Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/772cbc-7e69-4c91-86a3-3661b1ebbcfb/1/6jsqvyB2Wp56m80FgrpDIBsGs-M.roa
File: 6jsqvyB2Wp56m80FgrpDIBsGs-M.roa (raw, json)
Hash identifier: NAQLJVVp/S4GeDw9KT1i9+g3TtcxLTdndOPu3o149Fs=
Subject key identifier: EA:3B:2A:BF:20:76:5A:9E:7A:9B:CD:05:82:BA:43:20:1B:06:B3:E3
Certificate issuer: /CN=c276a8ba874c3fbddad344d03258b3e2c04d7bcb
Certificate serial: 018CC49380E4DC1832026136327D0AAECF42
Authority key identifier: C2:76:A8:BA:87:4C:3F:BD:DA:D3:44:D0:32:58:B3:E2:C0:4D:7B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wnaouodMP73a00TQMliz4sBNe8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/772cbc-7e69-4c91-86a3-3661b1ebbcfb/1/6jsqvyB2Wp56m80FgrpDIBsGs-M.roa
Signing time: Mon 01 Jan 2024 10:30:50 +0000
ROA not before: Mon 01 Jan 2024 10:30:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51872
IP address blocks: 45.93.204.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/772cbc-7e69-4c91-86a3-3661b1ebbcfb/1/wnaouodMP73a00TQMliz4sBNe8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/772cbc-7e69-4c91-86a3-3661b1ebbcfb/1/wnaouodMP73a00TQMliz4sBNe8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/wnaouodMP73a00TQMliz4sBNe8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Jun 2024 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:80:e4:dc:18:32:02:61:36:32:7d:0a:ae:cf:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c276a8ba874c3fbddad344d03258b3e2c04d7bcb
Validity
Not Before: Jan 1 10:30:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ea3b2abf20765a9e7a9bcd0582ba43201b06b3e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:9d:ce:2c:3f:19:7e:76:2d:0f:3e:d0:e1:f7:
0f:31:8c:4f:78:3b:f7:21:96:ee:10:78:6d:49:8b:
2f:b4:80:3e:d1:1f:02:d5:01:f3:9e:14:16:a7:9b:
1f:c7:b1:53:77:f2:ea:84:c0:8c:94:a3:5f:67:bb:
07:02:1f:77:fe:08:e9:5f:ef:99:a6:da:17:f1:b1:
11:91:78:2f:20:e8:af:8d:16:37:81:24:ef:08:d5:
1f:55:6f:71:84:b1:a2:5e:ba:13:96:2a:bd:3f:97:
49:9a:a4:60:b7:49:36:fd:08:ca:90:bf:c5:ab:3e:
06:c0:6e:5a:9a:71:b0:9c:40:a7:2c:1b:6e:9a:00:
9b:41:bb:4a:0f:3c:d9:a1:9f:dc:f7:c5:a0:25:8e:
ee:b6:db:3f:8e:51:fa:57:ed:72:a5:15:35:d3:57:
73:fd:36:d8:70:4e:d2:11:00:97:c6:95:5d:6a:f7:
cd:96:b8:f5:35:42:a7:cb:dc:f8:f1:0b:20:ad:0d:
b9:64:6c:0e:24:37:f1:b8:df:53:ab:c3:fe:3b:48:
44:00:b3:1b:fc:ee:5e:31:8e:2e:32:75:16:bc:92:
d5:6b:c8:f9:1d:45:c4:be:45:ed:bf:f3:5c:d1:f2:
c2:c2:96:1a:d9:5d:73:64:73:5a:99:51:70:4e:2f:
c0:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:3B:2A:BF:20:76:5A:9E:7A:9B:CD:05:82:BA:43:20:1B:06:B3:E3
X509v3 Authority Key Identifier:
keyid:C2:76:A8:BA:87:4C:3F:BD:DA:D3:44:D0:32:58:B3:E2:C0:4D:7B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wnaouodMP73a00TQMliz4sBNe8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/772cbc-7e69-4c91-86a3-3661b1ebbcfb/1/6jsqvyB2Wp56m80FgrpDIBsGs-M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/772cbc-7e69-4c91-86a3-3661b1ebbcfb/1/wnaouodMP73a00TQMliz4sBNe8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.93.204.0/22
Signature Algorithm: sha256WithRSAEncryption
47:90:be:e6:7b:96:be:aa:cb:83:26:c7:3d:47:60:c7:2e:2e:
5c:70:6a:82:b4:f8:df:bb:b7:19:3a:28:a3:ea:14:2c:2f:9e:
8a:42:f4:f7:37:62:2c:70:c2:73:a2:50:a8:1b:e7:db:fa:6c:
af:2b:23:d3:e8:89:d7:15:66:88:d7:c0:3f:10:6b:af:2e:8b:
ed:0e:3d:16:56:a1:cb:0e:df:d4:49:0a:8a:d9:31:56:69:7e:
df:f6:5c:c5:c6:c3:bc:87:87:be:40:e4:68:c0:90:d3:78:03:
01:ee:d6:a7:5d:71:d5:ca:2a:09:38:4f:27:25:d9:38:11:a2:
34:80:7f:a0:ac:74:7c:f1:3a:b0:d9:49:8f:b4:21:8d:d3:e3:
fd:55:89:ea:74:02:24:6c:05:77:67:d5:58:03:a7:94:ca:35:
26:91:ef:fb:0a:f7:83:7b:54:7d:4e:9c:90:74:ef:78:fb:11:
06:73:11:3e:d4:6d:43:f8:54:88:4f:23:6c:32:c1:28:cc:89:
41:f8:42:09:37:33:b3:a1:8b:9f:07:1e:cf:31:35:46:6a:9a:
c7:84:ad:1f:fc:2c:b8:71:78:f3:b1:40:67:57:f5:15:26:e8:
86:cf:b8:86:90:b7:2c:5c:91:fd:4c:11:7b:f7:30:9e:8d:38:
c5:ca:51:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 09:07:44 2024 by rpki-client on console-ams.rpki-client.org