Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/6oTmgk3q_hVXpW-E3nkTAPGJQQA.roa
File: 6oTmgk3q_hVXpW-E3nkTAPGJQQA.roa (raw, json)
Hash identifier: EkoGCMiGw/cZU9AKuEdw96MYl1j5Ed1z89vAi5W2p4c=
Subject key identifier: EA:84:E6:82:4D:EA:FE:15:57:A5:6F:84:DE:79:13:00:F1:89:41:00
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018F73ABBCEFD908FEBCD05A49635B5644C3
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/6oTmgk3q_hVXpW-E3nkTAPGJQQA.roa
Signing time: Mon 13 May 2024 20:36:25 +0000
ROA not before: Mon 13 May 2024 20:36:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59895
IP address blocks: 217.144.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:73:ab:bc:ef:d9:08:fe:bc:d0:5a:49:63:5b:56:44:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: May 13 20:36:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ea84e6824deafe1557a56f84de791300f1894100
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:71:0d:54:cb:77:96:c7:39:7e:57:df:4b:c8:
f8:9a:9f:fe:be:6d:ce:dc:44:ee:12:9b:4a:e8:76:
dc:b2:9e:28:24:25:a4:b6:5a:3e:cf:53:2a:10:03:
48:a9:ff:27:d0:5c:18:89:dc:4d:50:44:7a:92:6b:
b1:0e:17:7b:3b:15:63:3a:9d:b2:df:8d:ec:a4:d3:
d7:c7:3b:1b:7e:d3:16:c2:ed:75:37:79:13:84:80:
3b:ff:1e:df:ff:cf:50:02:10:5b:cc:a1:b4:fb:6b:
ed:be:6d:ca:9f:24:ac:68:49:d2:4d:ac:b8:93:78:
d9:11:5a:9e:6c:ae:34:31:25:05:c4:0f:d2:3d:26:
b1:5d:bf:3d:f4:51:51:b5:47:21:f8:e6:2d:bd:fa:
af:51:64:c5:1e:b6:c9:7c:1f:64:b2:cb:43:d4:38:
c8:1c:5c:46:a9:c8:e3:5e:43:be:77:63:c0:c0:11:
be:3f:63:ec:8e:f2:4e:2c:04:5d:88:76:73:80:57:
35:b7:a3:a8:f6:58:cc:9e:f8:21:0f:0a:db:96:c1:
ae:d1:ae:38:56:44:4d:de:d0:ec:03:90:7d:ea:ef:
60:cc:92:b4:7b:53:b0:a4:06:b3:71:a1:77:51:e7:
15:8e:46:26:1d:a1:b4:99:4f:f7:a7:00:b9:4e:64:
40:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:84:E6:82:4D:EA:FE:15:57:A5:6F:84:DE:79:13:00:F1:89:41:00
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/6oTmgk3q_hVXpW-E3nkTAPGJQQA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.144.158.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:1e:90:2c:a6:09:45:dd:2e:0d:1b:57:d3:62:75:d0:43:33:
ae:64:57:f1:ca:a2:96:4d:f5:dc:78:c3:f5:92:9d:44:36:87:
2a:8a:e9:03:a5:05:8a:39:9e:51:48:cf:b7:de:cf:79:47:62:
05:6c:50:f4:97:db:f5:59:b2:6b:cc:32:42:2f:b5:f4:b3:6c:
73:8c:2e:98:00:61:56:5b:0f:41:4b:3d:a7:f1:7f:4d:ae:01:
0c:ee:7b:11:59:78:66:53:55:a2:84:9f:9e:73:ba:bd:bd:95:
f3:04:22:d4:65:23:b6:e0:3d:32:67:e2:ba:69:8c:1d:7d:07:
33:81:9c:3f:0a:15:3e:48:3d:fe:f1:2f:a7:11:50:d3:af:9e:
8a:91:37:22:66:df:4e:76:51:45:5f:eb:48:aa:ca:03:d0:f6:
1b:ef:d8:19:29:a0:da:c2:63:5f:7a:22:98:38:76:f1:be:59:
e8:48:b3:70:4a:ee:f5:37:c1:04:e3:97:3a:5f:b9:3c:cc:4e:
ef:3a:b7:7f:f5:70:d8:72:ad:78:bf:0e:89:f8:63:a4:7c:64:
d8:74:e5:21:32:a6:a4:0c:76:cc:9f:ba:14:12:51:4c:ea:11:
df:81:83:23:38:66:63:b4:82:91:8e:79:f8:e3:28:81:82:c1:
8c:91:fe:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:57:15 2024 by rpki-client on console-fra.rpki-client.org