Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/b6a233-6f80-4f4e-9312-e3f49ac49560/1/6RjuiqyL9baA_ZqOgKYbhCc9DAA.roa
File: 6RjuiqyL9baA_ZqOgKYbhCc9DAA.roa (raw, json)
Hash identifier: 5sO6zM9OyTmnVU+zXDZNACm+GDCxV7MTLHN+rMGJkO0=
Subject key identifier: E9:18:EE:8A:AC:8B:F5:B6:80:FD:9A:8E:80:A6:1B:84:27:3D:0C:00
Certificate issuer: /CN=716f6d11f0ce63230181a73f85a666170f7389bd
Certificate serial: 018CC6B9144B0EBE9FEAFD9DA470F3D2ED78
Authority key identifier: 71:6F:6D:11:F0:CE:63:23:01:81:A7:3F:85:A6:66:17:0F:73:89:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cW9tEfDOYyMBgac_haZmFw9zib0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/b6a233-6f80-4f4e-9312-e3f49ac49560/1/6RjuiqyL9baA_ZqOgKYbhCc9DAA.roa
Signing time: Mon 01 Jan 2024 20:31:07 +0000
ROA not before: Mon 01 Jan 2024 20:31:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 1741
IP address blocks: 130.231.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/b6a233-6f80-4f4e-9312-e3f49ac49560/1/cW9tEfDOYyMBgac_haZmFw9zib0.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/b6a233-6f80-4f4e-9312-e3f49ac49560/1/cW9tEfDOYyMBgac_haZmFw9zib0.mft
rsync://rpki.ripe.net/repository/DEFAULT/cW9tEfDOYyMBgac_haZmFw9zib0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 07:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:14:4b:0e:be:9f:ea:fd:9d:a4:70:f3:d2:ed:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=716f6d11f0ce63230181a73f85a666170f7389bd
Validity
Not Before: Jan 1 20:31:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e918ee8aac8bf5b680fd9a8e80a61b84273d0c00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:54:13:16:3d:55:21:97:79:eb:9c:5a:bd:dc:
f7:60:04:ef:5e:75:0b:9d:8f:42:6b:78:98:6b:14:
77:b5:4d:05:96:d3:3b:bb:1e:04:d8:44:6f:83:41:
f4:7d:6a:54:03:37:c1:bb:b1:2f:3b:65:61:cc:0d:
a7:4b:37:63:23:3e:ba:f6:c5:ca:3f:09:ac:19:50:
73:ca:08:a8:db:9f:84:b8:3b:e5:a0:ab:9e:43:67:
ce:5f:99:13:b2:1f:63:58:a6:a8:31:58:b7:d0:cc:
d7:a3:bf:c9:f0:0f:ca:c1:cb:5c:a9:74:1e:12:05:
f6:fb:45:a2:58:e7:1f:6e:82:11:1c:79:99:67:00:
3b:b6:e0:05:f9:db:56:23:91:0b:4d:7a:3d:71:95:
7c:f8:43:d3:a7:9a:6f:cd:5a:ca:e6:b7:03:7f:72:
5a:6b:85:76:66:b5:af:41:67:60:f4:39:ee:17:76:
7a:1e:bb:22:96:4d:bf:78:0b:1d:fe:46:20:79:d9:
9b:16:6d:98:91:37:1f:fd:af:57:70:c0:22:c2:bc:
35:0a:b9:90:d9:af:97:ef:ae:2d:18:07:56:e4:a5:
1d:7b:05:bc:d1:71:8e:45:e1:8f:18:52:3b:30:ea:
ee:01:4f:9b:7d:c9:7f:a3:90:53:78:57:e5:9c:e3:
0c:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:18:EE:8A:AC:8B:F5:B6:80:FD:9A:8E:80:A6:1B:84:27:3D:0C:00
X509v3 Authority Key Identifier:
keyid:71:6F:6D:11:F0:CE:63:23:01:81:A7:3F:85:A6:66:17:0F:73:89:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cW9tEfDOYyMBgac_haZmFw9zib0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/b6a233-6f80-4f4e-9312-e3f49ac49560/1/6RjuiqyL9baA_ZqOgKYbhCc9DAA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/b6a233-6f80-4f4e-9312-e3f49ac49560/1/cW9tEfDOYyMBgac_haZmFw9zib0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.231.0.0/16
Signature Algorithm: sha256WithRSAEncryption
0b:d2:0f:c1:4b:70:d8:8a:e7:09:9e:c6:d5:9b:62:e3:b4:65:
b8:cd:4b:06:8e:95:61:9c:d9:8f:16:03:5b:14:c8:04:6f:a5:
90:31:43:37:31:dc:de:95:b0:36:1c:27:61:b0:9b:61:36:e1:
09:40:d4:34:6d:7b:be:ac:03:55:b0:06:84:67:55:30:61:23:
90:54:53:29:ee:2f:41:de:84:81:c5:82:19:c5:ed:af:b7:ad:
6c:13:27:f8:c1:48:e8:ac:7a:10:5d:4b:81:8b:bc:45:2a:02:
2a:0f:98:4d:e7:a8:52:72:e3:11:f7:80:c0:09:1b:27:40:4f:
57:cb:39:c8:7a:19:30:5d:f5:d7:96:d3:73:44:eb:32:13:7e:
2b:41:15:d2:87:64:c1:db:de:61:b4:55:e9:61:dc:da:d2:4d:
6c:af:a4:b1:46:e5:28:09:ef:ae:d6:72:9f:dc:6f:3e:62:ad:
76:93:0b:79:e0:7e:f0:46:16:59:db:48:8e:57:52:2d:9e:db:
09:6a:36:82:23:b2:0d:84:45:04:f9:5b:05:c6:f3:be:ad:2b:
50:a7:df:f6:b8:12:d8:cd:27:0f:fa:ab:d7:ff:29:18:b0:ae:
47:9e:8d:50:a4:3d:94:cf:5c:7e:6d:22:26:34:f6:1d:2d:5b:
2e:05:bd:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 12:41:00 2024 by rpki-client on console-ams.rpki-client.org