Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/by_xlg6ECU-5X4HBOx1TO9KSpvw.roa
File: by_xlg6ECU-5X4HBOx1TO9KSpvw.roa (raw, json)
Hash identifier: Ki8FevdVrBu3ikQ9UakfgQuYS1ALt9A3/SJKjhOHUeo=
Subject key identifier: 6F:2F:F1:96:0E:84:09:4F:B9:5F:81:C1:3B:1D:53:3B:D2:92:A6:FC
Certificate issuer: /CN=408af485b4fd0f03717cd4a709ef11c61d3ef46e
Certificate serial: 0191EA5C8AF728A8D67B9CD6FC1219C66DE8
Authority key identifier: 40:8A:F4:85:B4:FD:0F:03:71:7C:D4:A7:09:EF:11:C6:1D:3E:F4:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/by_xlg6ECU-5X4HBOx1TO9KSpvw.roa
Signing time: Fri 13 Sep 2024 07:50:19 +0000
ROA not before: Fri 13 Sep 2024 07:50:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5606
IP address blocks: 46.102.144.0/22 maxlen: 22
89.33.236.0/23 maxlen: 23
89.45.168.0/21 maxlen: 21
89.46.6.0/24 maxlen: 24
93.115.112.0/21 maxlen: 21
93.119.152.0/24 maxlen: 24
93.119.153.0/24 maxlen: 24
185.171.186.0/24 maxlen: 24
195.246.242.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.mft
rsync://rpki.ripe.net/repository/DEFAULT/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 17:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:ea:5c:8a:f7:28:a8:d6:7b:9c:d6:fc:12:19:c6:6d:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=408af485b4fd0f03717cd4a709ef11c61d3ef46e
Validity
Not Before: Sep 13 07:50:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6f2ff1960e84094fb95f81c13b1d533bd292a6fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:7a:60:1e:7d:33:e1:8a:40:4f:e4:a9:8c:ae:
04:d1:1f:ff:e1:09:db:2b:6b:ea:67:aa:68:10:bf:
79:ee:c5:d0:34:a3:19:77:97:44:30:cc:be:50:98:
11:70:42:28:3c:33:8b:f2:dd:3b:ed:ea:d6:df:44:
0c:76:74:d6:e0:3e:e3:18:93:5f:dd:88:6f:6c:9c:
81:e4:d6:4f:54:14:96:ca:6e:05:b7:3e:2a:c9:00:
4b:b7:d9:d2:ba:82:23:2e:3a:be:9a:83:b8:9f:3b:
4f:23:3a:b2:4a:d0:40:ec:0a:cb:37:22:52:64:49:
09:fe:b5:64:c6:ab:8a:30:e1:a7:3b:25:ff:af:db:
43:31:ba:fd:d5:b7:7f:88:5c:98:0b:4a:2d:d6:80:
2b:f0:47:65:dd:d1:48:b7:c7:49:ac:c1:3c:64:9a:
34:d3:80:2a:15:a5:8f:b8:65:4c:0e:e8:0e:9e:02:
23:b6:22:08:77:6f:e0:34:1b:4c:03:d4:35:76:59:
4d:c9:db:97:84:b3:53:7c:5a:89:9d:38:ff:00:ab:
3f:04:69:37:b7:c1:05:9e:7e:8f:81:b4:18:91:1b:
41:09:ca:aa:79:b2:49:c7:79:6b:1d:7f:d8:7f:4e:
a3:2e:12:b8:8f:8e:2a:9e:d7:8d:2f:a0:d0:fe:53:
63:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:2F:F1:96:0E:84:09:4F:B9:5F:81:C1:3B:1D:53:3B:D2:92:A6:FC
X509v3 Authority Key Identifier:
keyid:40:8A:F4:85:B4:FD:0F:03:71:7C:D4:A7:09:EF:11:C6:1D:3E:F4:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/by_xlg6ECU-5X4HBOx1TO9KSpvw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.102.144.0/22
89.33.236.0/23
89.45.168.0/21
89.46.6.0/24
93.115.112.0/21
93.119.152.0/23
185.171.186.0/24
195.246.242.0/23
Signature Algorithm: sha256WithRSAEncryption
05:88:e2:df:3f:a2:28:52:20:7b:ab:8a:f7:86:a5:50:0e:fc:
8a:64:1e:9a:e5:98:01:e3:5a:db:fd:d6:56:89:6a:2a:cd:41:
5d:fa:86:51:0d:30:5c:ed:37:e5:68:d7:fb:6f:a3:b4:2c:96:
93:95:a9:f4:f9:7b:ba:dc:ee:f5:68:e9:d1:13:b6:32:36:b6:
49:af:d4:a8:84:57:1c:c5:8c:e4:8d:d2:6e:b8:04:e6:c4:27:
d8:85:46:ce:57:16:c5:27:90:ce:1a:ad:6c:65:0f:1d:ee:ce:
ec:eb:8d:f9:a2:c1:5e:6f:0b:8b:30:2f:18:2a:42:9c:25:9e:
d6:4b:8f:af:9a:8a:c1:bb:00:05:f7:c0:7a:92:b1:56:cd:5f:
c5:e8:49:d1:e9:c5:7b:e3:34:4e:01:07:c2:86:07:d4:d5:a1:
e2:0e:88:65:d2:9f:29:7c:35:68:36:c2:46:ae:c3:27:b1:1f:
aa:aa:04:f3:4d:1e:3f:ec:61:45:b7:2d:ea:df:fc:3e:c6:92:
c4:50:d5:25:2f:d9:e0:ce:58:a8:7f:5f:a1:66:24:dc:56:c4:
1e:40:29:a9:42:52:69:d6:dd:52:82:ba:e6:91:96:8b:42:2e:
12:9e:fd:c7:62:21:d2:28:08:96:20:de:f2:ec:5a:21:70:a9:
87:aa:9e:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:30:21 2024 by rpki-client on console-ams.rpki-client.org