Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/69c389-17c9-4461-a390-7aa290e857e9/1/6jYQuJTbaEE6kGQFPfv7u7FFxPI.roa
File: 6jYQuJTbaEE6kGQFPfv7u7FFxPI.roa (raw, json)
Hash identifier: MV7gNKmTaVzEp2mjISY+ehWy3xHH3iuLg0YgsrPlU+E=
Subject key identifier: EA:36:10:B8:94:DB:68:41:3A:90:64:05:3D:FB:FB:BB:B1:45:C4:F2
Certificate issuer: /CN=19ac1498860e2bb0958173854bd04c869a369017
Certificate serial: 019290E024C218D8C9DEC5387C22E5FF1F85
Authority key identifier: 19:AC:14:98:86:0E:2B:B0:95:81:73:85:4B:D0:4C:86:9A:36:90:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GawUmIYOK7CVgXOFS9BMhpo2kBc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/69c389-17c9-4461-a390-7aa290e857e9/1/6jYQuJTbaEE6kGQFPfv7u7FFxPI.roa
Signing time: Tue 15 Oct 2024 15:51:01 +0000
ROA not before: Tue 15 Oct 2024 15:51:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 136258
IP address blocks: 37.143.128.0/24 maxlen: 24
37.143.129.0/24 maxlen: 24
37.143.130.0/24 maxlen: 24
37.143.131.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/69c389-17c9-4461-a390-7aa290e857e9/1/GawUmIYOK7CVgXOFS9BMhpo2kBc.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/69c389-17c9-4461-a390-7aa290e857e9/1/GawUmIYOK7CVgXOFS9BMhpo2kBc.mft
rsync://rpki.ripe.net/repository/DEFAULT/GawUmIYOK7CVgXOFS9BMhpo2kBc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:90:e0:24:c2:18:d8:c9:de:c5:38:7c:22:e5:ff:1f:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19ac1498860e2bb0958173854bd04c869a369017
Validity
Not Before: Oct 15 15:51:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ea3610b894db68413a9064053dfbfbbbb145c4f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:83:a7:29:3a:84:c7:c1:28:6e:17:a6:2e:6a:
95:7a:58:ae:b2:a1:1d:0b:90:9d:48:0a:37:8f:31:
1e:2d:8b:2f:f2:32:74:85:fb:88:a8:9e:35:97:d5:
a9:18:56:c5:41:b1:12:48:77:41:71:c0:b2:be:61:
a3:54:78:ab:e4:a5:af:40:cc:01:66:84:57:d1:bf:
4b:77:d8:73:6d:88:e3:f4:67:b0:26:45:b6:31:53:
0e:0b:a4:84:98:92:a6:76:5e:ab:72:e3:60:44:a5:
7e:c1:3d:37:fc:e8:0d:90:9f:16:b0:22:5b:e7:16:
d5:59:51:56:4a:d3:d1:35:4b:ca:b8:3b:b2:f3:40:
00:5b:47:cc:64:1e:21:24:8f:20:48:f3:47:ab:05:
74:61:44:60:6d:a5:f7:29:67:26:01:a0:4c:98:fc:
02:fa:19:0e:7a:f5:6e:0e:52:af:cf:15:cd:a7:d8:
22:0d:85:55:3a:00:28:fa:b3:3f:5b:a2:23:13:d3:
6b:0f:33:b9:40:fd:93:5b:45:9d:22:31:9d:57:4c:
5a:9a:a0:af:78:73:8c:86:1f:ed:c4:82:74:3f:e9:
da:60:e1:88:ca:2f:59:74:f4:9c:cc:cb:4f:0e:30:
82:cd:eb:a2:44:c3:7e:88:f3:48:68:bd:01:8f:16:
d2:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:36:10:B8:94:DB:68:41:3A:90:64:05:3D:FB:FB:BB:B1:45:C4:F2
X509v3 Authority Key Identifier:
keyid:19:AC:14:98:86:0E:2B:B0:95:81:73:85:4B:D0:4C:86:9A:36:90:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GawUmIYOK7CVgXOFS9BMhpo2kBc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/69c389-17c9-4461-a390-7aa290e857e9/1/6jYQuJTbaEE6kGQFPfv7u7FFxPI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/69c389-17c9-4461-a390-7aa290e857e9/1/GawUmIYOK7CVgXOFS9BMhpo2kBc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.143.128.0/22
Signature Algorithm: sha256WithRSAEncryption
21:86:5c:de:ea:4f:e8:1f:b1:32:c6:07:db:e7:9a:13:8c:0a:
6d:eb:20:b9:f5:c0:bd:c1:6f:ca:8d:ce:60:ff:c3:da:ea:13:
13:3a:ab:0a:97:7a:76:05:bf:08:c9:69:00:2b:f2:5d:53:40:
58:19:88:96:83:64:50:ed:c2:5d:41:b2:58:e2:38:79:d6:5d:
a1:40:3d:a8:3c:b1:60:ac:a8:68:7d:59:02:3c:93:87:06:0d:
3d:ad:b4:ee:5d:c8:2a:28:3c:1a:2b:3e:4f:cd:3b:e1:4c:d8:
29:f1:b1:5a:b6:13:74:ac:d7:68:12:3b:e4:f6:59:21:88:0a:
5c:66:e7:0e:8d:54:6b:7c:1b:30:46:4c:17:f5:7f:da:12:00:
37:a7:a2:a8:6d:5c:26:45:ab:48:03:8d:10:92:99:54:b6:eb:
a3:bb:e5:53:22:99:01:0b:24:48:5c:e2:a3:0c:3a:85:39:19:
09:3c:19:c5:a8:10:dc:1a:86:71:b4:dc:fc:dd:4b:53:32:a1:
59:0b:c1:4b:16:39:df:f4:2b:26:d9:da:0c:3d:a9:00:c8:33:
91:5e:62:6a:94:97:ba:26:88:9b:5e:ab:f2:8f:0d:13:6a:27:
c2:dd:f8:ea:94:c0:c1:34:29:d3:f9:c3:85:c9:87:8a:6e:36:
be:0f:b6:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:53:24 2024 by rpki-client on console-ams.rpki-client.org