Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/M6-7-i-NIoEs0ICl5g8pYJCyo8k.roa
File: M6-7-i-NIoEs0ICl5g8pYJCyo8k.roa (raw, json)
Hash identifier: lIp+LRUk28yuZ3YLsQ2SIs73xwfU06/pKi3c2Ra/3co=
Subject key identifier: 33:AF:BB:FA:2F:8D:22:81:2C:D0:80:A5:E6:0F:29:60:90:B2:A3:C9
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 018CC49397C15B9750F2E0EC4062434B39B9
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/M6-7-i-NIoEs0ICl5g8pYJCyo8k.roa
Signing time: Mon 01 Jan 2024 10:30:56 +0000
ROA not before: Mon 01 Jan 2024 10:30:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2914
IP address blocks: 217.67.74.0/23 maxlen: 24
217.67.72.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 20:58:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:97:c1:5b:97:50:f2:e0:ec:40:62:43:4b:39:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Jan 1 10:30:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=33afbbfa2f8d22812cd080a5e60f296090b2a3c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:4c:8a:6f:b9:e7:dc:1b:51:a8:54:05:54:25:
ff:f3:c0:6e:fc:02:47:4e:15:07:a9:a9:49:f8:f9:
14:91:b6:a2:c3:6b:fd:12:2f:48:0c:91:e3:cb:98:
97:43:6f:ba:62:7c:2c:62:1c:de:34:9e:ce:ff:86:
fe:3f:33:0c:ea:bd:4e:64:d0:11:cb:b7:8e:de:6a:
89:b3:a0:06:b5:e7:da:f9:a9:e9:96:65:74:7b:d3:
ac:eb:89:4d:84:72:cf:5c:e8:a3:2d:e3:27:eb:b3:
30:6d:e0:c8:5d:75:d4:8a:65:95:f8:41:bd:92:71:
24:98:d3:f7:d0:40:c2:c3:75:61:ca:81:fc:0d:52:
a1:7d:a2:27:57:39:de:7d:02:1c:2a:5f:01:4a:70:
7b:30:ab:65:08:bb:26:b9:b9:2b:56:4d:9c:82:49:
76:21:64:4a:27:4b:61:96:13:a0:a5:35:6e:43:57:
b2:e3:12:01:6e:32:3e:92:ed:a1:35:8f:95:38:69:
7c:63:d2:81:18:d2:ef:f2:4a:0e:43:55:9e:7f:ee:
51:b7:a2:d3:f2:0f:4f:c4:64:66:b9:00:3d:af:0e:
48:79:83:a6:a8:de:d1:73:3e:5a:05:04:ed:4b:67:
cb:a5:4a:5a:8a:b9:c8:eb:d7:20:63:b2:18:46:24:
b6:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:AF:BB:FA:2F:8D:22:81:2C:D0:80:A5:E6:0F:29:60:90:B2:A3:C9
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/M6-7-i-NIoEs0ICl5g8pYJCyo8k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.67.72.0/22
Signature Algorithm: sha256WithRSAEncryption
5d:a2:d3:25:4c:03:97:40:c3:09:7c:7d:6b:d3:ef:5f:df:b7:
2d:aa:9f:ca:a7:f1:78:ce:03:35:b5:99:8f:5e:10:68:6d:13:
c2:c5:dd:03:c4:4e:d2:6a:7c:3b:8d:af:f1:db:fc:63:e4:77:
fb:f2:dd:63:a8:14:37:72:89:49:a1:84:8e:cb:c0:d1:b7:a9:
07:28:01:86:0d:cb:83:2e:bd:55:5b:4e:3a:c8:8e:5a:28:a2:
30:99:ac:17:0f:0a:77:32:38:0c:ed:a4:61:a5:6d:78:ad:e9:
4f:5c:ba:3e:98:7e:5f:ea:31:b2:72:d9:b6:25:14:5a:11:77:
68:f5:53:51:e3:75:69:3b:79:29:6b:31:2d:c5:ca:cf:bd:17:
18:a3:ac:f0:05:dc:5a:f3:db:d2:59:72:68:00:57:52:69:b0:
22:df:28:36:ef:8d:fd:12:9b:35:e5:42:bf:f0:55:64:bc:a4:
42:a0:33:fa:73:18:87:57:e3:08:39:6d:81:17:1f:eb:a5:66:
79:a7:51:23:ea:bc:c6:27:0d:95:22:6a:e7:24:d0:ed:b6:7f:
ae:cf:68:29:05:82:11:15:0f:15:51:71:92:3f:c0:d3:fc:91:
23:39:1f:b1:f0:d1:d0:51:9b:29:c2:8f:48:b7:ed:ad:23:d6:
0b:ae:c3:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 00:19:56 2024 by rpki-client on console-ams.rpki-client.org