Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/129532-5c88-468e-b41d-fde6fb9af230/1/6LhPUI-gmyCqv6fqP-Nf6XwkQwo.roa
File: 6LhPUI-gmyCqv6fqP-Nf6XwkQwo.roa (raw, json)
Hash identifier: +EPtXUuwUzGLzsL5b26eU7EitQzi9kmFWV9fYO8XubU=
Subject key identifier: E8:B8:4F:50:8F:A0:9B:20:AA:BF:A7:EA:3F:E3:5F:E9:7C:24:43:0A
Certificate issuer: /CN=c5d76c1af8fad2ebc634ea2e23370f10c5c59d0b
Certificate serial: 018E3BC8E444E315D3983E4A6A8D32620413
Authority key identifier: C5:D7:6C:1A:F8:FA:D2:EB:C6:34:EA:2E:23:37:0F:10:C5:C5:9D:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xddsGvj60uvGNOouIzcPEMXFnQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/129532-5c88-468e-b41d-fde6fb9af230/1/6LhPUI-gmyCqv6fqP-Nf6XwkQwo.roa
Signing time: Thu 14 Mar 2024 07:06:45 +0000
ROA not before: Thu 14 Mar 2024 07:06:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47868
IP address blocks: 31.177.24.0/21 maxlen: 21
94.125.216.0/21 maxlen: 21
2a00:db00::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/129532-5c88-468e-b41d-fde6fb9af230/1/xddsGvj60uvGNOouIzcPEMXFnQs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/129532-5c88-468e-b41d-fde6fb9af230/1/xddsGvj60uvGNOouIzcPEMXFnQs.mft
rsync://rpki.ripe.net/repository/DEFAULT/xddsGvj60uvGNOouIzcPEMXFnQs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:3b:c8:e4:44:e3:15:d3:98:3e:4a:6a:8d:32:62:04:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5d76c1af8fad2ebc634ea2e23370f10c5c59d0b
Validity
Not Before: Mar 14 07:06:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e8b84f508fa09b20aabfa7ea3fe35fe97c24430a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:51:e3:eb:41:c4:e9:ae:58:29:40:07:b8:83:
a9:c8:09:1d:7f:14:4a:dd:3a:c8:26:a5:93:db:aa:
30:51:02:14:8e:94:c7:5f:0b:ec:ec:57:1e:d7:e3:
e8:6c:4e:e2:42:50:49:9b:fe:c8:20:85:f1:24:60:
78:68:b7:76:95:d2:b4:a7:10:f9:a0:b6:92:4e:82:
57:26:5a:2e:52:b8:66:b2:c7:d4:25:fd:2a:80:06:
4e:d3:59:ff:d3:47:47:32:2c:86:cb:3f:9a:8a:34:
ae:f9:5c:3e:49:14:eb:db:61:31:fb:44:9b:83:b1:
98:58:c0:1f:b9:7f:4d:0a:03:62:75:5d:e2:5b:88:
38:68:67:13:c6:0c:d4:5a:db:c8:e1:71:51:8b:e6:
ff:5e:bf:09:14:a4:7f:93:e0:72:41:05:1e:2e:4c:
d4:3d:25:88:c6:fb:75:a7:5e:04:38:38:fd:5f:d7:
38:a5:17:c5:66:5d:12:be:88:8f:82:cf:03:c8:08:
8a:c5:2f:e5:52:a9:2c:81:73:d3:88:c7:a9:0b:1a:
ec:d0:e7:5c:e3:32:0b:02:e0:fa:e3:ac:d1:73:66:
72:05:e6:ad:4e:bd:58:5d:0f:9f:39:a7:db:26:dd:
2d:ec:64:84:4c:b8:1e:f1:8f:3f:20:c3:d1:48:ee:
60:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:B8:4F:50:8F:A0:9B:20:AA:BF:A7:EA:3F:E3:5F:E9:7C:24:43:0A
X509v3 Authority Key Identifier:
keyid:C5:D7:6C:1A:F8:FA:D2:EB:C6:34:EA:2E:23:37:0F:10:C5:C5:9D:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xddsGvj60uvGNOouIzcPEMXFnQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/129532-5c88-468e-b41d-fde6fb9af230/1/6LhPUI-gmyCqv6fqP-Nf6XwkQwo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/129532-5c88-468e-b41d-fde6fb9af230/1/xddsGvj60uvGNOouIzcPEMXFnQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.177.24.0/21
94.125.216.0/21
IPv6:
2a00:db00::/32
Signature Algorithm: sha256WithRSAEncryption
48:e7:60:39:67:b0:2c:fa:fd:ee:99:0b:87:a3:d7:87:bd:0d:
9d:d4:c4:a8:86:dc:a3:b1:69:87:b1:aa:9e:38:7c:00:e0:b1:
e0:c6:61:ae:28:72:38:2d:f0:f2:3b:29:13:7c:94:80:21:a0:
13:3e:73:c4:6f:24:b1:da:a7:7f:78:1e:01:69:99:2f:aa:68:
53:e7:48:6d:76:75:63:56:ce:ab:d5:e8:f5:fb:7c:60:a0:bf:
23:a4:f9:54:ca:22:34:29:78:af:8f:86:57:f1:6c:01:64:3c:
53:19:67:c7:4a:85:0d:46:ef:55:4d:2c:7c:5b:40:61:fb:42:
5b:61:66:a1:3d:15:87:53:7d:19:59:f3:fd:0e:25:43:d7:50:
9b:68:48:48:65:50:e0:39:3c:a7:ff:3f:a1:70:03:d9:da:07:
33:63:3e:8d:a5:78:ca:a2:5f:b7:4f:f0:39:ae:24:5f:61:ec:
4c:b2:df:a4:7c:09:94:fe:36:f2:db:fb:f2:7f:87:35:5a:15:
42:67:fc:40:5d:38:a0:d4:4c:89:61:8d:7b:30:bb:cc:8e:a9:
bf:d7:fb:13:49:33:f9:0d:7e:a0:45:9e:f4:81:d6:b8:ad:7a:
5b:6b:b9:ca:6c:0e:ea:99:a2:40:c7:ef:4f:9d:16:eb:28:6d:
0c:f9:ac:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 12:43:21 2024 by rpki-client on console-ams.rpki-client.org