Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/219cae-264d-46a7-9e64-e604b61be0ea/1/6WZ4qS6sw-amtskqFRY0UifSr_k.roa
File: 6WZ4qS6sw-amtskqFRY0UifSr_k.roa (raw, json)
Hash identifier: DWHkIEFU7Whsbl//AsgBbliTZ1DPcIM0b+k0cDi3seQ=
Subject key identifier: E9:66:78:A9:2E:AC:C3:E6:A6:B6:C9:2A:15:16:34:52:27:D2:AF:F9
Certificate issuer: /CN=172537601a31697404922d957e74450f5a9cbe73
Certificate serial: 018CC42542FDD9914F6A9C8C874BB2153744
Authority key identifier: 17:25:37:60:1A:31:69:74:04:92:2D:95:7E:74:45:0F:5A:9C:BE:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FyU3YBoxaXQEki2VfnRFD1qcvnM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/219cae-264d-46a7-9e64-e604b61be0ea/1/6WZ4qS6sw-amtskqFRY0UifSr_k.roa
Signing time: Mon 01 Jan 2024 08:30:25 +0000
ROA not before: Mon 01 Jan 2024 08:30:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25534
IP address blocks: 81.17.164.0/22 maxlen: 24
81.17.160.0/22 maxlen: 24
185.146.16.0/22 maxlen: 24
81.17.160.0/20 maxlen: 24
81.17.168.0/22 maxlen: 24
81.17.172.0/22 maxlen: 24
217.15.176.0/20 maxlen: 24
217.15.176.0/22 maxlen: 24
217.15.180.0/22 maxlen: 24
217.15.184.0/22 maxlen: 24
217.15.188.0/22 maxlen: 24
2a00:1a08::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/219cae-264d-46a7-9e64-e604b61be0ea/1/FyU3YBoxaXQEki2VfnRFD1qcvnM.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/219cae-264d-46a7-9e64-e604b61be0ea/1/FyU3YBoxaXQEki2VfnRFD1qcvnM.mft
rsync://rpki.ripe.net/repository/DEFAULT/FyU3YBoxaXQEki2VfnRFD1qcvnM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 May 2024 20:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:42:fd:d9:91:4f:6a:9c:8c:87:4b:b2:15:37:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=172537601a31697404922d957e74450f5a9cbe73
Validity
Not Before: Jan 1 08:30:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e96678a92eacc3e6a6b6c92a1516345227d2aff9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:ae:f8:c4:33:22:b5:ad:eb:b7:8d:d6:55:1a:
45:36:c3:d9:56:fd:d1:30:a4:95:57:df:67:9f:20:
bb:21:ff:b1:24:e2:e3:41:f9:e1:03:41:ed:8e:0d:
c0:ab:10:03:c8:d1:01:d7:96:39:03:ce:ae:5a:0c:
5b:46:9c:d6:31:f5:e0:34:8b:e5:4f:84:be:bb:31:
45:10:75:21:ea:ee:45:11:db:51:4e:ac:1d:fe:01:
15:22:20:79:12:5f:d6:4e:fc:de:ea:43:09:d5:96:
ff:80:cd:fd:2c:1e:ba:e1:30:59:af:c1:c2:bb:86:
88:a7:a7:02:a5:5c:0a:cd:8b:96:91:69:21:89:ed:
77:b3:89:4a:a7:73:d3:0d:c0:ec:f4:06:d3:67:55:
0f:ae:43:f7:32:1a:f7:ff:dd:a6:ad:2c:0f:a9:a2:
99:f1:f3:5b:0e:e8:f8:71:c4:d0:34:d9:07:51:ae:
53:6c:00:35:fe:52:71:6a:8b:f9:e1:da:b1:2f:33:
2e:41:ac:c5:67:98:7b:93:84:c1:7e:00:b7:da:04:
c1:52:09:6e:63:41:78:ad:ad:a2:d4:6c:85:e5:c7:
70:f7:9d:00:e6:8b:92:6b:80:8f:be:43:24:26:45:
f2:8d:c2:84:bd:91:2e:40:cc:ed:64:50:e3:66:4c:
bf:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:66:78:A9:2E:AC:C3:E6:A6:B6:C9:2A:15:16:34:52:27:D2:AF:F9
X509v3 Authority Key Identifier:
keyid:17:25:37:60:1A:31:69:74:04:92:2D:95:7E:74:45:0F:5A:9C:BE:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FyU3YBoxaXQEki2VfnRFD1qcvnM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/219cae-264d-46a7-9e64-e604b61be0ea/1/6WZ4qS6sw-amtskqFRY0UifSr_k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/219cae-264d-46a7-9e64-e604b61be0ea/1/FyU3YBoxaXQEki2VfnRFD1qcvnM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.17.160.0/20
185.146.16.0/22
217.15.176.0/20
IPv6:
2a00:1a08::/32
Signature Algorithm: sha256WithRSAEncryption
0c:60:5f:c2:4f:e1:78:89:8c:e2:4e:84:bc:83:fe:32:21:24:
36:38:23:2d:a2:c2:15:cb:78:db:81:9f:bc:cc:49:31:51:91:
b6:8c:e1:ff:c1:a5:71:6a:f0:a7:9d:6a:10:0d:4e:60:dc:0a:
45:18:ae:ce:4e:d6:d8:dd:72:19:eb:91:1c:f4:f3:1d:48:2a:
01:e7:74:f5:95:cb:7f:67:57:0e:95:4f:2b:73:66:a4:e0:11:
cb:3b:5b:9b:3f:2c:97:e0:b4:1b:c2:23:7f:66:88:05:7b:a9:
92:94:dc:4d:fa:f1:72:54:ee:5c:5c:4b:f9:12:4b:b5:9d:af:
01:f7:eb:03:75:7d:57:50:b4:df:4c:5e:ce:8f:f4:a2:42:c6:
04:cd:12:bb:70:ae:bb:d2:7b:19:6a:0c:9c:e7:96:c3:56:40:
05:0d:e3:51:7d:57:bd:ca:c4:f3:a1:60:db:ef:6e:1c:7c:94:
04:8c:eb:4a:0d:4d:c6:c3:e8:b2:52:50:06:c6:bb:1e:a8:fa:
1e:9e:f9:12:49:a2:51:2b:5f:12:37:90:6f:2d:3c:97:61:01:
6e:0b:33:e4:9b:e0:db:e2:da:4a:38:f1:de:9e:f6:fd:ae:f5:
7c:e3:0f:7e:c7:a6:c4:28:1e:ee:7a:d8:a1:7c:29:c7:52:31:
14:88:0b:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 05:09:50 2024 by rpki-client on console-ams.rpki-client.org