Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/6NYVWpp81d89y4o75RY-9jpixUM.roa
File: 6NYVWpp81d89y4o75RY-9jpixUM.roa (raw, json)
Hash identifier: qFKFnSb2fvDYEzZnvRULI742yOPj7kAdACILdkI8yZw=
Subject key identifier: E8:D6:15:5A:9A:7C:D5:DF:3D:CB:8A:3B:E5:16:3E:F6:3A:62:C5:43
Certificate issuer: /CN=c089423af1be03027196d1f81df22992978cda6e
Certificate serial: 0191F837BFA43CB4D915C9A980F8D4816083
Authority key identifier: C0:89:42:3A:F1:BE:03:02:71:96:D1:F8:1D:F2:29:92:97:8C:DA:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wIlCOvG-AwJxltH4HfIpkpeM2m4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/6NYVWpp81d89y4o75RY-9jpixUM.roa
Signing time: Mon 16 Sep 2024 00:24:48 +0000
ROA not before: Mon 16 Sep 2024 00:24:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 30058
IP address blocks: 185.245.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.mft
rsync://rpki.ripe.net/repository/DEFAULT/wIlCOvG-AwJxltH4HfIpkpeM2m4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 23:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:f8:37:bf:a4:3c:b4:d9:15:c9:a9:80:f8:d4:81:60:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c089423af1be03027196d1f81df22992978cda6e
Validity
Not Before: Sep 16 00:24:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e8d6155a9a7cd5df3dcb8a3be5163ef63a62c543
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:7b:1b:81:36:16:4a:24:b3:b7:63:12:46:de:
9f:fe:de:05:06:5c:0f:92:11:e5:91:f1:32:c5:32:
7f:9a:bc:69:e0:0c:94:06:f5:f1:9f:b4:2d:2e:63:
82:de:b6:f0:b9:82:50:fa:08:29:7e:97:ec:90:ca:
c6:bb:45:76:30:d0:d5:be:05:50:a8:be:a8:19:6f:
15:49:44:45:cc:82:5d:b6:81:17:f0:06:58:ab:05:
d4:7a:b4:8b:aa:13:f7:2e:ea:b8:f7:3e:a2:a7:c9:
95:fe:02:04:ef:56:8a:d6:b8:03:50:19:92:80:4f:
cd:7e:cb:d4:83:27:75:53:cf:18:11:a0:38:46:fd:
a1:b4:0a:b2:8c:c9:55:75:78:76:44:56:75:e2:81:
a4:a7:56:aa:be:88:62:21:bb:f1:56:56:1f:e0:ff:
0a:d7:b2:d8:44:2b:80:20:13:c7:e1:5f:c1:b4:90:
23:9c:f9:4f:9e:20:d9:54:5a:e6:cf:2c:77:74:0b:
84:1d:d2:16:6f:d1:7b:e9:48:90:ce:ed:f6:9f:03:
c4:58:4b:a5:b3:08:76:67:f9:e5:31:4c:cf:83:7a:
ec:eb:7f:e9:d2:ff:89:14:51:95:2d:06:20:3a:13:
f7:bf:a5:dc:06:68:f1:85:95:dd:ca:01:05:ad:29:
3c:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:D6:15:5A:9A:7C:D5:DF:3D:CB:8A:3B:E5:16:3E:F6:3A:62:C5:43
X509v3 Authority Key Identifier:
keyid:C0:89:42:3A:F1:BE:03:02:71:96:D1:F8:1D:F2:29:92:97:8C:DA:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wIlCOvG-AwJxltH4HfIpkpeM2m4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/6NYVWpp81d89y4o75RY-9jpixUM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.245.40.0/24
