Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/b8a454-a699-4269-b676-63ae2eace298/1/6V-Y_O8Nu08y5QOBdO0uxXxgsCM.roa
File: 6V-Y_O8Nu08y5QOBdO0uxXxgsCM.roa (raw, json)
Hash identifier: +1izkTB8ueSjd/QsBz/unQl5TrQtV8veuIUNbxSjun8=
Subject key identifier: E9:5F:98:FC:EF:0D:BB:4F:32:E5:03:81:74:ED:2E:C5:7C:60:B0:23
Certificate issuer: /CN=ee9887ba5f457d797afdac2c5551defb453d88f3
Certificate serial: 0193CFD557A21AB8ED4899DC5E7C7CE30BE9
Authority key identifier: EE:98:87:BA:5F:45:7D:79:7A:FD:AC:2C:55:51:DE:FB:45:3D:88:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7piHul9FfXl6_awsVVHe-0U9iPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/b8a454-a699-4269-b676-63ae2eace298/1/6V-Y_O8Nu08y5QOBdO0uxXxgsCM.roa
Signing time: Mon 16 Dec 2024 14:18:05 +0000
ROA not before: Mon 16 Dec 2024 14:18:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35362
IP address blocks: 176.113.160.0/22 maxlen: 22
176.113.168.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/b8a454-a699-4269-b676-63ae2eace298/1/7piHul9FfXl6_awsVVHe-0U9iPM.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/b8a454-a699-4269-b676-63ae2eace298/1/7piHul9FfXl6_awsVVHe-0U9iPM.mft
rsync://rpki.ripe.net/repository/DEFAULT/7piHul9FfXl6_awsVVHe-0U9iPM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Dec 2024 18:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:cf:d5:57:a2:1a:b8:ed:48:99:dc:5e:7c:7c:e3:0b:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee9887ba5f457d797afdac2c5551defb453d88f3
Validity
Not Before: Dec 16 14:18:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e95f98fcef0dbb4f32e5038174ed2ec57c60b023
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:77:b0:88:a2:73:b3:df:65:20:1b:db:6b:35:
b7:14:0e:4c:0b:a2:06:89:9c:3d:77:e7:11:dd:4c:
ec:2a:19:6a:c7:82:7a:e8:ab:90:d2:b8:33:b6:a8:
be:fe:c1:58:64:0b:20:b7:67:22:bf:1d:e5:6a:9e:
4c:5e:5b:6c:af:57:a4:51:8c:53:32:e9:ab:ef:1b:
00:7e:7b:39:7d:68:37:ca:c8:12:54:85:ff:4b:c4:
1c:3d:a3:5c:e5:1e:d5:bd:bd:0d:6a:91:d8:36:08:
ec:5c:28:a0:b1:ec:fc:c9:5c:3a:14:77:b7:fd:58:
1f:38:38:41:68:0d:8a:01:dd:17:2c:31:66:1a:56:
aa:a7:4c:ff:60:bf:c7:59:24:f3:8f:66:a5:f3:97:
7e:71:da:35:71:06:3b:b2:0b:a4:05:14:86:11:d7:
ca:60:50:55:e3:9f:be:64:cb:c8:9b:98:74:7f:aa:
1f:42:ec:15:4c:4e:77:7d:cd:44:ab:92:50:61:7d:
e1:a8:bc:35:c4:59:67:07:6d:2c:74:4c:99:db:ca:
8f:8d:77:c3:25:7b:8c:b8:37:c7:7c:33:29:33:80:
de:e9:93:93:55:df:c3:f5:77:1a:35:39:ab:96:69:
e7:4e:f0:d8:73:e9:77:70:f7:f1:f6:b7:f8:12:93:
c9:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:5F:98:FC:EF:0D:BB:4F:32:E5:03:81:74:ED:2E:C5:7C:60:B0:23
X509v3 Authority Key Identifier:
keyid:EE:98:87:BA:5F:45:7D:79:7A:FD:AC:2C:55:51:DE:FB:45:3D:88:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7piHul9FfXl6_awsVVHe-0U9iPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/b8a454-a699-4269-b676-63ae2eace298/1/6V-Y_O8Nu08y5QOBdO0uxXxgsCM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/b8a454-a699-4269-b676-63ae2eace298/1/7piHul9FfXl6_awsVVHe-0U9iPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.113.160.0/22
176.113.168.0/21
Signature Algorithm: sha256WithRSAEncryption
74:ca:ec:bb:c7:ee:9b:df:d6:55:c6:7f:3f:82:aa:ae:85:8a:
5c:6c:2a:4f:2c:79:d3:dc:2b:35:1a:84:9e:d6:1c:3f:a0:15:
6f:e4:82:f6:11:e4:ed:17:38:a4:af:6b:2c:ca:66:cd:5e:44:
ea:a3:c3:61:f3:46:8e:98:49:46:2e:c7:33:8e:2c:e2:bb:a4:
73:97:58:df:fc:98:cc:7a:13:1f:ae:f4:d6:af:fc:1e:cd:ae:
50:3d:f6:1a:f2:9a:cd:ce:8f:14:66:4b:a0:d8:26:a2:1b:ca:
58:e0:76:ac:f4:38:74:a8:62:44:9a:23:d9:25:42:5b:5c:cb:
05:0e:ee:01:7b:3d:85:98:1b:bd:c0:92:7c:6d:cf:ab:ad:d1:
cf:fc:8d:96:6a:c0:98:72:54:59:66:9b:7a:0c:b5:53:5f:d0:
7d:d5:fc:d7:01:c3:e7:0e:f7:7b:70:fa:8f:9e:45:15:9b:a4:
1a:aa:79:0a:37:41:1b:6f:de:75:5b:d2:e1:2f:67:7c:63:4d:
46:e8:c2:46:ec:95:2e:e0:b7:7f:6e:78:55:39:cc:c9:9a:a6:
c8:74:0d:12:c5:cd:91:2f:77:74:c1:57:08:45:eb:3c:48:5e:
a3:6f:13:6f:d7:8a:5a:63:d7:09:f7:bf:7f:b1:bb:c3:1d:30:
23:c0:86:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 23:16:18 2024 by rpki-client on console-ams.rpki-client.org