Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/12e679-856c-48ea-a062-959ebb905b3a/1/dqYAuZurl6xwJlCjTAatLC7Knqw.roa
File: dqYAuZurl6xwJlCjTAatLC7Knqw.roa (raw, json)
Hash identifier: LVxsyU7YxmdEau7uU3HdQRZNm5927zZgU33Re3SPzgU=
Subject key identifier: 76:A6:00:B9:9B:AB:97:AC:70:26:50:A3:4C:06:AD:2C:2E:CA:9E:AC
Certificate issuer: /CN=6c12ab7063c85dfe22fa7a99d9c6fce5e6161031
Certificate serial: 018CC6B7904558344CCA614F99F138A531B6
Authority key identifier: 6C:12:AB:70:63:C8:5D:FE:22:FA:7A:99:D9:C6:FC:E5:E6:16:10:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bBKrcGPIXf4i-nqZ2cb85eYWEDE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/12e679-856c-48ea-a062-959ebb905b3a/1/dqYAuZurl6xwJlCjTAatLC7Knqw.roa
Signing time: Mon 01 Jan 2024 20:29:27 +0000
ROA not before: Mon 01 Jan 2024 20:29:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29217
IP address blocks: 217.150.160.0/20 maxlen: 20
217.150.165.0/24 maxlen: 24
217.150.161.32/28 maxlen: 28
217.150.171.0/24 maxlen: 24
83.174.64.0/18 maxlen: 18
217.150.175.0/27 maxlen: 27
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/12e679-856c-48ea-a062-959ebb905b3a/1/bBKrcGPIXf4i-nqZ2cb85eYWEDE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/12e679-856c-48ea-a062-959ebb905b3a/1/bBKrcGPIXf4i-nqZ2cb85eYWEDE.mft
rsync://rpki.ripe.net/repository/DEFAULT/bBKrcGPIXf4i-nqZ2cb85eYWEDE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 07:02:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:90:45:58:34:4c:ca:61:4f:99:f1:38:a5:31:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c12ab7063c85dfe22fa7a99d9c6fce5e6161031
Validity
Not Before: Jan 1 20:29:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=76a600b99bab97ac702650a34c06ad2c2eca9eac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:2e:22:1d:20:25:e5:54:90:e2:df:f8:02:69:
ea:78:56:64:f0:54:41:30:8b:f7:4f:f0:01:2e:9b:
76:b0:45:de:cd:65:80:4e:fe:3f:e9:da:29:c0:f1:
12:3a:3b:d8:33:9e:18:8b:4e:26:2f:b6:1a:6c:66:
75:24:77:a2:da:83:1b:4e:e0:ee:60:26:34:2b:c8:
53:2c:c6:3b:9e:53:17:47:b4:e2:ac:49:8e:97:54:
2f:bc:13:6a:4a:9e:57:9d:3d:29:dd:41:48:ec:04:
3a:d4:b1:22:46:90:e5:74:c3:8f:63:1d:19:9c:82:
af:3c:1d:f9:fd:d5:83:6c:28:bd:86:af:21:0a:1c:
d3:72:3f:5c:8d:f6:bc:d8:6d:5e:ec:98:f1:f1:17:
4a:02:a1:4e:a1:76:9e:d4:77:cf:56:cd:b2:22:5a:
34:34:cc:92:b0:52:b4:c5:9f:dc:e5:d4:b8:21:dd:
dc:da:bb:5c:59:c6:47:9c:ce:31:bb:7a:c7:14:93:
1c:0e:34:a9:00:59:3e:e3:6c:3a:43:7d:43:0a:f9:
a1:6c:d0:e9:6e:bb:35:87:f6:b5:25:e7:69:46:f1:
81:e6:5b:23:30:4e:2e:fd:01:68:66:50:3d:a4:63:
13:66:ca:85:83:6c:ad:f0:ba:14:42:5d:82:4e:78:
b3:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:A6:00:B9:9B:AB:97:AC:70:26:50:A3:4C:06:AD:2C:2E:CA:9E:AC
X509v3 Authority Key Identifier:
keyid:6C:12:AB:70:63:C8:5D:FE:22:FA:7A:99:D9:C6:FC:E5:E6:16:10:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bBKrcGPIXf4i-nqZ2cb85eYWEDE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/12e679-856c-48ea-a062-959ebb905b3a/1/dqYAuZurl6xwJlCjTAatLC7Knqw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/12e679-856c-48ea-a062-959ebb905b3a/1/bBKrcGPIXf4i-nqZ2cb85eYWEDE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.174.64.0/18
217.150.160.0/20
Signature Algorithm: sha256WithRSAEncryption
51:21:66:67:5d:6e:2b:73:10:47:af:f7:f2:22:80:6b:88:01:
e5:3d:5b:a8:d5:c3:a8:0f:6d:55:19:4f:b3:af:a9:25:7f:58:
ec:10:17:34:e5:ad:48:d7:e7:17:a8:8d:05:06:31:58:9a:85:
b5:8f:7b:c7:b2:a7:85:90:29:18:3f:90:6c:e6:48:01:64:31:
16:7e:da:24:ce:74:22:68:2b:c2:99:61:7a:b7:95:90:1a:59:
22:28:5e:d5:81:60:9c:4e:ea:05:a8:f3:d1:b6:5d:57:8f:aa:
9c:12:b6:3d:ce:55:e4:e9:af:87:ec:bf:30:9f:1c:db:72:9c:
81:5e:f8:bc:56:ae:3b:0d:bc:f4:12:fe:5d:a1:aa:05:6b:8d:
27:72:13:33:65:28:83:2f:7d:a0:d6:a8:a4:8f:c9:a7:b4:0f:
cf:ec:d8:32:d6:54:8a:2d:0c:f7:14:be:ec:1e:07:0e:28:84:
d7:c5:cb:0a:aa:2b:f0:d6:e3:d5:b0:0e:ff:45:85:77:db:ff:
a2:f4:dc:30:9c:fd:d5:fa:e8:02:16:1d:ce:40:88:cf:d4:84:
ab:e2:e5:6f:c5:d3:71:4a:2e:b3:7b:0b:16:33:a9:42:e6:80:
cd:b2:de:a2:55:ac:8f:e6:2e:36:fa:e9:28:f1:2c:51:86:18:
73:d9:8d:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 12:08:39 2024 by rpki-client on console-fra.rpki-client.org