Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/6ac0a2-5c6c-4357-97e4-ceb8ab6d112e/1/6nZfn5Q9i2WOlOMzlE0s8MwPtis.roa
File: 6nZfn5Q9i2WOlOMzlE0s8MwPtis.roa (raw, json)
Hash identifier: f58td7FDpd3YW/U92n6ZKM+B9jvGGdW0peJ6fA//oRM=
Subject key identifier: EA:76:5F:9F:94:3D:8B:65:8E:94:E3:33:94:4D:2C:F0:CC:0F:B6:2B
Certificate issuer: /CN=b4425cf5501344ac5acc307abd0af013fac67073
Certificate serial: 018CC493867381C0E57205834D629466F0FF
Authority key identifier: B4:42:5C:F5:50:13:44:AC:5A:CC:30:7A:BD:0A:F0:13:FA:C6:70:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tEJc9VATRKxazDB6vQrwE_rGcHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/6ac0a2-5c6c-4357-97e4-ceb8ab6d112e/1/6nZfn5Q9i2WOlOMzlE0s8MwPtis.roa
Signing time: Mon 01 Jan 2024 10:30:51 +0000
ROA not before: Mon 01 Jan 2024 10:30:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202709
IP address blocks: 194.48.180.0/22 maxlen: 22
193.26.2.0/24 maxlen: 24
193.25.255.0/24 maxlen: 24
185.119.228.0/22 maxlen: 22
193.26.0.0/24 maxlen: 24
193.26.12.0/24 maxlen: 24
5.61.216.0/21 maxlen: 21
45.82.132.0/22 maxlen: 22
185.58.132.0/22 maxlen: 22
2a02:63e0::/32 maxlen: 32
2a0e:6b80::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/6ac0a2-5c6c-4357-97e4-ceb8ab6d112e/1/tEJc9VATRKxazDB6vQrwE_rGcHM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/6ac0a2-5c6c-4357-97e4-ceb8ab6d112e/1/tEJc9VATRKxazDB6vQrwE_rGcHM.mft
rsync://rpki.ripe.net/repository/DEFAULT/tEJc9VATRKxazDB6vQrwE_rGcHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 07:02:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:86:73:81:c0:e5:72:05:83:4d:62:94:66:f0:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4425cf5501344ac5acc307abd0af013fac67073
Validity
Not Before: Jan 1 10:30:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ea765f9f943d8b658e94e333944d2cf0cc0fb62b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:21:f3:ef:73:e3:c4:f5:4a:85:59:14:99:32:
a2:54:2a:11:96:90:52:28:f1:f9:15:c8:0c:a2:0c:
35:9a:42:c6:8e:04:e8:e3:9c:9f:3b:80:7e:c0:8d:
c3:ec:57:79:7d:1e:36:f2:91:24:2f:99:33:8d:83:
9f:27:e9:f8:fe:46:a9:52:d8:c0:4f:91:86:4b:bb:
07:7b:6c:e2:d5:18:0a:e9:10:44:72:c4:b0:26:58:
87:a8:e5:05:31:44:ca:12:df:93:a1:5a:86:a9:c1:
69:44:03:f0:e9:35:28:84:d4:e5:b3:02:1a:a8:ab:
67:21:d9:17:da:c6:45:3a:80:59:c4:59:22:3f:34:
e9:a2:28:c6:3c:f8:93:6d:d2:34:37:51:3b:a9:0e:
10:67:20:cf:9c:1b:53:fe:d5:27:be:8a:9b:1b:d0:
84:b1:82:9e:70:eb:61:4a:ad:20:03:37:42:9f:0a:
f3:7b:46:cf:28:f7:d0:ee:fd:27:73:a3:2f:7f:d7:
59:74:a8:cc:69:22:22:3b:ef:a2:98:bd:83:eb:cf:
c5:a2:18:0d:3b:0c:e6:85:74:a0:cf:0b:86:07:b4:
97:ab:a6:f3:48:cc:b4:0a:02:b4:b3:83:d6:4d:54:
d5:5c:97:46:da:24:08:ff:eb:55:16:82:d4:17:2b:
72:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:76:5F:9F:94:3D:8B:65:8E:94:E3:33:94:4D:2C:F0:CC:0F:B6:2B
X509v3 Authority Key Identifier:
keyid:B4:42:5C:F5:50:13:44:AC:5A:CC:30:7A:BD:0A:F0:13:FA:C6:70:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tEJc9VATRKxazDB6vQrwE_rGcHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/6ac0a2-5c6c-4357-97e4-ceb8ab6d112e/1/6nZfn5Q9i2WOlOMzlE0s8MwPtis.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/6ac0a2-5c6c-4357-97e4-ceb8ab6d112e/1/tEJc9VATRKxazDB6vQrwE_rGcHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.61.216.0/21
45.82.132.0/22
185.58.132.0/22
185.119.228.0/22
193.25.255.0-193.26.0.255
193.26.2.0/24
193.26.12.0/24
194.48.180.0/22
IPv6:
2a02:63e0::/32
2a0e:6b80::/29
Signature Algorithm: sha256WithRSAEncryption
5c:14:2e:81:a1:8f:c3:c1:ac:97:66:a6:ab:76:09:7b:62:97:
cd:20:d1:a3:ac:f3:f0:1e:d0:af:b9:2a:b1:53:5b:74:4e:80:
79:1d:c9:6e:37:ae:a2:85:2b:b5:31:d0:04:3a:44:fa:35:a4:
c8:50:a7:f2:9e:88:a6:c9:64:18:79:7c:9d:85:b6:99:8f:86:
69:82:20:78:2a:47:09:c7:24:84:cf:5d:c5:1f:65:63:49:47:
e9:93:b9:a7:6a:00:a5:ab:92:4b:f7:19:ec:31:4c:5c:ac:1d:
91:7d:3a:a9:d9:f8:d9:bd:aa:a2:c8:94:00:63:0d:fd:e6:87:
bc:a6:70:e2:53:89:51:07:85:11:d2:83:88:29:0e:9a:0c:67:
55:6c:df:3f:8e:ee:9c:ea:01:7d:2c:26:d2:e4:bf:36:42:91:
00:b9:99:e2:23:bc:b9:4a:41:45:ff:ec:dc:b0:09:60:f8:b0:
bd:21:ed:9b:90:45:82:04:e7:3f:4b:37:c0:47:02:3e:ee:69:
d7:30:6e:ca:b9:77:22:06:9d:7f:b4:7b:41:b3:62:af:50:0a:
21:60:1d:da:40:e8:12:69:6e:bd:3f:c3:55:3b:69:c0:e3:24:
67:4f:da:64:19:e9:41:01:bb:a9:5f:d2:24:e2:46:ee:e3:1c:
17:59:79:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 16:48:53 2024 by rpki-client on console-ams.rpki-client.org