Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/c0e7a1-06f5-4ca0-8210-ea6ed29cab5e/1/6C4cGy_ItOeQ82_BFtVrNtB2FMk.roa
File: 6C4cGy_ItOeQ82_BFtVrNtB2FMk.roa (raw, json)
Hash identifier: zFW84UCq1i6Pbq4xXEsPbjhrXjjzFe2Dg1+TCYTEaQA=
Subject key identifier: E8:2E:1C:1B:2F:C8:B4:E7:90:F3:6F:C1:16:D5:6B:36:D0:76:14:C9
Certificate issuer: /CN=61b824b85aba7bc3512b1214b385de570fb294bf
Certificate serial: 018CC5DC4C219C017BC8541C674A218F8B74
Authority key identifier: 61:B8:24:B8:5A:BA:7B:C3:51:2B:12:14:B3:85:DE:57:0F:B2:94:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbgkuFq6e8NRKxIUs4XeVw-ylL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/c0e7a1-06f5-4ca0-8210-ea6ed29cab5e/1/6C4cGy_ItOeQ82_BFtVrNtB2FMk.roa
Signing time: Mon 01 Jan 2024 16:29:58 +0000
ROA not before: Mon 01 Jan 2024 16:29:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51644
IP address blocks: 91.199.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/c0e7a1-06f5-4ca0-8210-ea6ed29cab5e/1/YbgkuFq6e8NRKxIUs4XeVw-ylL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/c0e7a1-06f5-4ca0-8210-ea6ed29cab5e/1/YbgkuFq6e8NRKxIUs4XeVw-ylL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbgkuFq6e8NRKxIUs4XeVw-ylL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 Nov 2024 17:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:4c:21:9c:01:7b:c8:54:1c:67:4a:21:8f:8b:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b824b85aba7bc3512b1214b385de570fb294bf
Validity
Not Before: Jan 1 16:29:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e82e1c1b2fc8b4e790f36fc116d56b36d07614c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:33:ed:7a:76:bf:23:fa:c7:2e:9a:a7:da:45:
c9:cc:a3:7c:14:89:a3:7d:b2:85:7e:eb:3e:44:24:
4e:f9:4d:a0:d3:73:31:91:eb:14:45:d9:c2:f2:3e:
74:3e:57:b8:22:06:ef:b6:27:6a:ac:d0:a9:de:f9:
84:77:0c:ec:41:d9:09:23:0e:65:0d:fa:d3:d2:4e:
64:f1:dd:4d:af:10:bc:9d:80:9e:1e:e7:f1:ea:7b:
47:90:9a:14:67:75:79:dd:d9:e6:77:de:c4:9b:7d:
b3:bf:b5:59:74:d2:f0:b8:fe:e9:ca:94:a1:76:79:
84:80:ec:5c:c4:21:c5:48:cb:9f:6d:95:6a:f6:36:
1d:49:91:e0:5f:9c:e0:c2:42:95:9f:7a:31:e2:7e:
c8:64:12:ee:29:35:1f:92:0b:66:d8:56:22:38:29:
ed:d4:5a:9f:4e:5c:9a:58:62:30:23:f0:3d:c8:4a:
d8:2e:c1:1d:4d:c4:a2:a1:e0:d7:4b:c4:00:58:18:
8c:a9:e5:62:15:8f:2c:dc:9c:44:96:cd:d8:65:6d:
3f:f7:5e:92:59:c6:94:51:6e:31:63:72:d0:1e:8a:
54:6d:d7:0e:c8:31:bf:dc:60:f4:9e:b5:1f:68:e8:
99:f3:b1:26:cc:ac:57:48:aa:47:d9:23:16:26:d6:
f4:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:2E:1C:1B:2F:C8:B4:E7:90:F3:6F:C1:16:D5:6B:36:D0:76:14:C9
X509v3 Authority Key Identifier:
keyid:61:B8:24:B8:5A:BA:7B:C3:51:2B:12:14:B3:85:DE:57:0F:B2:94:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbgkuFq6e8NRKxIUs4XeVw-ylL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c0e7a1-06f5-4ca0-8210-ea6ed29cab5e/1/6C4cGy_ItOeQ82_BFtVrNtB2FMk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c0e7a1-06f5-4ca0-8210-ea6ed29cab5e/1/YbgkuFq6e8NRKxIUs4XeVw-ylL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.61.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:16:27:97:f3:9b:17:52:be:2f:da:94:d3:69:a3:3e:61:bd:
98:51:55:70:a4:74:46:b6:76:e8:2d:6b:50:69:af:e2:f4:af:
29:41:08:f3:ec:56:90:25:e9:d6:48:1f:ea:e1:e6:09:fd:16:
90:98:08:61:02:44:1e:61:90:e6:a3:d6:b4:77:cc:13:8f:c1:
20:bc:a8:89:c8:db:7c:81:a4:6b:1b:06:27:45:4d:37:6d:31:
2f:f4:02:85:ef:f1:d3:4e:9b:76:69:14:15:08:df:80:94:d9:
b4:01:dd:fa:74:11:ba:ef:97:5a:8b:e8:0f:74:46:df:d8:ff:
84:64:f8:6f:82:9e:ee:92:6c:d5:39:ae:c1:d0:6d:56:18:dd:
ed:07:cc:9a:2d:4e:67:b2:e6:8a:8d:a7:96:89:ed:19:e5:ad:
cf:62:1c:c2:93:6b:3b:0d:72:73:d1:4d:6f:b7:73:96:db:ea:
7a:92:4d:90:38:37:22:47:d2:25:86:cc:0d:f1:39:95:72:be:
20:31:1c:7d:9f:75:ef:29:56:7c:8e:13:ea:86:eb:b6:6d:1b:
a2:ee:fb:b9:58:d6:db:6d:87:25:e6:d4:de:bf:9e:f3:05:46:
94:33:a4:48:9d:cc:c0:ed:4e:fb:27:b8:f1:ce:b6:24:24:04:
0a:25:f0:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 15 20:41:35 2024 by rpki-client on console-ams.rpki-client.org