Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/19870f-866c-4420-ad08-30c9e202e995/1/6nwpDUvxd6tZ70tSd4pV_FUoluc.roa
File: 6nwpDUvxd6tZ70tSd4pV_FUoluc.roa (raw, json)
Hash identifier: /fcPNPzIy9EeCAtVX6fxrZYh6dN/wo1HYAiFm1ilXtw=
Subject key identifier: EA:7C:29:0D:4B:F1:77:AB:59:EF:4B:52:77:8A:55:FC:55:28:96:E7
Certificate issuer: /CN=ead799026094d60516b527d842b6166805668e9e
Certificate serial: 018CCA2BC84FF6C6D53861953768717FC7C7
Authority key identifier: EA:D7:99:02:60:94:D6:05:16:B5:27:D8:42:B6:16:68:05:66:8E:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6teZAmCU1gUWtSfYQrYWaAVmjp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/19870f-866c-4420-ad08-30c9e202e995/1/6nwpDUvxd6tZ70tSd4pV_FUoluc.roa
Signing time: Tue 02 Jan 2024 12:35:16 +0000
ROA not before: Tue 02 Jan 2024 12:35:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42880
IP address blocks: 84.246.176.0/21 maxlen: 21
84.246.182.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/19870f-866c-4420-ad08-30c9e202e995/1/6teZAmCU1gUWtSfYQrYWaAVmjp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/19870f-866c-4420-ad08-30c9e202e995/1/6teZAmCU1gUWtSfYQrYWaAVmjp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/6teZAmCU1gUWtSfYQrYWaAVmjp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 01:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2b:c8:4f:f6:c6:d5:38:61:95:37:68:71:7f:c7:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ead799026094d60516b527d842b6166805668e9e
Validity
Not Before: Jan 2 12:35:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ea7c290d4bf177ab59ef4b52778a55fc552896e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:4c:8f:c1:37:ef:10:9e:bf:fd:3a:4a:08:6b:
0a:17:7e:be:e4:3b:7c:f6:fb:03:a9:a4:67:44:ec:
eb:ac:a7:fa:b7:14:0a:54:58:76:34:c6:37:24:1e:
eb:c7:b6:08:2e:bb:b9:4c:94:a6:94:50:6d:d4:c2:
be:85:1a:4d:73:b3:57:44:b8:87:0f:b5:e8:64:d0:
c5:24:ed:a2:76:2f:16:51:46:87:bf:9c:67:69:be:
94:2b:42:42:71:07:a1:d6:9d:5e:a3:50:41:8c:f8:
2d:6a:25:f6:af:90:54:18:a0:09:3b:64:98:ac:42:
e8:91:07:95:39:ec:09:51:f6:dd:f9:41:0c:f6:a9:
80:b0:2e:ef:c6:ed:d6:ee:bf:c8:0f:15:69:3c:25:
e4:8e:a1:f1:3e:cf:25:52:48:e2:2c:cd:9e:f4:ec:
7c:47:8a:48:d0:8c:d2:51:7e:4d:f8:90:99:1c:30:
87:30:42:6e:44:00:83:c2:82:0e:22:a8:d5:b2:fc:
47:58:71:8c:28:13:d7:37:30:72:97:35:50:92:29:
13:f1:5b:2e:05:a9:d2:06:f0:f4:90:d6:19:5f:7d:
71:74:a0:26:40:bb:41:6b:64:50:53:50:ad:fc:b9:
14:c6:32:a0:0d:b0:91:33:56:e8:ee:5e:6d:6a:4b:
3b:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:7C:29:0D:4B:F1:77:AB:59:EF:4B:52:77:8A:55:FC:55:28:96:E7
X509v3 Authority Key Identifier:
keyid:EA:D7:99:02:60:94:D6:05:16:B5:27:D8:42:B6:16:68:05:66:8E:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6teZAmCU1gUWtSfYQrYWaAVmjp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/19870f-866c-4420-ad08-30c9e202e995/1/6nwpDUvxd6tZ70tSd4pV_FUoluc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/19870f-866c-4420-ad08-30c9e202e995/1/6teZAmCU1gUWtSfYQrYWaAVmjp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.246.176.0/21
Signature Algorithm: sha256WithRSAEncryption
b5:e9:a8:e3:ae:df:8c:ab:3c:69:d1:56:56:d7:e6:1b:16:ff:
3d:c4:c5:b4:b3:ba:f8:db:78:78:03:8f:f5:27:39:47:b5:c7:
39:21:ab:3b:63:52:a3:39:08:d2:2a:f7:40:8a:25:d6:74:20:
16:08:00:30:fb:ee:21:f2:5f:66:0a:e3:a6:be:bb:c2:c7:b8:
ff:00:54:e7:4b:95:24:88:c6:83:d9:17:41:10:92:b3:d2:ab:
ab:f8:eb:b7:27:84:38:e9:92:7d:bf:93:de:6f:2b:f2:01:fc:
c4:b0:05:bb:94:a9:75:b3:b5:b2:dd:b8:12:73:8a:df:a3:4a:
dd:9e:63:ee:de:ea:39:5a:a4:48:b8:bf:94:ab:3c:f9:5d:af:
76:a6:62:9c:92:8d:76:cf:84:44:72:f1:36:2a:de:a7:e5:c7:
67:37:6f:63:4e:c7:67:5c:a7:96:47:c1:59:02:7a:d1:f9:49:
d0:4d:8e:69:08:29:a1:1a:b2:2d:b2:00:ba:dc:3d:b9:65:6b:
4a:0d:68:e2:bb:ec:b0:73:f5:a3:0f:fc:9d:9e:c1:80:61:2c:
9c:1f:5a:be:c8:34:64:97:c1:77:27:a4:9f:80:fb:10:bb:04:
ef:ec:84:48:26:26:42:ed:e6:5d:a9:32:26:63:1b:fe:5e:7e:
3d:94:b8:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 05:50:53 2024 by rpki-client on console-fra.rpki-client.org