Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/6Y2p32yEpoumy9czEC_atV_jpwg.roa
File: 6Y2p32yEpoumy9czEC_atV_jpwg.roa (raw, json)
Hash identifier: o13SOdb7f+dtM+e1ffaGMXvs8tR6Mkt+CUQwYfhSC+E=
Subject key identifier: E9:8D:A9:DF:6C:84:A6:8B:A6:CB:D7:33:10:2F:DA:B5:5F:E3:A7:08
Certificate issuer: /CN=0a37d807d4f7cdd3e0afe4abc8ee5a880c6090f1
Certificate serial: 018CC727615DFD8FF779DA42D51F0BB4CD37
Authority key identifier: 0A:37:D8:07:D4:F7:CD:D3:E0:AF:E4:AB:C8:EE:5A:88:0C:60:90:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CjfYB9T3zdPgr-SryO5aiAxgkPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/6Y2p32yEpoumy9czEC_atV_jpwg.roa
Signing time: Mon 01 Jan 2024 22:31:35 +0000
ROA not before: Mon 01 Jan 2024 22:31:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203926
IP address blocks: 159.151.128.0/18 maxlen: 18
192.109.143.0/24 maxlen: 24
2a07:8144::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/CjfYB9T3zdPgr-SryO5aiAxgkPE.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/CjfYB9T3zdPgr-SryO5aiAxgkPE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CjfYB9T3zdPgr-SryO5aiAxgkPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 22:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:61:5d:fd:8f:f7:79:da:42:d5:1f:0b:b4:cd:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a37d807d4f7cdd3e0afe4abc8ee5a880c6090f1
Validity
Not Before: Jan 1 22:31:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e98da9df6c84a68ba6cbd733102fdab55fe3a708
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:51:dd:ad:69:a7:e9:73:b8:d3:3b:6e:fc:c3:
1a:76:da:08:f8:1d:e1:6c:0f:91:16:a9:fe:f5:8e:
8a:4a:fb:2f:f3:70:bd:ce:fd:69:29:ab:69:da:00:
a5:10:84:88:8b:fa:7e:5f:8c:0f:55:10:0f:d5:90:
33:e5:f1:18:1c:5f:c4:23:ba:e8:69:66:78:dc:87:
ec:a8:50:15:1d:68:df:d8:6d:22:c0:c1:93:cc:45:
9e:c3:81:e5:68:41:83:f7:04:1e:0f:95:e1:5d:7b:
0b:ee:8d:2a:06:bc:c1:a1:92:97:25:9b:3e:c6:0a:
59:08:da:ae:8a:dc:7c:42:44:a2:d3:14:b4:9f:18:
8a:00:e3:1d:13:69:13:2c:79:4f:f9:2f:25:d4:fd:
8f:cd:ab:1b:b9:81:18:5b:ed:bc:a7:e5:2b:7b:a1:
2a:82:d6:e0:43:87:8d:5a:b2:03:f4:26:13:6f:8c:
28:bd:44:02:63:23:4f:42:69:59:ea:3e:9e:5a:87:
8a:35:c6:b7:80:05:30:0e:9b:e3:42:52:74:48:a6:
5f:8c:f7:ca:15:a2:f5:27:6d:cc:78:b5:6e:4b:28:
cb:20:70:fb:94:c3:8d:e9:44:6b:0b:6b:3b:aa:5e:
42:04:b5:6a:49:a4:d1:d8:e1:c3:5a:c9:d0:43:f4:
4b:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:8D:A9:DF:6C:84:A6:8B:A6:CB:D7:33:10:2F:DA:B5:5F:E3:A7:08
X509v3 Authority Key Identifier:
keyid:0A:37:D8:07:D4:F7:CD:D3:E0:AF:E4:AB:C8:EE:5A:88:0C:60:90:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CjfYB9T3zdPgr-SryO5aiAxgkPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/6Y2p32yEpoumy9czEC_atV_jpwg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/CjfYB9T3zdPgr-SryO5aiAxgkPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.151.128.0/18
192.109.143.0/24
IPv6:
2a07:8144::/36
Signature Algorithm: sha256WithRSAEncryption
3c:01:6a:31:f2:70:9b:9a:8a:c3:ae:42:17:a0:41:b4:ff:00:
20:aa:da:5b:98:02:38:15:33:e4:4a:48:55:1d:b7:ad:97:d5:
14:7c:b6:b1:b4:0c:3c:35:dc:fb:c4:a0:d6:50:62:34:42:0f:
20:82:61:57:6d:77:8f:74:c8:1c:64:f1:2a:dc:e9:54:9b:69:
0c:ce:39:40:28:64:eb:ab:85:5d:3e:59:39:2f:a6:da:85:23:
fb:5e:c6:a9:94:23:8a:56:1e:1c:0c:22:a3:54:6c:cc:6b:36:
19:37:6a:e8:04:b5:5f:39:60:ca:34:6d:ca:a1:0b:f6:ee:e5:
91:24:e0:bd:52:7c:ae:b3:56:31:d0:80:39:11:6e:5c:4e:5f:
c2:41:9d:a4:53:1a:54:18:2b:f3:09:fd:90:03:ec:cb:0e:47:
ec:fa:14:5d:6d:a0:46:7d:40:dc:0e:b2:a6:32:22:19:b9:15:
93:74:2c:d9:63:bb:66:68:e9:59:07:83:6e:51:ca:91:10:eb:
ee:99:13:bb:78:c2:3d:9f:58:86:60:c9:80:74:76:e3:be:72:
dc:d8:ff:60:c4:49:96:58:6f:24:b4:99:c1:56:d1:9b:96:8a:
05:d1:4e:d4:f3:9b:dd:2c:0d:d0:dd:3b:eb:35:62:95:40:e2:
f4:64:29:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 06:41:17 2024 by rpki-client on console-ams.rpki-client.org