Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/6XuRk3h4U9PjA-R8zLwtDzqexDU.roa
File: 6XuRk3h4U9PjA-R8zLwtDzqexDU.roa (raw, json)
Hash identifier: M7bnEZfKQntFBpKQCooYtact+2IXo78YsVAwc66ibuY=
Subject key identifier: E9:7B:91:93:78:78:53:D3:E3:03:E4:7C:CC:BC:2D:0F:3A:9E:C4:35
Certificate issuer: /CN=6eab53640b0931924b73f760925845150a6ccca5
Certificate serial: 018CC4930BC81277324797FF49E3DC6C520E
Authority key identifier: 6E:AB:53:64:0B:09:31:92:4B:73:F7:60:92:58:45:15:0A:6C:CC:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bqtTZAsJMZJLc_dgklhFFQpszKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/6XuRk3h4U9PjA-R8zLwtDzqexDU.roa
Signing time: Mon 01 Jan 2024 10:30:20 +0000
ROA not before: Mon 01 Jan 2024 10:30:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41557
IP address blocks: 188.117.204.0/22 maxlen: 22
188.117.212.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/bqtTZAsJMZJLc_dgklhFFQpszKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Jun 2024 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:0b:c8:12:77:32:47:97:ff:49:e3:dc:6c:52:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6eab53640b0931924b73f760925845150a6ccca5
Validity
Not Before: Jan 1 10:30:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e97b9193787853d3e303e47cccbc2d0f3a9ec435
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:54:8c:9d:09:4c:62:c5:f0:ed:8b:e2:a2:42:
15:30:1c:06:ed:57:21:f7:01:04:16:17:2d:8e:b4:
3f:fb:99:e2:de:a8:ac:da:f0:7b:5e:1f:06:7c:ee:
27:0a:ba:e1:a5:78:17:14:8c:0d:e3:63:b2:da:c2:
23:ed:de:ed:7b:11:7a:98:bb:51:dc:e6:71:fe:60:
00:c0:d5:12:bf:3d:72:fd:dd:e5:dc:9e:01:c6:f9:
ad:ed:55:8d:a3:1f:4f:0e:42:91:de:e9:83:ce:bb:
97:07:3d:b8:b0:40:e5:b1:77:fc:65:96:9a:54:cf:
09:c9:9b:5f:82:bf:71:f1:d4:f2:b5:b7:2c:88:f4:
67:17:d5:5f:c9:8c:0c:a7:b3:09:27:da:40:6a:c8:
38:05:3c:5a:85:71:4b:1d:f0:4c:28:d2:c4:d6:e8:
bc:23:56:cb:97:fc:27:46:45:b9:f2:73:90:93:9a:
df:82:a7:90:e1:94:68:12:2d:4d:49:7a:79:8e:26:
4f:2c:c7:5d:be:de:54:d0:d0:66:77:0f:06:b5:18:
99:e3:ff:a6:8f:c1:1b:07:40:5c:29:a4:50:ee:7e:
e8:57:ce:f4:3e:21:6d:14:6f:19:ad:07:2a:35:27:
ba:7e:7c:c1:dd:e3:a2:40:9b:87:17:a1:b5:8a:20:
b1:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:7B:91:93:78:78:53:D3:E3:03:E4:7C:CC:BC:2D:0F:3A:9E:C4:35
X509v3 Authority Key Identifier:
keyid:6E:AB:53:64:0B:09:31:92:4B:73:F7:60:92:58:45:15:0A:6C:CC:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bqtTZAsJMZJLc_dgklhFFQpszKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/6XuRk3h4U9PjA-R8zLwtDzqexDU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.117.204.0/22
188.117.212.0/22
Signature Algorithm: sha256WithRSAEncryption
51:fc:f1:09:0c:02:2e:c3:7c:4b:3f:fd:ac:aa:f0:58:b2:48:
0e:6d:6a:ce:38:00:c2:6d:25:37:98:1c:06:c3:73:e7:13:1e:
de:b9:e3:40:ea:c0:94:24:ac:a2:55:06:32:e6:0b:f6:25:76:
db:48:be:5e:16:29:ea:c6:ce:44:fa:26:cb:07:ba:84:90:31:
a8:2e:3b:bc:ee:49:d1:bd:71:b0:b0:84:8d:29:10:bf:2d:2d:
6e:0a:3a:9e:e8:d6:13:8f:fa:3a:18:ef:0b:7e:0d:35:6f:24:
dd:e3:e5:5f:00:04:48:e3:f4:4b:ef:5e:d9:57:85:f7:08:a0:
d9:46:f8:0e:91:9a:7b:3d:d6:12:8e:65:be:e7:30:7b:5d:7c:
c5:1e:00:b8:c0:c5:3d:f5:f7:f6:f7:67:30:bf:eb:cb:c4:9a:
f1:73:a7:42:a3:ef:1a:2c:0d:e8:f5:b5:bc:1a:69:da:c3:b8:
7b:95:15:e9:4f:1a:6d:57:c8:1e:d6:24:e2:64:26:90:bc:eb:
27:b4:d0:a5:18:b5:24:03:24:e4:8e:87:f5:cb:7a:49:49:65:
d7:8a:b5:e4:88:36:df:7d:7b:61:62:cb:a0:04:4e:e4:12:b9:
d3:99:ba:28:d1:e8:7b:d4:4b:f9:1e:e3:90:6c:95:e4:59:fb:
de:1f:ba:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 11:31:42 2024 by rpki-client on console-fra.rpki-client.org