Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/477c86-c7d6-4e37-bff6-a0072bac9f48/1/6-CBg6PramTMu-vklWoZSh680ts.roa
File: 6-CBg6PramTMu-vklWoZSh680ts.roa (raw, json)
Hash identifier: gImGCIYJOMuMFNxucY/0QpIctZkyRwF8Lkp96g1X+74=
Subject key identifier: EB:E0:81:83:A3:EB:6A:64:CC:BB:EB:E4:95:6A:19:4A:1E:BC:D2:DB
Certificate issuer: /CN=726b350e9f4f1259e2f9c609b22e65fbd186206b
Certificate serial: 018CC56DF11469C4625FC7179A9516B335F9
Authority key identifier: 72:6B:35:0E:9F:4F:12:59:E2:F9:C6:09:B2:2E:65:FB:D1:86:20:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cms1Dp9PElni-cYJsi5l-9GGIGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/477c86-c7d6-4e37-bff6-a0072bac9f48/1/6-CBg6PramTMu-vklWoZSh680ts.roa
Signing time: Mon 01 Jan 2024 14:29:25 +0000
ROA not before: Mon 01 Jan 2024 14:29:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216239
IP address blocks: 149.232.188.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/477c86-c7d6-4e37-bff6-a0072bac9f48/1/cms1Dp9PElni-cYJsi5l-9GGIGs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/477c86-c7d6-4e37-bff6-a0072bac9f48/1/cms1Dp9PElni-cYJsi5l-9GGIGs.mft
rsync://rpki.ripe.net/repository/DEFAULT/cms1Dp9PElni-cYJsi5l-9GGIGs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6d:f1:14:69:c4:62:5f:c7:17:9a:95:16:b3:35:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=726b350e9f4f1259e2f9c609b22e65fbd186206b
Validity
Not Before: Jan 1 14:29:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ebe08183a3eb6a64ccbbebe4956a194a1ebcd2db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:29:3c:21:3b:e5:9f:e5:47:91:07:c2:51:81:
28:f7:ce:1e:93:8c:59:8b:3b:21:6f:27:a2:9a:e3:
c4:8b:76:a0:fb:b2:73:98:f7:d7:60:65:a4:3f:51:
09:4e:7d:52:3b:f9:49:f7:d9:ca:96:00:5c:cb:45:
16:17:8f:cc:0d:ab:1a:bf:d1:e3:ed:70:f1:c5:2e:
01:24:17:6b:27:26:6e:3f:c1:46:03:6b:bc:3c:83:
01:48:16:2d:dd:24:5d:57:fc:41:97:45:4e:5b:55:
ab:33:0b:5c:88:a2:aa:d8:e0:e7:4b:b1:e9:3b:70:
e9:7c:4f:46:4d:8c:b3:54:b5:e1:ac:c1:ab:79:6e:
ff:df:d7:af:5d:9b:6d:28:7d:57:c5:14:f3:b2:b8:
be:f7:50:b7:4a:d1:c8:e6:b0:65:86:21:87:92:65:
7f:f1:b1:91:a9:c3:09:89:6a:5f:80:cc:5d:b5:02:
bb:94:17:1b:8e:c8:6f:9b:9c:86:f4:9f:2c:33:76:
84:91:fc:77:32:06:d5:03:ad:2d:1c:58:22:8f:aa:
94:3b:b2:cd:ce:61:b3:c0:04:dd:6e:84:e2:a1:43:
85:9b:59:64:bf:d3:50:4b:70:10:6a:b5:f1:76:06:
bb:a0:f1:02:79:9f:f4:1e:21:2f:e3:c5:f6:30:b2:
af:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:E0:81:83:A3:EB:6A:64:CC:BB:EB:E4:95:6A:19:4A:1E:BC:D2:DB
X509v3 Authority Key Identifier:
keyid:72:6B:35:0E:9F:4F:12:59:E2:F9:C6:09:B2:2E:65:FB:D1:86:20:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cms1Dp9PElni-cYJsi5l-9GGIGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/477c86-c7d6-4e37-bff6-a0072bac9f48/1/6-CBg6PramTMu-vklWoZSh680ts.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/477c86-c7d6-4e37-bff6-a0072bac9f48/1/cms1Dp9PElni-cYJsi5l-9GGIGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.232.188.0/24
Signature Algorithm: sha256WithRSAEncryption
54:80:1a:c7:0f:27:af:4a:3d:b3:32:06:87:a1:21:6e:0f:10:
2a:a5:d2:9a:e1:de:21:30:b9:84:b7:e8:00:79:95:19:56:8e:
3b:8f:5b:2b:1f:92:6f:62:22:d1:ff:4d:fc:dd:2f:f2:23:57:
2a:2e:63:6d:3d:b7:92:9d:88:b7:06:10:8e:29:ef:65:22:d0:
7f:f0:fb:4c:e6:b2:99:02:87:ce:1b:af:10:8a:16:8b:73:2d:
c6:31:13:62:a8:ed:68:58:a4:61:1e:c3:cd:6d:7e:00:d1:d9:
13:8b:40:39:d2:3d:c5:6e:27:1f:a3:21:ee:8e:d0:6b:44:1f:
b2:dc:b8:7b:7d:12:94:4a:91:cb:21:a5:ed:ee:37:fd:11:39:
94:45:eb:9c:f0:7f:80:b1:44:61:83:d1:f5:a3:40:56:d9:48:
7d:45:4c:98:4d:24:8e:b4:cb:ef:ca:2e:88:b6:8d:9d:22:a1:
70:a0:ef:e7:68:22:79:bf:e5:ad:87:2d:3f:c6:57:cf:c2:56:
15:f4:54:91:ff:fa:21:9e:b9:0c:a5:9d:ee:75:66:d3:27:13:
26:6a:0f:ce:79:47:5c:c0:d1:a4:b5:54:2c:e2:9f:e8:49:cf:
32:0b:52:e5:97:06:5a:76:9a:02:02:71:ba:d3:4a:7c:ab:91:
87:88:e7:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:45:33 2024 by rpki-client on console-fra.rpki-client.org