Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/b6XzgssuddUO2gxgLD7KQu-nSZE.roa
File: b6XzgssuddUO2gxgLD7KQu-nSZE.roa (raw, json)
Hash identifier: +m3En8RiBU9EDA5QAqo7YAqlWhNtcf3a2UXGnrRfmIY=
Subject key identifier: 6F:A5:F3:82:CB:2E:75:D5:0E:DA:0C:60:2C:3E:CA:42:EF:A7:49:91
Certificate issuer: /CN=9a48c1d8008cdc059db0b27aa9514799c06d5443
Certificate serial: 018EC2D043CDA3A8C3D89F5D0B1E68DA655C
Authority key identifier: 9A:48:C1:D8:00:8C:DC:05:9D:B0:B2:7A:A9:51:47:99:C0:6D:54:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/b6XzgssuddUO2gxgLD7KQu-nSZE.roa
Signing time: Tue 09 Apr 2024 12:23:32 +0000
ROA not before: Tue 09 Apr 2024 12:23:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56694
IP address blocks: 31.177.108.0/22 maxlen: 24
91.219.148.0/22 maxlen: 24
94.198.50.0/23 maxlen: 24
94.198.52.0/22 maxlen: 24
109.238.92.0/22 maxlen: 24
152.89.216.0/22 maxlen: 24
178.255.126.0/23 maxlen: 24
185.9.144.0/22 maxlen: 24
185.130.248.0/22 maxlen: 24
188.127.224.0/20 maxlen: 24
188.127.240.0/22 maxlen: 24
188.127.244.0/23 maxlen: 24
188.127.248.0/22 maxlen: 24
188.127.253.0/24 maxlen: 24
188.127.254.0/23 maxlen: 24
213.171.16.0/21 maxlen: 24
2a06:dd00::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 18:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:c2:d0:43:cd:a3:a8:c3:d8:9f:5d:0b:1e:68:da:65:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a48c1d8008cdc059db0b27aa9514799c06d5443
Validity
Not Before: Apr 9 12:23:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6fa5f382cb2e75d50eda0c602c3eca42efa74991
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:5b:9f:b7:f0:c5:25:31:b5:5e:46:f1:63:2b:
53:26:50:0c:6c:e5:b2:d9:21:d3:3f:09:af:16:05:
c8:25:fd:07:a5:03:fa:c2:42:39:2c:4f:a8:91:96:
d2:0d:1b:d1:91:d1:a8:cd:92:bf:c1:e3:f4:65:26:
0a:24:a3:fa:ec:7e:1e:35:b6:e4:06:8b:f3:47:d6:
b8:6f:0e:a8:f1:34:0a:f3:de:65:b4:9f:2e:58:51:
58:76:c9:3b:71:74:07:d8:94:2d:23:3b:db:0a:83:
25:7e:4f:d2:79:00:d9:b8:a8:d0:69:f1:d9:6b:54:
49:d8:36:90:d8:a4:2b:4c:1b:f0:62:69:ed:b0:1f:
c1:30:a5:4a:77:90:f8:93:f0:20:17:14:46:3c:06:
4b:31:57:d7:0e:83:84:9b:02:3e:db:55:6f:de:87:
07:63:dd:eb:42:93:a2:00:ef:72:3b:60:cd:a8:d8:
2a:4f:04:b9:ad:69:07:f8:1d:12:5b:c7:63:e4:7f:
f3:39:82:57:18:ec:47:38:85:55:65:9a:6e:21:89:
11:98:ee:14:a0:4c:81:f1:4f:6a:fa:87:31:d6:b3:
4a:f3:73:9d:1f:4e:94:0b:8f:52:2c:0c:1b:6a:b7:
90:58:60:ec:2e:f3:55:9d:f5:36:49:fa:43:6f:db:
92:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:A5:F3:82:CB:2E:75:D5:0E:DA:0C:60:2C:3E:CA:42:EF:A7:49:91
X509v3 Authority Key Identifier:
keyid:9A:48:C1:D8:00:8C:DC:05:9D:B0:B2:7A:A9:51:47:99:C0:6D:54:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/b6XzgssuddUO2gxgLD7KQu-nSZE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.177.108.0/22
91.219.148.0/22
94.198.50.0-94.198.55.255
109.238.92.0/22
152.89.216.0/22
178.255.126.0/23
185.9.144.0/22
185.130.248.0/22
188.127.224.0-188.127.245.255
188.127.248.0/22
188.127.253.0-188.127.255.255
213.171.16.0/21
IPv6:
2a06:dd00::/32
Signature Algorithm: sha256WithRSAEncryption
77:a9:30:56:a2:29:d7:e6:64:82:83:c0:50:6e:71:f8:52:d3:
b9:13:bb:98:31:d3:1f:7b:46:3e:bb:f9:a7:99:d1:2b:a1:5e:
3b:12:30:94:05:fa:fb:55:34:a0:95:e8:b9:c4:5e:50:b3:c0:
75:49:0a:25:d9:29:41:17:bd:50:c0:4c:7d:22:c8:15:53:db:
fc:e1:a2:ac:d6:d7:fa:85:bb:c6:93:2e:f4:e8:79:02:1c:a0:
d8:9b:9a:f7:44:63:e8:47:0c:72:a0:05:30:09:e1:a5:24:a5:
07:b3:9c:d6:0a:5b:dc:db:04:d9:89:03:65:06:38:59:16:50:
fe:f4:48:ce:c7:20:5b:73:16:dc:1a:fe:70:7b:71:80:37:a9:
bd:79:92:22:4f:be:21:a6:d9:47:85:12:cf:10:c4:a4:71:6c:
65:51:63:00:48:24:d3:d2:ff:b8:71:fb:89:a4:34:ed:cb:28:
e7:0e:75:ff:15:be:2b:c9:08:74:81:d8:42:85:d0:e5:e6:2e:
ef:06:75:77:09:cd:5f:19:70:0e:ea:65:f9:f4:53:2a:83:1c:
ba:ae:21:7f:cd:02:85:a3:f0:b0:c9:46:28:dd:0e:c0:8f:eb:
1d:46:7e:e5:9f:ca:a0:90:69:dc:33:4a:4a:81:a1:a8:1c:fb:
bc:be:66:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 03:03:14 2024 by rpki-client on console-fra.rpki-client.org