Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/6pNCmUqQHPzTyXVbEnjIQQZfUvY.roa
File: 6pNCmUqQHPzTyXVbEnjIQQZfUvY.roa (raw, json)
Hash identifier: p645s9VERW1Ef0opHp6vl7h5I41i7L3NWWr3wTxcUVk=
Subject key identifier: EA:93:42:99:4A:90:1C:FC:D3:C9:75:5B:12:78:C8:41:06:5F:52:F6
Certificate issuer: /CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Certificate serial: 018CC8DE3339BE81C3CB2328185052567162
Authority key identifier: CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/6pNCmUqQHPzTyXVbEnjIQQZfUvY.roa
Signing time: Tue 02 Jan 2024 06:30:54 +0000
ROA not before: Tue 02 Jan 2024 06:30:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49981
IP address blocks: 91.226.31.0/24 maxlen: 24
2a06:d641::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/zNdhWb_Z4zdSPukw898RHWuucwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/zNdhWb_Z4zdSPukw898RHWuucwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 May 2024 14:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:33:39:be:81:c3:cb:23:28:18:50:52:56:71:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Validity
Not Before: Jan 2 06:30:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ea9342994a901cfcd3c9755b1278c841065f52f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:97:2f:9c:2a:99:a5:dd:41:43:3b:18:09:f0:
07:85:a9:4e:20:7a:5b:95:5c:2d:26:e2:b3:de:43:
c6:8a:e2:fe:26:26:ff:52:97:2c:38:e9:71:18:74:
29:b2:04:3f:bc:22:2c:d5:94:79:2e:46:a7:d2:f6:
62:fe:0f:68:96:de:ba:9e:9e:a5:3a:e5:ef:dd:41:
31:10:89:86:70:c8:f9:b3:85:4b:90:32:23:09:cc:
6d:f3:10:40:3b:1f:4b:8e:b0:4b:72:31:8d:78:c5:
be:5c:6a:cd:74:5b:79:3c:9b:82:cc:7f:39:c2:ee:
79:66:2f:2d:d1:67:32:bb:bb:0a:00:48:1e:2a:b1:
51:25:f9:e0:db:ad:bf:0e:7a:57:23:f5:d0:e5:ad:
23:25:58:47:54:96:a7:38:7f:96:a7:1e:9a:b8:59:
3b:5b:d9:94:63:5c:7c:0b:73:fc:9e:e9:2c:a8:fb:
58:21:4d:8d:19:d8:56:10:a9:ae:ee:c5:ed:02:4e:
a0:c7:48:92:cf:21:42:57:57:40:05:83:4c:c6:d9:
3a:3a:96:54:a7:41:2e:47:9c:89:f8:a9:3c:7f:f7:
ae:b8:49:97:10:3f:f6:9d:85:3d:25:b1:05:b0:73:
fb:cd:4a:62:01:44:31:b9:24:1e:9f:b7:64:ed:9a:
5b:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:93:42:99:4A:90:1C:FC:D3:C9:75:5B:12:78:C8:41:06:5F:52:F6
X509v3 Authority Key Identifier:
keyid:CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/6pNCmUqQHPzTyXVbEnjIQQZfUvY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/zNdhWb_Z4zdSPukw898RHWuucwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.226.31.0/24
IPv6:
2a06:d641::/32
Signature Algorithm: sha256WithRSAEncryption
4d:28:7e:9a:49:23:d6:e1:07:47:20:be:3d:28:db:2e:27:bf:
e5:00:4a:82:51:0b:51:f5:48:9d:e4:6d:1d:de:64:14:a6:fb:
3d:fc:68:3c:b8:14:82:fc:3f:65:72:66:ad:61:ae:9f:b2:8f:
d0:86:40:26:78:1b:fe:e4:c8:9e:99:31:78:23:a5:a5:ff:ef:
ed:79:37:b2:85:c9:49:68:aa:62:aa:3c:51:39:89:95:7f:a3:
5b:14:49:60:96:e2:2b:6d:0a:12:ab:51:2c:9f:ad:dc:b1:14:
d1:9d:3d:41:ac:74:74:3f:a9:5d:2c:df:80:6d:0a:46:cd:1e:
65:ce:50:dd:9a:58:69:1d:9c:83:35:59:dd:a3:9d:72:12:82:
9a:d1:98:fd:75:89:a0:64:7d:c8:cb:c2:9d:31:02:82:29:df:
dd:db:b4:fd:16:b9:2a:8e:aa:4f:d9:0b:ea:62:72:09:2b:fc:
24:f1:0c:77:4c:81:3d:58:06:49:fd:bc:19:28:14:ca:40:81:
86:9a:89:e3:a8:51:7c:21:65:56:74:c7:c4:77:06:fb:f2:68:
23:e9:4b:58:5b:79:f0:9c:7b:75:73:ed:66:0a:d4:ce:50:c4:
0d:ec:6e:6a:c6:1c:c3:fd:18:1f:50:48:3b:42:df:3d:c1:17:
4d:56:76:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 18:37:13 2024 by rpki-client on console-fra.rpki-client.org