Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/e210b9-7a3f-410b-ba56-0724089289bb/1/trtIwqR_7HH-LGNEQN1pN5JwwyI.roa
File: trtIwqR_7HH-LGNEQN1pN5JwwyI.roa (raw, json)
Hash identifier: fA19lTbg+grAMJxOrgwv7mwms3yqYzll2X64WCHKSug=
Subject key identifier: B6:BB:48:C2:A4:7F:EC:71:FE:2C:63:44:40:DD:69:37:92:70:C3:22
Certificate issuer: /CN=3fa40fcfa836bb0b5b3e129404cb31e85250b01f
Certificate serial: 018CC5004816D35B91763002E24789BC6345
Authority key identifier: 3F:A4:0F:CF:A8:36:BB:0B:5B:3E:12:94:04:CB:31:E8:52:50:B0:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P6QPz6g2uwtbPhKUBMsx6FJQsB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/e210b9-7a3f-410b-ba56-0724089289bb/1/trtIwqR_7HH-LGNEQN1pN5JwwyI.roa
Signing time: Mon 01 Jan 2024 12:29:39 +0000
ROA not before: Mon 01 Jan 2024 12:29:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 30798
IP address blocks: 62.204.0.0/19 maxlen: 24
213.185.32.0/19 maxlen: 24
89.236.64.0/18 maxlen: 24
217.112.240.0/20 maxlen: 24
45.154.68.0/22 maxlen: 24
2001:40e8::/32 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/e210b9-7a3f-410b-ba56-0724089289bb/1/P6QPz6g2uwtbPhKUBMsx6FJQsB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/e210b9-7a3f-410b-ba56-0724089289bb/1/P6QPz6g2uwtbPhKUBMsx6FJQsB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/P6QPz6g2uwtbPhKUBMsx6FJQsB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:48:16:d3:5b:91:76:30:02:e2:47:89:bc:63:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fa40fcfa836bb0b5b3e129404cb31e85250b01f
Validity
Not Before: Jan 1 12:29:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b6bb48c2a47fec71fe2c634440dd69379270c322
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:57:c4:0a:59:03:bf:4d:d7:ff:a1:74:24:b3:
6c:ab:8f:81:51:a4:75:b6:ba:a4:39:26:84:07:d2:
40:60:27:b7:76:df:8b:d8:f6:7a:5b:5c:2f:24:00:
32:1f:60:be:05:53:ff:25:f2:2c:3a:e9:ac:ff:d0:
87:1b:9f:5c:ef:d3:20:bf:33:e1:0e:a0:03:66:b8:
97:ab:64:8d:ef:bc:08:3e:dd:61:b8:55:e0:24:d0:
09:29:91:bc:de:0b:85:7b:d5:10:c1:1b:d8:70:44:
65:e9:cf:8f:af:83:9c:6d:9f:9e:5f:f9:1e:9c:05:
47:54:1b:2f:a8:55:3d:83:23:d2:d6:3f:a3:34:6b:
e2:06:02:ef:da:14:07:8d:66:57:8d:79:d8:49:54:
11:2f:73:8c:e0:87:fc:b5:30:94:04:da:df:89:07:
b6:e6:e0:e1:32:83:1f:e2:52:c0:57:66:75:70:87:
e5:cf:84:93:47:09:71:81:37:d5:dc:70:4d:f4:5c:
5f:0e:d3:c8:91:80:6a:b7:b5:3b:03:6c:5b:09:98:
41:57:7f:70:ab:4c:14:c7:4e:c2:c1:ad:26:53:49:
23:ea:e0:11:4b:c6:bc:6a:2e:8a:06:23:66:3a:c1:
cf:c7:19:6e:52:34:ae:c7:94:a1:50:5a:dc:21:aa:
53:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:BB:48:C2:A4:7F:EC:71:FE:2C:63:44:40:DD:69:37:92:70:C3:22
X509v3 Authority Key Identifier:
keyid:3F:A4:0F:CF:A8:36:BB:0B:5B:3E:12:94:04:CB:31:E8:52:50:B0:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P6QPz6g2uwtbPhKUBMsx6FJQsB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/e210b9-7a3f-410b-ba56-0724089289bb/1/trtIwqR_7HH-LGNEQN1pN5JwwyI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/e210b9-7a3f-410b-ba56-0724089289bb/1/P6QPz6g2uwtbPhKUBMsx6FJQsB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.154.68.0/22
62.204.0.0/19
89.236.64.0/18
213.185.32.0/19
217.112.240.0/20
IPv6:
2001:40e8::/32
Signature Algorithm: sha256WithRSAEncryption
91:e3:70:74:9e:54:45:e3:79:e0:ac:45:d5:ff:f2:73:ce:f0:
54:3d:7d:f5:68:56:35:ae:72:e2:1b:f3:6b:ac:4a:09:22:c5:
53:47:29:20:83:da:84:7e:23:1e:50:94:8d:be:27:3d:5b:9e:
1f:15:50:ab:7b:49:5c:1a:57:73:25:a0:34:b6:cb:c1:4d:3f:
88:ac:5c:88:9c:01:b4:d0:e7:93:1e:1c:1b:a5:17:50:aa:1f:
51:16:ca:17:18:f4:8d:c5:c8:38:98:60:37:c5:e2:5d:17:ef:
eb:c3:be:12:07:e6:a6:07:ea:6b:25:75:a7:c4:61:3f:9c:14:
0a:f7:20:3e:f4:39:c5:9e:04:e2:4d:c0:b7:be:8c:f6:67:bd:
0e:af:38:8f:52:ca:f0:65:60:cd:72:32:be:5c:c7:0e:7f:47:
b0:8a:6e:86:ba:f7:91:f0:4e:54:9f:26:b2:1c:d8:88:51:ac:
6a:63:9a:19:ea:6a:af:11:6b:3d:ff:eb:37:d9:e7:50:df:c0:
5f:e8:7b:bb:c0:20:da:43:8e:30:78:1e:7c:77:d2:84:17:5e:
2a:b3:ed:5f:f4:b0:74:56:7d:8e:ce:4f:3c:71:07:05:af:f1:
4a:81:20:1c:e4:fe:e4:66:0e:56:b7:52:1f:a5:09:9d:c0:2d:
c5:9d:b4:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 06:32:50 2024 by rpki-client on console-ams.rpki-client.org