Signature Algorithm: sha256WithRSAEncryption
87:80:50:30:c7:6f:48:c7:4e:ab:c1:c9:a3:33:32:c1:47:61:
f3:9a:79:91:49:3c:e5:95:52:cd:b2:27:3b:f6:bb:28:21:cb:
25:03:a0:79:29:da:a8:3e:83:b7:17:91:f2:fe:52:a3:ae:01:
d8:95:90:f9:78:6b:e4:61:b5:9d:8d:15:a1:e6:71:38:8b:dd:
35:7e:c6:35:03:bc:5d:fd:16:ce:e8:cd:8d:e6:b3:fd:3a:f1:
92:93:b6:9c:22:a3:27:34:73:ad:2f:cd:4d:ee:b7:64:8a:71:
15:40:f8:d0:d0:2d:c3:38:b0:ef:76:f5:d3:7e:07:fe:32:58:
e3:6c:aa:c7:d3:b1:27:43:c6:28:8e:41:18:bd:49:e3:26:e0:
33:2d:6b:1f:11:98:42:f1:d2:1d:78:a8:ff:6a:1a:9d:2f:05:
9e:6e:68:32:80:a6:bf:07:e8:5a:34:1e:41:13:21:fa:31:7a:
3e:c7:9d:c4:70:aa:a6:05:a7:81:a9:2e:5e:2c:00:03:71:dc:
fe:1b:fe:c3:d6:b6:0f:85:78:e3:53:f7:fc:ed:5e:de:7e:8c:
93:bb:65:3d:d8:5c:8b:86:b2:d3:17:77:2c:0c:bf:d8:0b:f2:
13:98:1d:24:6d:54:89:7e:1c:89:b9:99:c9:75:28:8f:a3:aa:
2e:9d:58:ba
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZH4N7+kPLTZFcmpgPjUgWCDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwODk0MjNhZjFiZTAzMDI3MTk2ZDFmODFkZjIyOTkyOTc4
Y2RhNmUwHhcNMjQwOTE2MDAyNDQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlOGQ2MTU1YTlhN2NkNWRmM2RjYjhhM2JlNTE2M2VmNjNhNjJjNTQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp3sbgTYWSiSzt2MSRt6f/t4FBlwP
khHlkfEyxTJ/mrxp4AyUBvXxn7QtLmOC3rbwuYJQ+ggpfpfskMrGu0V2MNDVvgVQ
qL6oGW8VSURFzIJdtoEX8AZYqwXUerSLqhP3Luq49z6ip8mV/gIE71aK1rgDUBmS
gE/NfsvUgyd1U88YEaA4Rv2htAqyjMlVdXh2RFZ14oGkp1aqvohiIbvxVlYf4P8K
17LYRCuAIBPH4V/BtJAjnPlPniDZVFrmzyx3dAuEHdIWb9F76UiQzu32nwPEWEul
swh2Z/nlMUzPg3rs63/p0v+JFFGVLQYgOhP3v6XcBmjxhZXdygEFrSk8FwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOjWFVqafNXfPcuKO+UWPvY6YsVDMB8GA1UdIwQY
MBaAFMCJQjrxvgMCcZbR+B3yKZKXjNpuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd0lsQ092Ry1Bd0p4bHRINEhmSXBrcGVNMm00LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9kYzI5MTItYzdiMC00ZGY0LTlhYTgt
NjUzMzJiNDdmNWViLzEvNk5ZVldwcDgxZDg5eTRvNzVSWS05anBpeFVNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy9kYzI5MTItYzdiMC00ZGY0LTlhYTgtNjUzMzJiNDdmNWVi
LzEvd0lsQ092Ry1Bd0p4bHRINEhmSXBrcGVNMm00LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAufUoMA0G
CSqGSIb3DQEBCwUAA4IBAQCHgFAwx29Ix06rwcmjMzLBR2HzmnmRSTzllVLNsic7
9rsoIcslA6B5KdqoPoO3F5Hy/lKjrgHYlZD5eGvkYbWdjRWh5nE4i901fsY1A7xd
/RbO6M2N5rP9OvGSk7acIqMnNHOtL81N7rdkinEVQPjQ0C3DOLDvdvXTfgf+Mljj
bKrH07EnQ8YojkEYvUnjJuAzLWsfEZhC8dIdeKj/ahqdLwWebmgygKa/B+haNB5B
EyH6MXo+x53EcKqmBaeBqS5eLAADcdz+G/7D1rYPhXjjU/f87V7efoyTu2U92FyL
hrLTF3csDL/YC/ITmB0kbVSJfhyJuZnJdSiPo6ounVi6
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:53:04 2024 by rpki-client on console-ams.rpki-client.org