Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/2fbba7-ea0e-4089-9727-c33372c9d507/1/6p6iUBMdnzDCAORLwUTd5uFCNCk.roa
File: 6p6iUBMdnzDCAORLwUTd5uFCNCk.roa (raw, json)
Hash identifier: CKnLSIsxd/l3ITJ7D4ULWd+GOTyxtiJxQI2N04kGNqU=
Subject key identifier: EA:9E:A2:50:13:1D:9F:30:C2:00:E4:4B:C1:44:DD:E6:E1:42:34:29
Certificate issuer: /CN=9f36d08a3cd8a42f46a2c96dfd72ed8cee279477
Certificate serial: 018F0F949C609C5D14ED8B8150EFAE1651B1
Authority key identifier: 9F:36:D0:8A:3C:D8:A4:2F:46:A2:C9:6D:FD:72:ED:8C:EE:27:94:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nzbQijzYpC9Goslt_XLtjO4nlHc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/2fbba7-ea0e-4089-9727-c33372c9d507/1/6p6iUBMdnzDCAORLwUTd5uFCNCk.roa
Signing time: Wed 24 Apr 2024 10:09:08 +0000
ROA not before: Wed 24 Apr 2024 10:09:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50467
IP address blocks: 31.134.48.0/20 maxlen: 20
46.151.16.0/21 maxlen: 21
87.239.168.0/21 maxlen: 21
91.221.88.0/23 maxlen: 23
109.95.112.0/21 maxlen: 21
109.95.144.0/21 maxlen: 21
178.218.224.0/20 maxlen: 20
178.218.228.0/24 maxlen: 24
185.235.76.0/24 maxlen: 24
193.106.208.0/23 maxlen: 23
193.200.133.0/24 maxlen: 24
2a0c:db00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/2fbba7-ea0e-4089-9727-c33372c9d507/1/nzbQijzYpC9Goslt_XLtjO4nlHc.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/2fbba7-ea0e-4089-9727-c33372c9d507/1/nzbQijzYpC9Goslt_XLtjO4nlHc.mft
rsync://rpki.ripe.net/repository/DEFAULT/nzbQijzYpC9Goslt_XLtjO4nlHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:0f:94:9c:60:9c:5d:14:ed:8b:81:50:ef:ae:16:51:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f36d08a3cd8a42f46a2c96dfd72ed8cee279477
Validity
Not Before: Apr 24 10:09:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ea9ea250131d9f30c200e44bc144dde6e1423429
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:30:eb:3d:34:4c:25:96:24:87:74:d3:de:7f:
f7:35:84:24:e7:a2:45:ca:09:30:35:95:71:12:83:
c1:a4:5f:44:71:6e:18:53:a1:15:fa:23:53:78:65:
25:23:fb:84:27:14:46:70:4e:92:5e:a6:ce:d2:f9:
73:50:c2:3a:51:92:36:0a:36:da:f9:58:f3:a9:8c:
3e:39:f2:12:62:b4:9b:09:ef:04:01:cf:92:d7:b8:
cd:e6:18:5e:00:5e:b1:1c:e4:73:f4:a2:bb:78:c5:
d5:fa:d7:e5:1c:06:94:bc:cf:e7:72:2a:3f:c4:33:
4a:28:83:cd:65:62:86:fc:3f:22:b0:c8:20:30:15:
06:62:39:81:c5:7c:59:2f:00:37:f4:7e:61:7e:24:
30:66:17:37:4f:01:28:cc:d8:76:a4:3d:ce:cf:08:
eb:c5:46:be:b7:b4:fe:e6:e4:46:27:1c:99:a3:07:
ea:1f:90:91:fc:51:fe:70:8f:6d:1b:ae:bf:7c:6d:
23:b7:0b:f1:28:fe:eb:19:81:38:de:13:e5:62:c9:
c3:41:5f:f5:d9:b8:b8:4b:98:a4:81:57:f1:e9:fd:
38:09:84:18:83:ac:a9:3f:b1:71:7a:22:37:d7:ad:
21:62:2e:df:c6:94:d4:0e:67:6f:a4:eb:69:9e:85:
46:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:9E:A2:50:13:1D:9F:30:C2:00:E4:4B:C1:44:DD:E6:E1:42:34:29
X509v3 Authority Key Identifier:
keyid:9F:36:D0:8A:3C:D8:A4:2F:46:A2:C9:6D:FD:72:ED:8C:EE:27:94:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nzbQijzYpC9Goslt_XLtjO4nlHc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2fbba7-ea0e-4089-9727-c33372c9d507/1/6p6iUBMdnzDCAORLwUTd5uFCNCk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2fbba7-ea0e-4089-9727-c33372c9d507/1/nzbQijzYpC9Goslt_XLtjO4nlHc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.134.48.0/20
46.151.16.0/21
87.239.168.0/21
91.221.88.0/23
109.95.112.0/21
109.95.144.0/21
178.218.224.0/20
185.235.76.0/24
193.106.208.0/23
193.200.133.0/24
IPv6:
2a0c:db00::/29
Signature Algorithm: sha256WithRSAEncryption
34:c8:65:3f:af:32:53:4c:e2:d4:4b:10:5a:62:5b:f0:34:2a:
79:6b:3c:1f:d4:42:6f:39:bf:8f:d4:3d:28:ea:3e:b0:24:cd:
98:44:42:c0:52:31:e7:89:fe:ea:2d:30:5c:ec:0e:71:64:e7:
8e:07:1b:51:48:42:d0:2f:1f:90:ed:a5:6a:2d:a2:01:73:54:
ae:9e:e6:38:b4:9f:2f:23:e6:10:9c:79:3a:70:6a:d6:d6:23:
55:7d:15:dd:29:a7:bb:8c:79:14:9b:2d:5a:36:a0:fe:29:99:
00:ec:34:f8:60:ff:80:ab:cc:4e:7b:cb:18:4a:d2:9b:72:04:
09:95:c1:83:35:27:cd:bb:41:c0:8a:c8:89:86:2d:4d:00:13:
66:14:5e:99:3c:11:44:13:57:d7:df:bc:5d:f7:12:48:05:b3:
18:7e:e7:85:0d:7a:d5:58:bb:f5:09:43:a8:3f:43:a6:a5:89:
06:68:cc:08:62:56:fe:af:6c:ab:ae:00:0a:0e:64:d8:d8:e9:
8e:61:f2:74:60:98:68:3e:31:20:56:26:d2:c8:93:49:a5:4b:
d3:9e:2b:2e:f7:ee:ba:11:6b:77:cf:a7:a1:6c:d8:08:45:e6:
72:5d:87:77:b7:d0:96:6d:04:aa:a1:86:c7:13:c0:b7:28:25:
c3:75:47:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 17:11:43 2024 by rpki-client on console-fra.rpki-client.org