Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/adfbf0-0c07-4a07-8954-9d8a18e7b252/1/6Q6BnM5xSVdvIu25_aSnbgucUiQ.roa
File: 6Q6BnM5xSVdvIu25_aSnbgucUiQ.roa (raw, json)
Hash identifier: s5EXRmsjuzS8rkU0N95YdxwdHawpm+5dEUQYfNk7C7A=
Subject key identifier: E9:0E:81:9C:CE:71:49:57:6F:22:ED:B9:FD:A4:A7:6E:0B:9C:52:24
Certificate issuer: /CN=77402ff815eebc61a93cf1b0d0bcdcec7a29f19f
Certificate serial: 018CC2DAC874B0933897327A0584EBF3DF19
Authority key identifier: 77:40:2F:F8:15:EE:BC:61:A9:3C:F1:B0:D0:BC:DC:EC:7A:29:F1:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d0Av-BXuvGGpPPGw0Lzc7Hop8Z8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/adfbf0-0c07-4a07-8954-9d8a18e7b252/1/6Q6BnM5xSVdvIu25_aSnbgucUiQ.roa
Signing time: Mon 01 Jan 2024 02:29:27 +0000
ROA not before: Mon 01 Jan 2024 02:29:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48971
IP address blocks: 195.225.116.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/adfbf0-0c07-4a07-8954-9d8a18e7b252/1/d0Av-BXuvGGpPPGw0Lzc7Hop8Z8.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/adfbf0-0c07-4a07-8954-9d8a18e7b252/1/d0Av-BXuvGGpPPGw0Lzc7Hop8Z8.mft
rsync://rpki.ripe.net/repository/DEFAULT/d0Av-BXuvGGpPPGw0Lzc7Hop8Z8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:c8:74:b0:93:38:97:32:7a:05:84:eb:f3:df:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77402ff815eebc61a93cf1b0d0bcdcec7a29f19f
Validity
Not Before: Jan 1 02:29:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e90e819cce7149576f22edb9fda4a76e0b9c5224
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:81:c1:ae:14:68:80:69:a3:04:26:12:1d:cd:
d2:63:21:72:b1:d1:8d:e1:75:5c:d7:6f:40:a0:87:
15:0f:93:aa:e4:4b:6e:99:d2:61:4a:84:51:f0:06:
b0:38:17:8c:a2:8c:fe:58:6f:e0:5a:4c:96:5c:c8:
2f:88:42:c1:62:fa:cd:cc:71:4f:18:1f:df:e6:0c:
4c:1b:70:2c:c5:b2:86:6b:a8:65:8d:b1:85:e1:d8:
7c:56:f0:1a:77:d1:c4:4c:73:df:89:cc:28:2c:a5:
b3:52:c3:f8:79:7c:49:3e:fe:4e:ca:1b:e0:fb:0e:
d1:85:ea:a4:c8:f1:e0:f4:a6:62:7a:b5:94:f6:37:
9a:07:04:e9:75:76:9f:70:0e:50:b6:a3:90:97:90:
23:23:25:ab:d4:5d:14:c3:2f:26:52:1f:2a:d0:80:
57:bb:aa:43:c5:77:b0:88:4b:b5:92:e0:99:b7:24:
9c:2e:be:78:91:2e:ad:dc:74:e6:fc:5f:44:94:78:
94:b7:cb:40:10:49:b7:18:38:ed:9e:a3:1e:49:5e:
a7:97:34:ac:6c:c1:36:7b:ab:04:08:e6:f9:0c:a7:
b6:6e:b8:75:63:94:16:7e:4f:3f:48:cf:a3:27:f1:
55:c2:ad:cc:11:ba:4b:a5:f7:e9:d0:a1:9d:e0:53:
92:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:0E:81:9C:CE:71:49:57:6F:22:ED:B9:FD:A4:A7:6E:0B:9C:52:24
X509v3 Authority Key Identifier:
keyid:77:40:2F:F8:15:EE:BC:61:A9:3C:F1:B0:D0:BC:DC:EC:7A:29:F1:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0Av-BXuvGGpPPGw0Lzc7Hop8Z8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/adfbf0-0c07-4a07-8954-9d8a18e7b252/1/6Q6BnM5xSVdvIu25_aSnbgucUiQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/adfbf0-0c07-4a07-8954-9d8a18e7b252/1/d0Av-BXuvGGpPPGw0Lzc7Hop8Z8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.225.116.0/24
Signature Algorithm: sha256WithRSAEncryption
89:2e:18:e8:9b:97:03:b5:5e:80:44:da:4a:1a:6f:0d:ec:e9:
e1:55:c8:c2:81:7f:29:4f:02:65:c2:8b:fa:2f:da:70:ae:a3:
93:30:90:37:82:92:da:53:a0:c2:89:62:3a:3d:61:77:f0:a5:
bf:3a:83:88:37:1d:23:e2:8e:21:f5:84:3c:ac:26:9a:ac:6a:
b6:45:59:f6:f3:84:e4:74:a1:16:5c:e1:cc:63:03:38:a0:8c:
c1:44:17:27:9e:6a:81:c8:37:0f:e5:66:f5:f7:3d:10:a8:69:
40:64:5a:1a:cd:96:49:36:ae:c0:46:75:ce:7d:5d:0c:ca:db:
5d:14:f3:89:2f:c1:6b:eb:2c:7c:2c:4c:c8:6f:09:db:78:0e:
b7:72:39:a1:44:9d:97:3c:ae:20:80:a6:08:c7:a3:8d:b4:f6:
3e:87:d6:70:41:05:39:1e:72:15:44:b2:d6:84:9b:43:31:2e:
34:65:5a:c6:00:16:f3:2d:25:a6:80:a8:01:bb:d7:0a:4b:5c:
56:32:4f:89:a9:f9:af:80:ee:5c:de:db:91:16:92:6b:5c:fd:
98:e2:58:62:f9:a9:a4:ca:ec:e7:4f:c5:58:2b:d1:86:b5:e3:
f1:e9:2d:4a:c5:31:ca:b5:a2:09:2e:39:b6:cd:1a:29:ba:8e:
7a:2a:0e:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:05:42 2024 by rpki-client on console-fra.rpki-client.org