Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/6BehnoxIszAziUCOhasD7agO8ZQ.roa
File: 6BehnoxIszAziUCOhasD7agO8ZQ.roa (raw, json)
Hash identifier: vt6Wv3PvDUO26KoHBwA86lIocYXw8Kgxtl7n55PTVtw=
Subject key identifier: E8:17:A1:9E:8C:48:B3:30:33:89:40:8E:85:AB:03:ED:A8:0E:F1:94
Certificate issuer: /CN=7d149f62447853689c12fb288afeb6b681cfebc1
Certificate serial: 018CC56E3AD072D1CBB5B1EF70550C992EF9
Authority key identifier: 7D:14:9F:62:44:78:53:68:9C:12:FB:28:8A:FE:B6:B6:81:CF:EB:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fRSfYkR4U2icEvsoiv62toHP68E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/6BehnoxIszAziUCOhasD7agO8ZQ.roa
Signing time: Mon 01 Jan 2024 14:29:44 +0000
ROA not before: Mon 01 Jan 2024 14:29:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49711
IP address blocks: 178.172.133.0/24 maxlen: 24
93.125.43.0/24 maxlen: 24
91.149.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/fRSfYkR4U2icEvsoiv62toHP68E.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/fRSfYkR4U2icEvsoiv62toHP68E.mft
rsync://rpki.ripe.net/repository/DEFAULT/fRSfYkR4U2icEvsoiv62toHP68E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:3a:d0:72:d1:cb:b5:b1:ef:70:55:0c:99:2e:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d149f62447853689c12fb288afeb6b681cfebc1
Validity
Not Before: Jan 1 14:29:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e817a19e8c48b3303389408e85ab03eda80ef194
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:33:33:e5:13:8f:34:bb:a4:d9:82:fa:4f:27:
16:d7:c5:fe:fa:07:24:63:99:e8:bc:72:2e:0f:c1:
fb:a3:d9:ad:49:3c:eb:3d:26:ae:36:80:2b:b8:86:
f8:37:bf:3a:b6:7c:58:11:2b:fb:29:8f:e1:07:fa:
5a:79:be:e1:f1:9c:9e:5c:9c:e1:27:99:a2:0f:da:
13:8d:9e:7f:bd:c9:ba:8c:3c:ee:6d:f9:e7:24:93:
2a:4c:46:cd:27:13:96:aa:f0:68:d8:03:47:db:f4:
f4:6c:c2:3e:5f:93:2c:e4:42:3b:9d:aa:42:ae:a7:
76:8e:46:4e:e0:77:b4:82:9d:e4:b1:df:b2:61:1a:
c3:19:49:4f:4c:da:7f:f9:e4:a6:5a:38:3a:ff:c5:
f2:0b:e0:50:68:1b:f5:c3:54:49:27:f7:2a:66:0a:
9d:b9:c2:90:66:94:40:8a:b2:a4:d3:14:65:6d:09:
ba:6f:1b:27:5e:a2:a9:a3:aa:d6:29:38:73:77:4a:
88:c7:74:2e:7f:54:fe:e7:3d:2d:c3:f6:a1:49:b5:
e1:e4:e0:aa:83:c7:61:63:a1:63:8e:d3:97:99:08:
5f:8e:ad:21:6d:f9:95:f6:ff:bf:d6:48:34:49:07:
3b:c2:8c:16:fd:fa:c1:81:72:02:da:af:8b:f4:71:
a9:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:17:A1:9E:8C:48:B3:30:33:89:40:8E:85:AB:03:ED:A8:0E:F1:94
X509v3 Authority Key Identifier:
keyid:7D:14:9F:62:44:78:53:68:9C:12:FB:28:8A:FE:B6:B6:81:CF:EB:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fRSfYkR4U2icEvsoiv62toHP68E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/6BehnoxIszAziUCOhasD7agO8ZQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/fRSfYkR4U2icEvsoiv62toHP68E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.149.171.0/24
93.125.43.0/24
178.172.133.0/24
Signature Algorithm: sha256WithRSAEncryption
05:dc:dd:22:ea:cb:cb:61:20:3c:ed:71:83:0f:07:ff:c6:cc:
65:2e:14:ac:05:5d:3e:63:12:63:d1:f7:1e:f8:95:f6:a5:99:
fc:79:34:d3:2c:3f:4b:90:73:0d:09:2c:07:5c:2a:79:3b:44:
01:dd:7d:91:0d:f0:aa:9c:52:64:46:ba:3e:ff:fc:7a:4a:ca:
fc:02:55:e8:92:ae:fd:6f:43:3a:a5:10:83:4c:96:fc:73:3a:
e0:17:41:86:29:c2:94:9e:78:95:9e:90:96:06:17:f8:53:7b:
ee:9f:51:26:f4:55:c4:56:02:05:ad:31:76:58:0c:42:fb:ed:
0b:14:ac:f0:86:8a:23:35:90:22:e0:88:7c:bc:1f:2e:aa:8d:
04:83:d2:6d:56:5a:27:41:41:67:32:4b:f3:81:15:37:d0:2e:
27:18:aa:60:70:68:f2:e4:30:8b:ac:38:39:48:8b:82:f6:1b:
97:02:55:7f:0c:10:bf:6b:94:84:4f:3e:ba:fd:47:39:51:b7:
de:4a:19:c0:de:b5:c2:25:b3:71:7b:7c:a9:09:42:41:16:7a:
50:cc:27:13:1b:4f:08:97:bf:ae:23:66:02:ec:47:c5:6c:e7:
83:cd:7b:23:3c:d6:e4:e9:76:d7:f8:48:d7:90:d2:a8:46:b6:
bf:3c:d3:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 22:46:00 2024 by rpki-client on console-ams.rpki-client.org