Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/6c0sjPCUak3rJhyfpyawxO_CE-w.roa
File: 6c0sjPCUak3rJhyfpyawxO_CE-w.roa (raw, json)
Hash identifier: yfHHAfHxdTSZowfRCWuYNx8BO1CW6yZsN5a9KHWN30Y=
Subject key identifier: E9:CD:2C:8C:F0:94:6A:4D:EB:26:1C:9F:A7:26:B0:C4:EF:C2:13:EC
Certificate issuer: /CN=7d149f62447853689c12fb288afeb6b681cfebc1
Certificate serial: 0190A269164BC62972690778B592148F3C33
Authority key identifier: 7D:14:9F:62:44:78:53:68:9C:12:FB:28:8A:FE:B6:B6:81:CF:EB:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fRSfYkR4U2icEvsoiv62toHP68E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/6c0sjPCUak3rJhyfpyawxO_CE-w.roa
Signing time: Thu 11 Jul 2024 15:28:34 +0000
ROA not before: Thu 11 Jul 2024 15:28:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56740
IP address blocks: 87.252.234.0/24 maxlen: 24
87.252.237.0/24 maxlen: 24
87.252.238.0/24 maxlen: 24
91.149.167.0/24 maxlen: 24
93.125.18.0/24 maxlen: 24
93.125.60.0/23 maxlen: 23
93.125.114.0/24 maxlen: 24
178.172.164.0/24 maxlen: 24
178.172.165.0/24 maxlen: 24
178.172.212.0/24 maxlen: 24
178.172.217.0/24 maxlen: 24
178.172.220.0/24 maxlen: 24
178.172.247.0/24 maxlen: 24
178.172.251.0/24 maxlen: 24
178.172.255.0/24 maxlen: 24
213.184.236.0/24 maxlen: 24
213.184.240.0/24 maxlen: 24
217.21.44.0/24 maxlen: 24
217.21.52.0/24 maxlen: 24
217.21.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/fRSfYkR4U2icEvsoiv62toHP68E.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/fRSfYkR4U2icEvsoiv62toHP68E.mft
rsync://rpki.ripe.net/repository/DEFAULT/fRSfYkR4U2icEvsoiv62toHP68E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:a2:69:16:4b:c6:29:72:69:07:78:b5:92:14:8f:3c:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d149f62447853689c12fb288afeb6b681cfebc1
Validity
Not Before: Jul 11 15:28:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e9cd2c8cf0946a4deb261c9fa726b0c4efc213ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:02:af:e4:10:35:de:81:61:b9:79:9e:ae:3f:
b7:43:47:34:d8:dd:78:c2:66:bf:06:68:94:8d:5c:
39:5f:b7:d7:19:7f:e2:59:eb:15:a7:e7:d6:32:26:
96:be:e3:02:8f:8e:ba:a1:37:63:f8:95:6a:7d:a7:
3b:45:05:46:da:ef:f7:0f:12:ad:b3:e9:69:78:44:
8d:3e:6a:ac:59:37:08:3b:32:87:77:2f:70:c2:ea:
5c:90:0c:74:74:1d:09:07:72:fe:66:d0:d6:75:42:
86:70:00:f5:3e:8c:8e:1e:81:4c:65:77:db:67:8e:
85:e9:16:7f:99:68:53:6e:ec:59:96:97:fb:32:6e:
47:be:62:eb:be:2a:3f:8f:e7:d5:7f:ce:30:65:5f:
1a:04:85:2c:bb:f6:b2:c3:d7:4b:9e:38:d4:92:d5:
81:4e:c1:d0:38:d2:c0:47:94:a0:9c:3b:18:54:be:
4f:30:f5:e9:fd:4a:32:4b:ef:7d:a6:d3:b4:de:ce:
03:07:2e:c3:39:52:9e:ac:c4:8c:06:be:67:4f:b3:
43:69:c3:52:c6:43:2b:a6:e8:31:7f:04:31:9f:d2:
d8:55:ab:1f:87:05:92:7f:50:47:a3:6c:71:ab:62:
4c:71:6f:39:66:c4:81:1d:42:db:3c:ba:1d:71:5d:
f4:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:CD:2C:8C:F0:94:6A:4D:EB:26:1C:9F:A7:26:B0:C4:EF:C2:13:EC
X509v3 Authority Key Identifier:
keyid:7D:14:9F:62:44:78:53:68:9C:12:FB:28:8A:FE:B6:B6:81:CF:EB:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fRSfYkR4U2icEvsoiv62toHP68E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/6c0sjPCUak3rJhyfpyawxO_CE-w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/fRSfYkR4U2icEvsoiv62toHP68E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.252.234.0/24
87.252.237.0-87.252.238.255
91.149.167.0/24
93.125.18.0/24
93.125.60.0/23
93.125.114.0/24
178.172.164.0/23
178.172.212.0/24
178.172.217.0/24
178.172.220.0/24
178.172.247.0/24
178.172.251.0/24
178.172.255.0/24
213.184.236.0/24
213.184.240.0/24
217.21.44.0/24
217.21.52.0/23
Signature Algorithm: sha256WithRSAEncryption
10:19:57:d7:81:26:1a:e2:11:35:e7:6e:67:0f:8a:a5:69:03:
97:d6:19:bc:26:3d:e6:50:f3:09:95:a9:26:12:ee:13:70:36:
2f:eb:d5:ca:e7:e9:3f:f7:dc:26:5f:6c:ec:de:e8:5f:3a:d4:
d9:3c:e8:f0:e2:2c:ed:c4:59:70:8b:0b:be:21:72:dd:f0:c1:
0d:d6:2f:66:a0:0d:c7:d4:0e:97:a4:1d:0f:8d:84:b2:7c:d1:
b5:93:d1:56:ba:63:dc:cd:09:e3:ef:8d:b5:c6:21:ad:fd:de:
34:46:d7:87:33:5d:8d:93:51:b3:c2:92:10:1b:a4:30:cf:b3:
d5:2f:78:a8:f1:89:b5:99:58:92:af:05:78:14:a0:c4:ce:32:
4c:4a:dd:01:0d:e1:b2:1e:98:85:9c:24:89:ae:b9:36:84:c3:
05:0a:6f:59:bd:96:ec:17:d4:17:2c:eb:3b:bc:a5:98:ee:cc:
93:d6:29:38:c1:5e:86:10:c3:eb:de:8c:07:9b:8e:23:e5:d1:
9e:7d:7c:50:20:d9:03:da:e3:58:0d:db:cc:d8:4b:d6:3f:c8:
8c:db:6c:f8:71:20:ca:01:e4:99:58:79:e1:f5:ff:40:0e:4f:
39:49:36:9a:a4:1f:22:76:de:a8:82:fb:60:cb:c7:84:d6:38:
bc:48:61:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 04:43:33 2024 by rpki-client on console-ams.rpki-client.org