Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/84acdf-ba85-4a81-a306-f9ab3b052349/1/1sN9NJr6jFiLgy-flef0MMfpVGk.roa
File: 1sN9NJr6jFiLgy-flef0MMfpVGk.roa (raw, json)
Hash identifier: YWtu1BHHKIc2uZ93DaV7obKvggTL3q0GRsdFPCtp9/M=
Subject key identifier: D6:C3:7D:34:9A:FA:8C:58:8B:83:2F:9F:95:E7:F4:30:C7:E9:54:69
Certificate issuer: /CN=6ffb0f9bdc3a2fae47b47e70218993c919f10fb0
Certificate serial: 018CC424CE2F4EA09F9CD0ABDBAC4F567898
Authority key identifier: 6F:FB:0F:9B:DC:3A:2F:AE:47:B4:7E:70:21:89:93:C9:19:F1:0F:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b_sPm9w6L65HtH5wIYmTyRnxD7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/84acdf-ba85-4a81-a306-f9ab3b052349/1/1sN9NJr6jFiLgy-flef0MMfpVGk.roa
Signing time: Mon 01 Jan 2024 08:29:55 +0000
ROA not before: Mon 01 Jan 2024 08:29:55 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2799
IP address blocks: 147.186.0.0/17 maxlen: 17
147.186.128.0/17 maxlen: 17
147.186.171.0/24 maxlen: 24
2001:67c:49c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/84acdf-ba85-4a81-a306-f9ab3b052349/1/b_sPm9w6L65HtH5wIYmTyRnxD7A.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/84acdf-ba85-4a81-a306-f9ab3b052349/1/b_sPm9w6L65HtH5wIYmTyRnxD7A.mft
rsync://rpki.ripe.net/repository/DEFAULT/b_sPm9w6L65HtH5wIYmTyRnxD7A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 16:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:ce:2f:4e:a0:9f:9c:d0:ab:db:ac:4f:56:78:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ffb0f9bdc3a2fae47b47e70218993c919f10fb0
Validity
Not Before: Jan 1 08:29:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d6c37d349afa8c588b832f9f95e7f430c7e95469
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c7:53:38:19:80:2d:d8:b2:c0:a0:f2:80:78:
49:c5:32:ff:9d:bd:5c:ee:c4:1a:85:b9:e6:7c:4c:
c4:1f:7d:35:aa:6c:ed:03:de:83:b0:5f:56:25:67:
85:f3:bd:ef:50:cb:70:46:51:ac:0f:ae:4e:dd:2e:
54:b8:11:81:75:36:5c:c4:cb:6a:d8:5f:e9:5a:30:
e9:00:28:4d:69:d6:33:45:a8:46:bc:98:38:32:59:
80:da:30:e4:8e:5a:69:d3:d1:9c:eb:19:de:f6:ec:
01:e8:32:a4:d5:46:b4:e3:9c:2d:d6:b9:8e:60:4c:
b5:48:78:fb:cf:32:67:fc:f8:c0:bd:50:ec:c5:b5:
ef:84:cc:6a:a1:b1:f2:dd:7e:31:39:c6:27:50:c9:
22:9e:3e:c9:f7:94:40:1d:64:eb:d4:9a:5b:dd:f7:
be:f9:93:26:5f:f4:46:7a:b4:4b:2e:5b:ec:84:51:
34:8f:4c:07:dc:59:00:82:20:4d:bc:13:06:10:cd:
47:4a:3d:ec:79:00:52:12:32:6c:83:e7:c2:c6:80:
06:a7:dc:bb:ee:bb:0e:ba:fd:b1:aa:56:05:c3:89:
ff:79:be:7e:c8:b4:75:10:5c:df:bb:b7:72:f6:a8:
80:44:33:96:6f:7f:47:4a:50:0d:6c:fd:1c:34:05:
e4:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:C3:7D:34:9A:FA:8C:58:8B:83:2F:9F:95:E7:F4:30:C7:E9:54:69
X509v3 Authority Key Identifier:
keyid:6F:FB:0F:9B:DC:3A:2F:AE:47:B4:7E:70:21:89:93:C9:19:F1:0F:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b_sPm9w6L65HtH5wIYmTyRnxD7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/84acdf-ba85-4a81-a306-f9ab3b052349/1/1sN9NJr6jFiLgy-flef0MMfpVGk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/84acdf-ba85-4a81-a306-f9ab3b052349/1/b_sPm9w6L65HtH5wIYmTyRnxD7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.186.0.0/16
IPv6:
2001:67c:49c::/48
Signature Algorithm: sha256WithRSAEncryption
22:9f:64:c7:ec:b3:b7:32:38:ca:67:6d:1d:03:e7:86:f4:0c:
21:5e:1d:de:8e:f4:bc:cc:1e:d6:6f:b5:68:22:52:14:95:20:
14:d1:dd:94:77:2e:5f:76:93:76:de:1f:4a:a6:2c:72:ea:e3:
35:30:ed:8a:bc:6e:0a:4d:e0:b3:f6:5c:0b:ef:56:47:38:75:
1e:dc:42:d2:93:9f:98:bf:e4:a0:77:75:3b:45:4f:12:c1:4f:
5c:b6:ad:45:5d:80:d9:dd:bb:5b:2a:ac:f6:d9:a8:0c:5b:30:
60:17:82:58:2c:2c:b9:6f:84:55:3a:f8:a1:2c:7e:47:df:21:
c3:45:8c:e5:49:1b:37:68:4e:ff:8e:22:ae:4f:6e:56:00:22:
0b:ed:ec:00:f7:96:64:dd:6b:2e:f7:c3:d3:56:a2:5a:ac:58:
7b:07:d8:4c:1c:71:23:93:e4:76:8f:f0:cb:e0:39:aa:47:25:
d7:52:86:b9:d4:66:6b:18:19:a0:fd:88:e8:be:71:44:46:a1:
68:39:92:a8:a3:82:a0:90:22:15:96:69:06:f3:c5:8a:e9:41:
0d:11:68:77:39:94:e3:38:2d:59:95:d1:b7:f7:c7:9e:ba:00:
97:99:8b:0e:90:7a:26:a0:36:5d:94:2e:c4:48:92:f2:b5:f8:
e9:d4:db:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 20:42:48 2024 by rpki-client on console-ams.rpki-client.org