Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/bf58da-a9d2-421a-b43a-92c3bf74a97b/1/6KZR2BZ0Ktc6z3ayOFGBapOzwcY.roa
File: 6KZR2BZ0Ktc6z3ayOFGBapOzwcY.roa (raw, json)
Hash identifier: 6nnAIir87+/KcIM91bynxuA7mMUYdNIRo9+HEmxJlZo=
Subject key identifier: E8:A6:51:D8:16:74:2A:D7:3A:CF:76:B2:38:51:81:6A:93:B3:C1:C6
Certificate issuer: /CN=2793bde946ae936d3cacc136a5f3239edf2431f4
Certificate serial: 018CC86F05D575A4EC3EFD973C5D13588B63
Authority key identifier: 27:93:BD:E9:46:AE:93:6D:3C:AC:C1:36:A5:F3:23:9E:DF:24:31:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J5O96Uauk208rME2pfMjnt8kMfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/bf58da-a9d2-421a-b43a-92c3bf74a97b/1/6KZR2BZ0Ktc6z3ayOFGBapOzwcY.roa
Signing time: Tue 02 Jan 2024 04:29:28 +0000
ROA not before: Tue 02 Jan 2024 04:29:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211415
IP address blocks: 81.31.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/bf58da-a9d2-421a-b43a-92c3bf74a97b/1/J5O96Uauk208rME2pfMjnt8kMfQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/bf58da-a9d2-421a-b43a-92c3bf74a97b/1/J5O96Uauk208rME2pfMjnt8kMfQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/J5O96Uauk208rME2pfMjnt8kMfQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 16 May 2024 14:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:05:d5:75:a4:ec:3e:fd:97:3c:5d:13:58:8b:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2793bde946ae936d3cacc136a5f3239edf2431f4
Validity
Not Before: Jan 2 04:29:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e8a651d816742ad73acf76b23851816a93b3c1c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:da:ff:15:5b:ce:2a:33:72:60:ce:30:9f:46:
e0:58:93:f5:bc:2b:61:a1:cd:0d:e6:0a:9d:68:99:
9c:a7:47:04:7e:34:67:fe:01:37:d1:2e:5f:a4:2e:
a1:96:b1:1b:1a:3b:da:d7:e3:6b:6c:f1:48:7e:51:
37:ac:1b:2e:1f:97:2c:cc:72:17:d2:f0:0e:38:d7:
ab:93:77:3a:75:d6:79:71:b3:ca:87:d4:8e:3a:b1:
aa:4b:c8:ea:c0:bf:90:8b:f2:a4:cc:b9:55:2e:82:
2a:c8:b4:b5:27:7d:32:58:62:f3:e4:63:1e:f5:f0:
b4:b3:7f:15:34:9b:8a:ff:f9:07:9d:fa:69:7e:74:
bc:5a:57:ef:2a:0a:43:9f:d3:b1:86:d8:97:f3:f5:
c3:00:f9:08:a8:f3:8d:08:61:39:8c:49:94:b7:c0:
d2:7b:e8:3d:f4:37:51:b5:01:10:c6:44:28:86:93:
60:cc:57:83:ff:1f:61:08:d2:b6:12:ef:bc:e9:2e:
ed:80:26:b7:c7:19:0c:83:13:6c:38:32:61:d8:c6:
f3:9d:ff:ec:a8:93:d7:26:ab:a3:9a:44:bb:2c:13:
72:83:93:e9:d0:0f:5a:a6:f2:ab:0a:53:cd:d8:eb:
34:c0:04:24:fa:c6:70:7c:80:9b:a0:42:38:50:2d:
f7:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:A6:51:D8:16:74:2A:D7:3A:CF:76:B2:38:51:81:6A:93:B3:C1:C6
X509v3 Authority Key Identifier:
keyid:27:93:BD:E9:46:AE:93:6D:3C:AC:C1:36:A5:F3:23:9E:DF:24:31:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J5O96Uauk208rME2pfMjnt8kMfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/bf58da-a9d2-421a-b43a-92c3bf74a97b/1/6KZR2BZ0Ktc6z3ayOFGBapOzwcY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/bf58da-a9d2-421a-b43a-92c3bf74a97b/1/J5O96Uauk208rME2pfMjnt8kMfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.31.198.0/24
Signature Algorithm: sha256WithRSAEncryption
09:f1:5c:16:3b:00:47:a6:4d:61:4b:ae:b7:01:de:26:bc:e2:
71:b0:2c:b4:03:a0:57:f3:4f:ec:e7:43:3f:72:7b:44:d4:8f:
2e:6d:98:e7:75:6b:c8:49:a5:40:c9:c1:89:c4:09:3c:65:5a:
13:24:48:75:7b:87:ff:2b:a7:f8:3a:78:cf:9f:dd:c2:02:2d:
6e:ff:61:fe:3a:07:01:d8:ab:e1:e0:f7:de:52:9d:51:46:a6:
5f:a0:96:9b:34:16:03:bc:e0:08:b8:3d:93:aa:9f:09:2d:51:
89:ec:99:f8:ac:34:6c:2e:f3:65:7d:6c:1d:50:03:a7:df:b0:
1c:bc:a5:35:f9:0c:16:a7:20:15:a6:24:a9:64:26:c3:1c:3f:
c5:df:fc:29:23:eb:ac:6b:73:a1:ba:5a:28:a7:38:60:04:fb:
d7:8e:6b:50:7a:5a:97:9e:6d:0c:e2:58:8c:78:dc:0e:38:3c:
24:1c:53:23:43:5f:c4:f7:37:68:3a:38:bd:b6:82:6d:3b:68:
a9:99:75:37:5b:5d:d6:97:7b:9a:06:c1:66:d6:99:c6:0c:06:
b3:f7:17:53:ea:e7:bc:9f:68:20:0b:0e:7c:36:a9:c0:25:bf:
32:cf:52:5a:19:29:25:0e:2c:e7:b9:f1:e7:c2:79:37:e1:53:
22:2b:25:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 18:38:07 2024 by rpki-client on console-fra.rpki-client.org