3d:eb:ce:55:93:61:cb:b9:45:be:0f:b5:53:1c:94:
95:55:21:59:48:b0:c3:f2:29:5a:c4:a8:98:84:24:
ad:3c:9b:74:88:08:67:60:17:9e:9b:9c:e3:88:3c:
89:54:91:1e:32:8e:4f:4f:1e:29:f9:ec:c1:9f:58:
41:d1:7f:9d:15:31:6d:81:fc:3a:f7:31:bb:1f:01:
20:16:ea:3d:0b:bd:16:8a:6c:52:f1:bc:90:b9:65:
88:20:1d:08:39:f6:7b:28:c9:6d:3b:3c:b2:b6:8d:
e4:ae:b3:a8:d2:2e:34:89:e7:7e:3d:7c:95:55:90:
4f:31:de:d1:0d:33:a9:a7:4a:3c:f5:48:d0:9c:ff:
7d:69:8c:94:c9:61:c1:2a:14:35:59:aa:d2:f2:bc:
d7:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:5E:9F:0E:3E:C8:2C:EF:A0:42:CF:B8:5A:08:D6:A9:FA:DB:45:04
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/6V6fDj7ILO-gQs-4WgjWqfrbRQQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.46.0/24
Signature Algorithm: sha256WithRSAEncryption
03:76:81:0c:6a:57:48:8e:f3:5a:d5:f0:b0:dd:2c:ae:5d:7e:
c9:23:cf:4b:82:78:a4:33:2e:77:93:bc:cb:50:74:62:03:5e:
1f:0b:32:e0:50:0f:97:9e:92:cb:50:4c:31:02:a6:93:47:60:
6a:14:82:cc:63:c1:6c:93:f6:56:e1:b7:31:8c:dc:7b:95:3d:
7c:da:ca:03:ef:fb:f0:5a:91:84:67:86:8d:fe:39:d8:21:ae:
d4:86:d7:1c:7e:a7:7d:f6:bf:73:aa:e8:a5:d1:cc:fd:6c:25:
f8:32:d9:8f:de:df:9d:b5:96:1c:b4:67:82:d3:a1:3b:17:dd:
3e:14:04:1f:6e:19:5d:0c:40:a0:1a:61:1f:af:a0:6c:dc:91:
a7:7e:ca:be:51:de:90:53:00:90:21:00:fb:c1:8a:8b:5c:52:
1a:0c:41:08:e1:9b:ba:f7:4f:e7:39:ec:2d:85:52:4c:91:50:
cf:3a:87:76:1d:e7:c5:20:b8:8b:6a:ef:67:7e:3a:30:56:9f:
b1:2d:3e:0b:39:1c:78:c8:2d:e8:77:2d:37:ac:a0:5f:49:84:
34:6c:86:b8:03:fb:25:7d:e1:48:71:25:bf:3b:dc:4f:f7:15:
3c:9e:56:a7:2c:cb:f4:c8:7a:72:85:a8:b0:bf:35:b5:7a:c4:
67:c4:b1:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 15:27:34 2024 by rpki-client on console-fra.rpki-client.org