Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/6EwhYApQz1DoGFz7Q6XgP0pJ76E.roa
File: 6EwhYApQz1DoGFz7Q6XgP0pJ76E.roa (raw, json)
Hash identifier: V3wmq9MCTAK01/QpP1PC8ImY6zTsqewE4LjOAgUZOq4=
Subject key identifier: E8:4C:21:60:0A:50:CF:50:E8:18:5C:FB:43:A5:E0:3F:4A:49:EF:A1
Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial: 018CC64A7CB1C5EBF7F64D38937D5043EBCB
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/6EwhYApQz1DoGFz7Q6XgP0pJ76E.roa
Signing time: Mon 01 Jan 2024 18:30:19 +0000
ROA not before: Mon 01 Jan 2024 18:30:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59960
IP address blocks: 141.101.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 May 2024 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:7c:b1:c5:eb:f7:f6:4d:38:93:7d:50:43:eb:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Validity
Not Before: Jan 1 18:30:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e84c21600a50cf50e8185cfb43a5e03f4a49efa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:d6:5b:1a:21:9e:9a:f8:be:cd:84:ab:5c:f4:
86:c8:f7:91:8b:5d:0a:a6:ab:a8:ef:86:be:4d:6e:
fb:3a:23:0d:b9:9a:10:61:7d:16:0e:7e:9a:59:af:
81:36:7c:58:17:d2:1b:ba:a7:ec:1c:43:a6:ab:96:
dc:62:7c:72:77:1d:20:1f:9a:a4:e0:1f:ab:d5:84:
3d:56:77:4b:94:13:d8:0b:b6:28:aa:ea:e8:a2:84:
cc:25:c2:dc:d9:96:78:28:42:ee:f5:d6:4b:fa:af:
51:81:92:cc:c6:fe:77:a9:5f:96:94:36:52:e6:d5:
10:6b:ee:91:e4:82:8a:7e:92:65:17:cc:05:0a:22:
ad:c4:f8:6a:20:80:17:8a:c2:50:b6:75:b0:56:0b:
d9:ab:7e:6c:81:43:be:24:90:e0:32:38:53:af:38:
97:6a:1f:c5:e1:1c:5d:4b:3a:c9:7a:02:76:58:9a:
db:5b:73:fd:f9:8b:92:43:67:74:3f:ec:96:f7:2b:
e2:2e:7c:bf:af:9a:9f:94:3f:17:73:9b:b5:03:64:
79:4d:1d:a9:e7:05:30:c4:f2:a3:32:31:c8:fd:bb:
9a:bc:9a:09:17:94:ad:1f:ed:a2:78:36:bc:02:f1:
2f:04:2c:10:7c:bc:da:11:47:10:3b:1f:9f:aa:fd:
1e:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:4C:21:60:0A:50:CF:50:E8:18:5C:FB:43:A5:E0:3F:4A:49:EF:A1
X509v3 Authority Key Identifier:
keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/6EwhYApQz1DoGFz7Q6XgP0pJ76E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.101.247.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:33:18:b4:06:e9:05:50:92:8a:dd:b9:45:c2:7d:2c:7e:fa:
4c:1b:66:5c:6c:b2:0a:b1:4a:99:e7:cd:01:71:09:7d:2d:26:
5c:a1:13:ca:b6:47:c1:eb:59:77:c8:32:36:47:dc:98:ee:04:
1c:b2:a5:c6:db:e3:f6:8c:f0:50:2b:13:f9:20:ff:2c:f2:1c:
81:a6:23:14:ec:f6:76:e3:21:e1:05:92:20:f2:a0:28:81:6d:
8a:65:2f:6a:8e:48:62:e0:f4:32:d2:b6:26:9f:e8:07:3c:37:
58:47:7f:0c:4e:8b:e6:2d:d4:1f:00:c0:20:90:21:f8:8e:2c:
87:e6:39:19:25:d0:b7:ff:8c:ff:13:64:86:74:32:2e:e4:53:
14:4d:cb:dd:71:91:1d:e7:6d:0b:8e:5f:8a:1f:a9:8a:22:84:
8b:dc:cb:4e:79:e4:c3:96:7e:0e:28:98:3d:71:bd:08:1d:7d:
37:a2:6c:5d:2c:8a:2e:ca:98:eb:fb:4d:47:b1:85:58:6d:cd:
ef:ac:54:42:71:ce:9b:17:33:6e:2b:15:14:c0:32:44:c2:d6:
91:5c:56:2a:9f:1a:45:f6:7e:46:2f:a1:59:37:b4:37:13:eb:
dd:0c:95:20:01:b8:f1:2b:98:6b:6c:24:26:bf:a5:15:49:98:
ed:7e:da:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 17:27:03 2024 by rpki-client on console-ams.rpki-client.org