Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/6okKzfTezEQ7gvuDA2dShIEiEAE.roa
File: 6okKzfTezEQ7gvuDA2dShIEiEAE.roa (raw, json)
Hash identifier: At8kJkWwcNFQH0tfiv+1oDDrsuCW/3XglWD0SrPvWJY=
Subject key identifier: EA:89:0A:CD:F4:DE:CC:44:3B:82:FB:83:03:67:52:84:81:22:10:01
Certificate issuer: /CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Certificate serial: 018CF9C5D3AABBE74CD82081CB6CFE7B46D9
Authority key identifier: 6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/6okKzfTezEQ7gvuDA2dShIEiEAE.roa
Signing time: Thu 11 Jan 2024 18:25:40 +0000
ROA not before: Thu 11 Jan 2024 18:25:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200296
IP address blocks: 188.212.96.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Jun 2024 23:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:f9:c5:d3:aa:bb:e7:4c:d8:20:81:cb:6c:fe:7b:46:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Validity
Not Before: Jan 11 18:25:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ea890acdf4decc443b82fb830367528481221001
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:2f:6f:ec:be:18:ec:24:71:0a:fb:4f:1f:64:
6f:78:ab:f4:06:b7:a9:6a:b9:54:ac:5f:07:c5:ad:
9e:51:be:66:e6:ee:6c:50:5f:74:78:69:c4:38:22:
c6:c9:8f:da:bd:3c:49:ef:f4:e3:0c:7e:d5:69:cb:
82:09:c8:73:c8:6e:58:2b:23:25:f4:0c:d1:4e:b1:
ac:08:db:c9:52:71:62:4b:ce:52:8b:40:59:e9:8b:
83:32:cc:b9:dd:4d:ce:c7:87:d9:d4:aa:5e:a9:28:
b6:09:88:df:57:8f:1b:49:6e:01:19:c3:96:27:2d:
a3:e3:b8:5b:89:98:c9:06:d2:24:55:64:84:fd:ba:
21:dc:8b:cb:ac:73:bf:26:0b:a2:29:e1:c9:d0:ae:
e7:43:90:4b:03:1b:21:a9:ff:f4:41:51:64:e1:ca:
a5:9d:51:7b:1c:73:9c:b2:a4:a6:51:11:15:bf:76:
23:89:89:c1:a0:eb:ab:0c:c8:5d:96:30:4f:ee:3c:
51:ce:01:35:f2:6f:55:76:a1:a6:45:9b:94:a7:10:
60:57:c4:82:19:dd:75:e4:e5:74:a5:e6:18:49:40:
25:94:05:6a:5e:8a:ef:19:24:93:1b:c2:28:f8:ab:
74:da:3a:da:4b:4b:3e:43:53:61:bd:76:21:e6:b5:
db:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:89:0A:CD:F4:DE:CC:44:3B:82:FB:83:03:67:52:84:81:22:10:01
X509v3 Authority Key Identifier:
keyid:6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/6okKzfTezEQ7gvuDA2dShIEiEAE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.212.96.0/24
Signature Algorithm: sha256WithRSAEncryption
54:77:85:fe:e2:33:ef:75:9f:a3:24:5d:de:c3:36:d1:64:6d:
eb:72:ef:59:0a:35:df:75:5e:b9:13:85:67:64:7e:28:20:e1:
73:26:0c:9e:53:9f:30:a4:72:2e:9a:f5:26:31:e0:7f:94:df:
62:63:3d:46:03:c0:be:6b:48:be:3a:dc:81:f7:67:d2:74:49:
43:6a:2e:d3:0c:21:ba:42:5e:aa:08:7e:c3:74:9c:e6:be:83:
56:14:cc:17:90:80:07:32:69:ef:55:88:27:8f:4d:9e:ca:17:
9f:c8:ba:42:e4:e9:da:a2:2e:94:c3:90:3a:46:ad:99:87:c2:
c3:19:33:0c:24:2b:a4:71:c5:67:d0:67:b2:2c:fb:b8:7e:a1:
ee:6e:bb:b7:4a:ba:5b:ae:67:38:2d:db:2e:25:bb:c1:85:a3:
94:57:74:1f:24:2a:5f:7d:39:5b:8c:01:01:05:ec:f7:78:1a:
c4:be:ad:7a:a8:e5:da:b8:0f:9f:42:6d:94:62:85:29:9d:83:
5d:64:70:99:4f:2f:29:56:39:d5:a4:5b:b9:6f:70:74:14:ab:
ef:b9:50:95:e1:90:7a:3a:38:4e:a4:ef:29:7d:78:cd:a9:66:
86:dd:66:74:72:85:3e:ac:74:d6:59:28:1d:f8:de:4c:cd:1d:
27:85:68:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 08:45:15 2024 by rpki-client on console-ams.rpki-client.org