Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/46d943-8cbd-41a2-b9f2-52058f8a9a1a/1/6t11f7XGx_fHdjPM_uEA1ZJ14X4.roa
File: 6t11f7XGx_fHdjPM_uEA1ZJ14X4.roa (raw, json)
Hash identifier: qVgDsIlLy4l9y/YifLatAj5jxYdF3/3GpQqQ5cY6JFE=
Subject key identifier: EA:DD:75:7F:B5:C6:C7:F7:C7:76:33:CC:FE:E1:00:D5:92:75:E1:7E
Certificate issuer: /CN=3ec63e5db0435c2d3e74a6b28ad3d9c30d6a8cee
Certificate serial: 01915924574B1622D96E61A97D72E34B7446
Authority key identifier: 3E:C6:3E:5D:B0:43:5C:2D:3E:74:A6:B2:8A:D3:D9:C3:0D:6A:8C:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PsY-XbBDXC0-dKayitPZww1qjO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/46d943-8cbd-41a2-b9f2-52058f8a9a1a/1/6t11f7XGx_fHdjPM_uEA1ZJ14X4.roa
Signing time: Fri 16 Aug 2024 03:03:59 +0000
ROA not before: Fri 16 Aug 2024 03:03:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20253
IP address blocks: 84.201.208.0/20 maxlen: 24
84.201.221.0/24 maxlen: 24
146.19.181.0/24 maxlen: 26
217.20.48.0/24 maxlen: 24
217.20.49.0/24 maxlen: 24
217.20.50.0/24 maxlen: 24
217.20.51.0/24 maxlen: 24
217.20.52.0/24 maxlen: 24
217.20.53.0/24 maxlen: 24
217.20.54.0/24 maxlen: 24
217.20.55.0/24 maxlen: 24
217.20.56.0/24 maxlen: 24
217.20.57.0/24 maxlen: 24
217.20.58.0/24 maxlen: 24
217.20.59.0/24 maxlen: 24
217.20.60.0/24 maxlen: 24
217.20.61.0/24 maxlen: 24
217.20.62.0/24 maxlen: 24
217.20.63.0/24 maxlen: 24
2a12:45c7:ffff::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/46d943-8cbd-41a2-b9f2-52058f8a9a1a/1/PsY-XbBDXC0-dKayitPZww1qjO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/46d943-8cbd-41a2-b9f2-52058f8a9a1a/1/PsY-XbBDXC0-dKayitPZww1qjO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/PsY-XbBDXC0-dKayitPZww1qjO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 09:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:59:24:57:4b:16:22:d9:6e:61:a9:7d:72:e3:4b:74:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ec63e5db0435c2d3e74a6b28ad3d9c30d6a8cee
Validity
Not Before: Aug 16 03:03:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=eadd757fb5c6c7f7c77633ccfee100d59275e17e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ea:e3:c1:60:7b:e8:08:5c:d6:46:bd:9b:06:
78:be:c0:83:39:e2:2e:ed:1c:b9:cc:48:8a:b2:b9:
a2:19:96:63:b5:ed:61:fb:3d:aa:91:64:09:69:77:
f9:a0:a9:cd:c5:64:fe:b4:74:de:46:3e:1c:2b:fe:
d8:bb:7e:b5:45:b8:c0:71:73:9c:13:6e:80:ac:7b:
d8:b4:2a:b7:20:51:98:2d:12:cf:a6:b5:9c:86:7b:
dd:93:07:b5:e0:65:9e:d8:88:6e:28:ab:30:37:7b:
fc:79:1f:c5:26:3c:f4:24:14:ac:07:a3:98:c3:16:
4a:c7:0f:09:17:e1:31:c5:43:51:55:b7:aa:08:6b:
86:3c:ee:07:c4:4f:d6:4c:8c:1d:e0:90:11:8b:a6:
7e:ef:0b:4c:ca:bb:bc:db:38:99:63:f3:eb:1b:c1:
62:92:7b:69:57:38:c9:93:5b:cb:8e:2c:c4:1e:e0:
d5:e7:17:fb:fd:89:2a:6f:ac:11:7e:63:42:f7:38:
2c:e0:b0:a3:60:b3:30:03:b7:58:38:c0:cd:12:0d:
68:f0:b5:5b:09:c4:7f:e4:ae:0f:69:bd:5c:ce:e7:
43:6c:bd:9d:bc:22:9b:4a:32:1e:5f:48:5b:c1:3c:
51:52:7b:e0:8e:d9:e2:02:30:63:d8:95:41:94:da:
b3:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:DD:75:7F:B5:C6:C7:F7:C7:76:33:CC:FE:E1:00:D5:92:75:E1:7E
X509v3 Authority Key Identifier:
keyid:3E:C6:3E:5D:B0:43:5C:2D:3E:74:A6:B2:8A:D3:D9:C3:0D:6A:8C:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PsY-XbBDXC0-dKayitPZww1qjO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/46d943-8cbd-41a2-b9f2-52058f8a9a1a/1/6t11f7XGx_fHdjPM_uEA1ZJ14X4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/46d943-8cbd-41a2-b9f2-52058f8a9a1a/1/PsY-XbBDXC0-dKayitPZww1qjO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.201.208.0/20
146.19.181.0/24
217.20.48.0/20
IPv6:
2a12:45c7:ffff::/48
Signature Algorithm: sha256WithRSAEncryption
8b:9f:59:b4:fa:9d:14:bc:c1:5a:47:68:63:4f:42:02:86:fa:
13:3f:07:c5:eb:07:e9:9d:ca:c0:92:fa:27:6e:48:3f:83:84:
a7:69:32:5b:fa:3c:c2:26:5f:55:7d:2c:e1:bb:a2:73:79:3c:
d4:47:71:87:bf:5f:6d:c3:b0:ea:83:f6:97:85:1f:16:4f:03:
25:66:86:06:b8:a7:6f:80:ba:d2:37:10:f8:cb:d3:e9:e3:cf:
81:f1:56:eb:92:71:61:38:48:72:ac:fe:a4:44:e9:bc:f4:c6:
6b:44:90:d6:2d:13:2b:01:be:8c:58:bc:a6:ff:20:6f:59:30:
33:a0:36:39:13:76:35:10:9c:91:86:4f:dc:6e:e7:24:d7:4b:
8f:e6:9b:2f:80:cc:1d:ad:bc:75:fd:1a:69:f2:33:4f:95:ee:
cd:5b:9c:19:7e:76:bf:c1:17:24:e0:0a:b4:21:62:9d:d8:c6:
54:d5:a4:35:ec:c8:7b:25:ef:2e:b7:f5:57:e2:41:12:56:4e:
40:04:b7:46:1e:b3:f0:61:1c:dd:0b:2d:5c:fa:d4:da:73:d9:
09:65:34:a3:86:01:e7:74:ac:af:34:15:e2:46:06:6a:a4:a0:
e9:6b:54:a1:6c:bb:52:81:24:2b:cb:93:04:66:09:8d:7a:9a:
f6:38:3e:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:51:16 2024 by rpki-client on console-fra.rpki-client.org