Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/638d88-4952-4960-8774-c1c4d8cbf459/1/6Gm-rqGkONk0D269h6e6dpbiV9I.roa
File: 6Gm-rqGkONk0D269h6e6dpbiV9I.roa (raw, json)
Hash identifier: qrp15iXFeaYYmDjBRT0BjCpne7HuI20sUV2Y9DLALGc=
Subject key identifier: E8:69:BE:AE:A1:A4:38:D9:34:0F:6E:BD:87:A7:BA:76:96:E2:57:D2
Certificate issuer: /CN=2a6f8ffbe098922071f0c9c3a60f5dfdcde46da4
Certificate serial: 018CC3B67292B60C08C87DDDA8693FE3AFC8
Authority key identifier: 2A:6F:8F:FB:E0:98:92:20:71:F0:C9:C3:A6:0F:5D:FD:CD:E4:6D:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Km-P--CYkiBx8MnDpg9d_c3kbaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/638d88-4952-4960-8774-c1c4d8cbf459/1/6Gm-rqGkONk0D269h6e6dpbiV9I.roa
Signing time: Mon 01 Jan 2024 06:29:23 +0000
ROA not before: Mon 01 Jan 2024 06:29:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34397
IP address blocks: 193.194.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/638d88-4952-4960-8774-c1c4d8cbf459/1/Km-P--CYkiBx8MnDpg9d_c3kbaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/638d88-4952-4960-8774-c1c4d8cbf459/1/Km-P--CYkiBx8MnDpg9d_c3kbaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Km-P--CYkiBx8MnDpg9d_c3kbaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:72:92:b6:0c:08:c8:7d:dd:a8:69:3f:e3:af:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a6f8ffbe098922071f0c9c3a60f5dfdcde46da4
Validity
Not Before: Jan 1 06:29:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e869beaea1a438d9340f6ebd87a7ba7696e257d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:32:9e:f9:f1:f0:48:7d:ad:37:26:48:ec:63:
31:76:8b:c6:1f:a7:48:d3:b6:2d:d9:d3:76:fd:e3:
13:97:ad:a4:e2:52:ad:b5:36:a1:bf:c4:09:b8:dc:
48:6f:c0:5f:d6:4c:7d:2f:27:84:7f:ff:d3:d9:84:
b6:14:c4:bb:bb:5c:8c:d3:db:b5:82:94:ed:22:f3:
bf:f5:d8:fa:79:d4:6c:60:d2:74:37:e2:ec:03:dd:
2d:59:9b:7f:18:27:31:44:4a:41:b7:18:a6:aa:a8:
d4:6a:88:92:21:51:e2:99:60:f6:95:58:54:85:76:
f6:04:be:5a:33:49:54:af:5b:2e:e5:32:cb:e2:9e:
5a:d9:45:73:89:b8:e4:b5:c9:4e:c9:0f:5d:04:19:
f4:c5:69:30:a6:c0:dd:f4:86:25:a4:86:0f:59:9f:
ea:b8:b7:e4:d2:24:0d:8b:6c:70:46:9b:80:7c:1d:
f0:a8:64:e9:24:f7:66:39:6f:ad:a1:55:9d:a8:4d:
31:73:56:46:84:f2:cb:b6:ca:ab:0e:5e:06:d8:62:
26:54:8f:d2:c9:ce:cd:be:15:d4:a5:9b:73:2d:2a:
02:32:14:a4:23:be:6d:d3:04:46:b5:c2:d0:22:e3:
24:1b:43:14:71:a6:2b:b2:8c:bb:a3:cf:bb:df:09:
c0:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:69:BE:AE:A1:A4:38:D9:34:0F:6E:BD:87:A7:BA:76:96:E2:57:D2
X509v3 Authority Key Identifier:
keyid:2A:6F:8F:FB:E0:98:92:20:71:F0:C9:C3:A6:0F:5D:FD:CD:E4:6D:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Km-P--CYkiBx8MnDpg9d_c3kbaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/638d88-4952-4960-8774-c1c4d8cbf459/1/6Gm-rqGkONk0D269h6e6dpbiV9I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/638d88-4952-4960-8774-c1c4d8cbf459/1/Km-P--CYkiBx8MnDpg9d_c3kbaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.194.122.0/24
Signature Algorithm: sha256WithRSAEncryption
94:52:5f:67:b1:7c:26:16:ee:3d:90:88:51:75:62:fe:ae:10:
5b:2c:ab:01:14:87:ac:68:2d:0e:76:89:2d:d4:fb:8d:ff:fa:
d2:cb:16:9c:06:93:3d:43:57:5c:6d:4d:5c:41:e0:27:d4:7a:
75:48:cc:f7:cc:23:65:de:2d:25:26:51:c5:db:5d:ab:a5:97:
f4:f9:14:ef:25:12:6e:0b:a3:33:22:c2:18:2d:07:4d:c6:41:
20:fe:f4:21:f4:90:57:73:d4:35:e4:43:72:e9:5e:80:11:8b:
00:71:88:30:23:5c:3f:99:2b:f6:a6:5c:14:a7:d0:39:21:4a:
64:57:08:5f:68:06:b8:d7:cf:5a:90:19:e4:b8:a2:33:f8:87:
75:94:42:82:40:db:5a:68:c7:c4:40:6e:4c:4d:81:7a:20:f6:
95:24:f0:a1:88:55:c2:20:90:94:21:87:ed:f5:74:8e:24:b8:
c8:1d:a7:e2:78:ec:2f:e4:86:31:75:31:03:df:84:7f:88:a5:
d2:b7:63:7b:e0:75:91:03:32:33:e2:e6:b0:67:65:d2:5f:72:
0b:6d:22:6a:86:1d:e2:3c:9d:9f:9c:c2:0c:3e:fa:82:f1:48:
8c:0a:0b:cf:b4:2e:af:dd:91:53:a5:fd:57:73:47:1a:3f:14:
06:20:2f:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 07:10:05 2024 by rpki-client on console-fra.rpki-client.org