Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/6Gxd7IDuK4xwHD8nDpQcz0UXbzI.roa
File: 6Gxd7IDuK4xwHD8nDpQcz0UXbzI.roa (raw, json)
Hash identifier: IkEbIR6JnCsYJupMBTydfhlMw5G/Fi9B+p4oCoYJroc=
Subject key identifier: E8:6C:5D:EC:80:EE:2B:8C:70:1C:3F:27:0E:94:1C:CF:45:17:6F:32
Certificate issuer: /CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Certificate serial: 0191E0D6081040EA22EB2F559E9CD7B162C6
Authority key identifier: 44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/6Gxd7IDuK4xwHD8nDpQcz0UXbzI.roa
Signing time: Wed 11 Sep 2024 11:26:48 +0000
ROA not before: Wed 11 Sep 2024 11:26:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9123
IP address blocks: 45.10.40.0/22 maxlen: 24
88.218.168.0/22 maxlen: 24
93.183.80.0/22 maxlen: 24
185.197.75.0/24 maxlen: 24
193.188.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:e0:d6:08:10:40:ea:22:eb:2f:55:9e:9c:d7:b1:62:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Validity
Not Before: Sep 11 11:26:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e86c5dec80ee2b8c701c3f270e941ccf45176f32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:8c:09:c7:60:86:97:f4:12:df:2f:0f:c5:de:
a3:29:cb:a5:7f:cd:d6:44:be:6b:86:58:93:0f:1c:
c1:8a:f0:d9:48:16:be:76:bc:c2:aa:e0:a6:09:04:
ac:4d:10:72:f3:73:94:b3:9b:59:af:81:4f:9a:a8:
7c:52:13:db:9a:f2:7e:db:59:16:fc:72:0e:03:84:
63:8d:7e:88:85:ff:8f:e2:ed:23:83:4b:58:f2:ea:
ef:b7:1b:ca:83:4e:59:9e:0a:e0:ec:50:2c:a4:ab:
8b:ac:57:97:93:78:a1:0c:11:a7:0d:eb:59:0e:45:
da:18:de:0f:4a:41:70:65:4f:14:77:c5:10:05:34:
94:40:4e:ec:6a:3e:03:47:4b:0c:f7:53:90:11:a6:
e1:9c:85:8f:ba:44:5b:26:a9:e9:8a:0a:ac:6d:4c:
b5:ea:39:4a:ad:74:de:f0:3a:eb:26:33:a2:0d:d2:
b7:05:4d:01:26:46:04:35:93:51:63:da:a0:43:57:
fb:04:58:e4:8c:ad:bc:37:03:c7:5c:40:9a:f8:60:
bc:04:26:b4:54:11:85:21:91:21:07:24:65:3a:f8:
af:42:a0:8a:b3:25:3c:b1:d3:d6:d2:9c:cf:90:a9:
28:5a:33:3c:6e:34:bc:14:44:a7:d2:04:8c:2f:3b:
b3:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:6C:5D:EC:80:EE:2B:8C:70:1C:3F:27:0E:94:1C:CF:45:17:6F:32
X509v3 Authority Key Identifier:
keyid:44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/6Gxd7IDuK4xwHD8nDpQcz0UXbzI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.40.0/22
88.218.168.0/22
93.183.80.0/22
185.197.75.0/24
193.188.23.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:5e:db:c0:78:d6:fc:6e:2a:78:94:3a:c8:dd:70:62:e5:35:
f8:ad:a3:aa:99:45:66:29:43:d7:5a:97:3a:c7:8c:1e:04:b7:
25:85:27:a3:5b:c9:aa:59:ba:01:43:36:0b:ff:bf:62:a6:65:
aa:9b:e4:86:83:74:9b:45:e2:ba:fa:be:d7:28:ec:75:ae:58:
df:f3:21:04:5c:e5:a5:8d:9c:6d:ad:b4:29:17:24:ae:d9:f5:
d1:79:07:fe:c4:68:d0:00:f0:aa:d7:2a:19:a3:ab:91:16:d3:
e0:ce:4b:cc:a6:5b:e3:8a:68:8b:ca:a7:8b:6e:63:df:cf:93:
b1:71:af:49:bd:5b:8e:f6:fc:cc:d2:d5:89:a7:fc:94:77:47:
82:0e:3f:e7:21:50:78:4d:63:5a:be:a3:19:4f:b1:62:b5:2e:
46:42:a2:b2:10:ef:be:86:75:d9:26:eb:53:2d:e5:d1:2c:0e:
f3:13:a8:4b:3c:a6:0a:f7:65:da:b0:7e:02:23:9e:dc:19:25:
90:60:20:71:0d:ef:dd:1e:82:74:26:5c:99:c6:11:0e:ae:18:
53:e8:58:ce:3b:11:ad:2e:15:bd:fa:58:c6:27:13:94:d2:38:
bd:af:b5:4b:95:10:14:94:4e:4f:71:8f:44:2d:83:c4:97:9d:
6a:c1:93:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:52:44 2024 by rpki-client on console-ams.rpki-client.org