Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/6FOTHgnqqdYuZaZjvYZmWMxKwOQ.roa
File: 6FOTHgnqqdYuZaZjvYZmWMxKwOQ.roa (raw, json)
Hash identifier: nhpkk4X9x4ifdENDQGkoSBKIoluafqQAmAYspX3KAzM=
Subject key identifier: E8:53:93:1E:09:EA:A9:D6:2E:65:A6:63:BD:86:66:58:CC:4A:C0:E4
Certificate issuer: /CN=dede91a0fb1f4dd17900d06db6e88336f78b5c05
Certificate serial: 018F9FB30D8F36E468A4406C432C81412A90
Authority key identifier: DE:DE:91:A0:FB:1F:4D:D1:79:00:D0:6D:B6:E8:83:36:F7:8B:5C:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3t6RoPsfTdF5ANBttuiDNveLXAU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/6FOTHgnqqdYuZaZjvYZmWMxKwOQ.roa
Signing time: Wed 22 May 2024 09:47:42 +0000
ROA not before: Wed 22 May 2024 09:47:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215061
IP address blocks: 193.28.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/3t6RoPsfTdF5ANBttuiDNveLXAU.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/3t6RoPsfTdF5ANBttuiDNveLXAU.mft
rsync://rpki.ripe.net/repository/DEFAULT/3t6RoPsfTdF5ANBttuiDNveLXAU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:9f:b3:0d:8f:36:e4:68:a4:40:6c:43:2c:81:41:2a:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dede91a0fb1f4dd17900d06db6e88336f78b5c05
Validity
Not Before: May 22 09:47:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e853931e09eaa9d62e65a663bd866658cc4ac0e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:92:21:7b:cf:ee:93:ca:69:2b:5b:ce:7f:eb:
56:68:f0:e8:e3:ae:87:4b:69:04:cd:9c:dc:34:f1:
69:bd:54:56:92:6f:8c:a9:86:fa:1f:31:37:29:6d:
77:cd:17:39:f9:c1:2c:2b:39:08:34:72:1e:65:ae:
89:93:41:9f:79:7d:c6:ff:a0:fd:e5:20:fc:fa:5f:
e7:81:3d:3d:4b:07:19:03:44:e6:50:cf:40:96:b4:
0c:12:0b:ba:7a:e9:e9:6c:12:4c:5f:04:d3:02:1d:
85:83:8a:15:63:22:6e:e1:de:22:91:83:54:69:5f:
71:07:7d:0c:72:0e:37:25:46:e5:d1:0f:c4:b1:d4:
6d:63:4e:d9:65:a2:9d:21:80:ec:32:ee:83:1d:eb:
0c:62:2d:65:bd:f1:a8:38:74:17:f6:06:79:30:b1:
16:8e:52:ef:8f:7e:bb:41:87:94:fb:38:40:70:f5:
09:2b:6e:8d:e4:33:c4:ac:da:12:75:47:3a:23:4a:
62:0a:c0:bf:65:9d:4f:14:31:c6:f3:df:4a:e3:ae:
81:f4:a8:97:e6:28:a9:58:9f:6e:c1:60:42:02:9f:
66:1b:99:f9:40:be:a9:94:e0:53:54:d1:de:bd:3d:
57:94:31:2d:15:e2:bd:5c:b5:c3:ac:fb:f4:e7:68:
98:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:53:93:1E:09:EA:A9:D6:2E:65:A6:63:BD:86:66:58:CC:4A:C0:E4
X509v3 Authority Key Identifier:
keyid:DE:DE:91:A0:FB:1F:4D:D1:79:00:D0:6D:B6:E8:83:36:F7:8B:5C:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3t6RoPsfTdF5ANBttuiDNveLXAU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/6FOTHgnqqdYuZaZjvYZmWMxKwOQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/3t6RoPsfTdF5ANBttuiDNveLXAU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.28.71.0/24
Signature Algorithm: sha256WithRSAEncryption
20:8a:47:86:fb:7a:2a:0d:be:2f:55:36:ec:7b:b9:92:66:67:
d3:ec:3c:e2:c8:0c:a8:74:7d:a2:36:14:2f:16:eb:5f:d7:28:
20:88:c8:af:e6:64:13:da:e2:ff:1c:bb:4d:fa:73:32:75:9c:
1c:fa:97:d4:c9:6c:b4:5b:93:f2:5d:f0:55:e7:23:b7:1b:05:
81:07:b2:d4:93:58:07:cd:45:00:9f:fd:84:ce:91:b6:db:b4:
26:3a:86:97:83:45:3c:0e:08:f0:68:8a:58:0a:5e:39:94:77:
a5:3b:79:59:9b:a4:68:2b:e2:4e:70:14:4a:bc:05:bd:11:a7:
58:63:f5:d9:1f:d8:d5:d6:80:8d:53:92:5c:41:41:4c:35:6d:
5a:2b:de:a6:3d:34:4a:ca:0e:02:72:16:70:7f:c6:7f:af:9c:
86:f6:91:6d:bc:42:16:79:b3:21:d9:40:54:8c:1c:2e:57:e1:
a6:e1:ea:16:1b:18:72:1f:00:26:d8:7a:a8:76:b7:14:fe:ce:
9a:09:32:09:f2:15:55:c5:af:85:bb:70:7b:df:33:53:96:ea:
41:65:7d:ec:d3:16:e3:1d:5d:89:97:f6:b5:3c:4c:6b:80:7e:
19:95:88:05:f2:14:ad:a6:e3:5a:77:05:c7:13:49:22:da:fb:
d9:96:4b:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:05:25 2024 by rpki-client on console-ams.rpki-client.org