Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/8d6943-ca75-4372-b77f-5c6502bffa1f/1/cZp46vnuVnFoojq0pLZZ-QY61QA.roa
File: cZp46vnuVnFoojq0pLZZ-QY61QA.roa (raw, json)
Hash identifier: blzJ0Dmh5tAJMmpkyX8UZpIu81IzFCfN1Vz+lTC5Ywc=
Subject key identifier: 71:9A:78:EA:F9:EE:56:71:68:A2:3A:B4:A4:B6:59:F9:06:3A:D5:00
Certificate issuer: /CN=c6d18653fbfb6fd5732dc940c1d65d77ab0bbfa3
Certificate serial: 01928A74EE4B1A85A34780E4A15EADCD3EEC
Authority key identifier: C6:D1:86:53:FB:FB:6F:D5:73:2D:C9:40:C1:D6:5D:77:AB:0B:BF:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xtGGU_v7b9VzLclAwdZdd6sLv6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/8d6943-ca75-4372-b77f-5c6502bffa1f/1/cZp46vnuVnFoojq0pLZZ-QY61QA.roa
Signing time: Mon 14 Oct 2024 09:56:11 +0000
ROA not before: Mon 14 Oct 2024 09:56:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21215
IP address blocks: 185.81.60.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/8d6943-ca75-4372-b77f-5c6502bffa1f/1/xtGGU_v7b9VzLclAwdZdd6sLv6M.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/8d6943-ca75-4372-b77f-5c6502bffa1f/1/xtGGU_v7b9VzLclAwdZdd6sLv6M.mft
rsync://rpki.ripe.net/repository/DEFAULT/xtGGU_v7b9VzLclAwdZdd6sLv6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 15:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:8a:74:ee:4b:1a:85:a3:47:80:e4:a1:5e:ad:cd:3e:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6d18653fbfb6fd5732dc940c1d65d77ab0bbfa3
Validity
Not Before: Oct 14 09:56:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=719a78eaf9ee567168a23ab4a4b659f9063ad500
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:9d:27:c6:6f:d2:66:ed:b2:fa:43:81:3d:d2:
3e:31:6c:5e:14:e6:56:a2:54:e8:92:83:18:a2:62:
5e:ad:76:cd:d4:d2:ff:e5:46:df:30:82:15:a1:30:
38:9a:25:de:e6:52:13:7c:33:50:1b:f1:f2:9f:7a:
45:e6:1b:52:a1:a7:46:f5:52:ad:80:51:de:08:e5:
a6:67:6f:ec:e1:39:c7:3d:56:c8:7b:24:22:97:a4:
4e:0f:8d:7b:65:89:12:6b:aa:50:79:42:c3:2f:79:
fc:73:ff:3e:f2:29:58:58:c7:43:08:62:c1:00:e7:
42:ed:60:86:e5:0d:4d:fb:01:09:47:eb:f5:3f:14:
03:8b:2c:c8:9f:2d:68:aa:b6:eb:b0:0c:d6:b7:e6:
5a:5e:a9:f9:77:35:0b:36:d3:13:dd:28:53:ce:94:
e0:27:8e:0b:17:af:7f:a8:f9:3c:be:e3:58:2b:01:
57:d0:bc:99:5e:34:86:14:be:45:c1:d2:79:80:bd:
07:87:e6:30:45:c8:11:e5:89:72:b2:84:1f:cc:90:
00:ac:c8:5c:9b:27:a6:fc:3c:c4:ad:cb:c0:ee:cc:
7e:1e:4b:5b:05:20:d6:6b:f0:aa:7c:d0:10:43:9a:
ce:cd:1f:e7:8b:0f:85:23:ef:7b:06:bb:34:cf:5e:
1f:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:9A:78:EA:F9:EE:56:71:68:A2:3A:B4:A4:B6:59:F9:06:3A:D5:00
X509v3 Authority Key Identifier:
keyid:C6:D1:86:53:FB:FB:6F:D5:73:2D:C9:40:C1:D6:5D:77:AB:0B:BF:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xtGGU_v7b9VzLclAwdZdd6sLv6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8d6943-ca75-4372-b77f-5c6502bffa1f/1/cZp46vnuVnFoojq0pLZZ-QY61QA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8d6943-ca75-4372-b77f-5c6502bffa1f/1/xtGGU_v7b9VzLclAwdZdd6sLv6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.81.60.0/22
Signature Algorithm: sha256WithRSAEncryption
1a:45:25:aa:a8:a6:97:5b:ac:fd:19:47:92:46:58:70:0f:9f:
c2:eb:33:b0:56:b2:63:76:80:39:17:18:2a:1d:d5:09:81:92:
ce:4e:17:87:96:7e:4b:89:3c:11:30:04:0d:0e:92:40:cf:81:
e2:40:62:e8:c6:fe:fc:f3:f0:fc:29:4e:f7:6d:a9:52:94:3e:
b3:8a:1b:85:49:3f:28:75:57:84:81:ff:97:e7:31:e9:70:4f:
ec:98:76:d5:06:a9:4b:24:2c:3e:9a:98:61:8a:a3:c8:e9:2a:
1d:6e:fc:6b:ad:cd:f0:49:19:4c:73:43:de:aa:9d:90:bb:bd:
85:e0:7b:18:58:80:59:7b:51:2a:62:a0:18:a6:6f:6e:64:44:
c2:6d:50:49:9f:b4:bd:10:59:d4:0c:f7:ad:a8:c1:18:a1:fe:
d6:4f:e5:0c:0b:a5:71:ad:7f:06:22:7b:3a:9b:1a:a9:85:fd:
1b:22:7e:0b:11:ac:72:a3:4b:ce:1d:75:09:46:0c:65:ab:35:
2d:54:33:d6:34:b3:3a:17:27:eb:d1:03:13:59:bc:ff:3a:2d:
96:e5:9d:08:b1:fb:80:d9:62:c5:bc:45:ed:f3:00:bc:97:b5:
c9:14:1b:97:40:6b:4e:9c:30:25:f1:15:8f:f2:bf:b2:c3:28:
46:26:b3:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 21:59:54 2024 by rpki-client on console-fra.rpki-client.org