Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/6wkQXJYdywFqz960nNr_W-aj02U.roa
File: 6wkQXJYdywFqz960nNr_W-aj02U.roa (raw, json)
Hash identifier: 9ZuYXnnzNRzo+J+7mV9QJSCCPr1dje4UssFeV6fu/to=
Subject key identifier: EB:09:10:5C:96:1D:CB:01:6A:CF:DE:B4:9C:DA:FF:5B:E6:A3:D3:65
Certificate issuer: /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Certificate serial: 018D3DD2F3F5799ED0BBD465325A5B874500
Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/6wkQXJYdywFqz960nNr_W-aj02U.roa
Signing time: Wed 24 Jan 2024 23:34:11 +0000
ROA not before: Wed 24 Jan 2024 23:34:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215664
IP address blocks: 194.36.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.mft
rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 May 2024 11:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:3d:d2:f3:f5:79:9e:d0:bb:d4:65:32:5a:5b:87:45:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Validity
Not Before: Jan 24 23:34:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=eb09105c961dcb016acfdeb49cdaff5be6a3d365
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:fc:34:a1:c2:88:b4:39:d5:57:b3:34:97:e7:
ab:0b:10:1d:7f:3d:ae:9e:52:9a:33:ff:94:2d:9d:
23:74:a7:5c:4e:b0:0a:08:2a:cc:90:d9:e7:63:d7:
4f:8c:f1:82:7b:f1:88:bd:57:66:29:10:55:4a:e2:
78:20:bc:0a:01:c9:02:02:48:13:24:5d:99:a0:90:
49:61:e0:cd:29:25:55:d5:d0:fc:8d:90:b1:9b:66:
c9:b7:64:a6:4f:26:bc:b6:66:fd:f8:ef:3c:db:95:
68:8f:e9:ee:70:0a:90:36:12:3e:a8:32:ef:02:db:
98:4e:53:0d:5b:cc:aa:98:27:ec:eb:a0:98:89:28:
22:cd:3d:fa:6e:c3:13:f3:ad:5c:24:a8:2c:61:e8:
d5:26:b2:70:cd:a6:78:b1:14:c8:35:30:3b:b8:33:
28:8f:c2:1a:11:3d:c8:6e:9c:f0:9e:6e:fb:53:47:
25:c4:80:51:8b:bc:95:18:9b:11:61:1f:e5:3c:04:
51:6e:5d:30:23:09:53:09:69:5e:ce:ec:70:30:0c:
f7:10:81:4e:5e:bd:ce:de:7d:9e:04:b8:3e:94:a8:
94:a3:a2:2a:42:87:96:2e:7f:3f:69:79:f2:4e:fb:
99:51:80:ae:41:cc:57:8d:f0:6d:d3:99:f6:ce:d7:
c9:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:09:10:5C:96:1D:CB:01:6A:CF:DE:B4:9C:DA:FF:5B:E6:A3:D3:65
X509v3 Authority Key Identifier:
keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/6wkQXJYdywFqz960nNr_W-aj02U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.36.26.0/24
Signature Algorithm: sha256WithRSAEncryption
09:79:97:c7:d7:4a:86:ea:a7:95:5c:cf:c1:b5:7a:2c:bf:0e:
6d:14:a4:d7:6a:15:dc:d4:61:32:11:2b:ca:87:94:ec:74:90:
c2:45:8c:db:fe:6e:f5:4d:9f:6a:78:d9:77:b5:7c:2c:3e:af:
6a:7e:46:15:dc:f9:e9:53:e8:fc:30:81:6a:04:a3:2c:d1:fe:
5d:02:b7:50:5f:62:7e:9d:57:d0:5f:bb:eb:9a:5d:fa:67:20:
39:f1:bf:6e:8a:92:d6:d6:a3:f1:b1:29:e0:17:57:81:a4:88:
b4:ed:ed:94:e4:8a:64:1c:c1:bc:e5:90:5e:38:eb:04:77:29:
d0:f8:ec:45:00:24:c2:46:f1:3a:df:41:eb:0c:8e:c7:1f:43:
e5:c2:bf:59:49:90:b8:c0:d8:42:1c:be:ce:3f:3f:fc:e1:01:
3c:4a:18:93:0c:88:f2:2c:79:55:9a:4f:3f:41:e1:b6:9c:5c:
1b:09:c3:2f:69:89:5f:49:af:33:76:c7:82:e2:28:ec:d0:d3:
f9:4f:ca:6e:bc:fd:ee:e9:61:8d:83:d5:3d:86:36:0e:ea:83:
81:e2:e5:41:ce:14:c3:62:a8:58:99:d4:79:b9:bd:bd:e3:ca:
1e:3d:92:c0:9f:c2:65:3e:a1:d4:2d:9b:c2:a2:eb:3d:a8:05:
8b:c7:24:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 27 16:23:07 2024 by rpki-client on console-ams.rpki-client.org