Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/6LV9vOVd3kgp3gvWNPiYx0X0Yds.roa
File: 6LV9vOVd3kgp3gvWNPiYx0X0Yds.roa (raw, json)
Hash identifier: EHMVbtfYEkoKktSDA28YZh5XbzLG6Jnw9LPpXa2rjZ8=
Subject key identifier: E8:B5:7D:BC:E5:5D:DE:48:29:DE:0B:D6:34:F8:98:C7:45:F4:61:DB
Certificate issuer: /CN=0b247e73391ec9d6a2a46f2cb0b02fc994288f13
Certificate serial: 019006E9F58E3CB7F8A43402A0ED28477A10
Authority key identifier: 0B:24:7E:73:39:1E:C9:D6:A2:A4:6F:2C:B0:B0:2F:C9:94:28:8F:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CyR-czkeydaipG8ssLAvyZQojxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/6LV9vOVd3kgp3gvWNPiYx0X0Yds.roa
Signing time: Tue 11 Jun 2024 10:48:34 +0000
ROA not before: Tue 11 Jun 2024 10:48:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9009
IP address blocks: 45.66.132.0/24 maxlen: 24
45.144.242.0/24 maxlen: 24
45.144.243.0/24 maxlen: 24
91.220.202.0/24 maxlen: 24
91.220.203.0/24 maxlen: 24
185.126.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CyR-czkeydaipG8ssLAvyZQojxM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:06:e9:f5:8e:3c:b7:f8:a4:34:02:a0:ed:28:47:7a:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b247e73391ec9d6a2a46f2cb0b02fc994288f13
Validity
Not Before: Jun 11 10:48:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e8b57dbce55dde4829de0bd634f898c745f461db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:d2:4a:21:9c:44:e6:15:de:56:24:3d:b5:13:
90:d7:99:4d:63:11:c0:d5:5a:1e:73:dd:fd:89:8d:
51:66:ed:92:75:c4:c4:28:9a:b7:b6:0e:1c:e1:ea:
75:9c:24:77:3d:3f:9f:7d:de:f8:ff:09:96:e4:ff:
b1:c7:65:21:6b:36:b5:9b:3e:2f:74:3d:79:d2:d3:
13:70:aa:ca:3b:91:aa:51:6e:c6:c6:10:c4:af:ca:
4d:fd:92:61:9e:44:55:69:fb:2e:78:7f:e2:3e:76:
8e:21:9a:a1:f8:7e:6a:dd:48:4b:94:78:a3:65:67:
6f:d6:98:b5:2e:67:3f:3f:f6:cc:cb:0e:a5:60:ea:
4f:4d:6f:23:ff:76:7a:2b:a0:bc:33:f0:e7:14:9b:
fd:1f:5d:26:39:d9:15:ed:e1:03:13:a4:72:fd:ac:
76:f0:da:1f:58:9f:33:44:ca:23:0e:b4:91:55:0a:
64:cd:d8:05:cd:3b:10:a3:eb:9e:de:62:a0:42:df:
90:30:42:ce:67:91:8d:12:67:8f:aa:3c:01:aa:7b:
b5:d7:7d:70:d0:a6:52:93:b8:14:f8:7d:e6:2e:e6:
5e:f0:c3:fd:35:cb:53:df:15:f7:e6:c4:b6:2b:ca:
e7:a0:c2:a5:88:0a:b4:de:d8:15:65:b8:9f:b3:8c:
14:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:B5:7D:BC:E5:5D:DE:48:29:DE:0B:D6:34:F8:98:C7:45:F4:61:DB
X509v3 Authority Key Identifier:
keyid:0B:24:7E:73:39:1E:C9:D6:A2:A4:6F:2C:B0:B0:2F:C9:94:28:8F:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CyR-czkeydaipG8ssLAvyZQojxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/6LV9vOVd3kgp3gvWNPiYx0X0Yds.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.66.132.0/24
45.144.242.0/23
91.220.202.0/23
185.126.227.0/24
Signature Algorithm: sha256WithRSAEncryption
af:66:54:85:ce:a5:a2:4c:68:e2:56:a2:f1:db:83:8c:44:49:
fb:24:e3:0f:78:23:f2:9c:65:af:2b:f0:71:07:91:96:2c:ac:
3f:e0:16:5b:39:16:69:83:cc:8c:30:d7:7f:06:13:52:35:ab:
f2:dd:ab:e1:5f:b3:1a:63:93:eb:35:86:cd:d0:83:ff:e9:3e:
58:9d:36:57:8e:7d:a4:7b:34:0a:2f:b7:e8:9a:bc:ed:d2:b8:
2f:c3:d9:f7:21:22:2c:6d:74:5a:46:94:3e:8f:c9:8f:bc:c0:
42:6e:65:8a:96:ef:aa:1b:ae:3d:78:d9:72:31:2a:3a:ae:d6:
9a:fe:9d:b4:3b:95:3e:48:c7:86:ab:c3:c0:d6:e3:99:92:db:
39:db:80:22:52:d4:65:67:b6:08:91:23:12:e3:01:43:e9:39:
4c:00:02:f0:57:48:85:ee:0e:e1:55:64:b5:8e:4d:ce:c0:fa:
1d:7f:3b:86:a4:2a:3c:17:92:62:35:40:03:91:28:2b:01:19:
35:f3:b0:00:2e:7c:29:c9:ac:87:d9:24:66:04:5b:35:1a:e4:
dc:72:7e:33:ce:f8:c0:ef:c7:f5:39:cb:94:84:1c:d5:5e:e3:
49:b8:88:6d:f8:30:a2:f3:ae:96:12:ef:10:07:cc:a0:8c:e4:
b2:a4:3d:f4
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZAG6fWOPLf4pDQCoO0oR3oQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiMjQ3ZTczMzkxZWM5ZDZhMmE0NmYyY2IwYjAyZmM5OTQy
ODhmMTMwHhcNMjQwNjExMTA0ODM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlOGI1N2RiY2U1NWRkZTQ4MjlkZTBiZDYzNGY4OThjNzQ1ZjQ2MWRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5tJKIZxE5hXeViQ9tROQ15lNYxHA
1Voec939iY1RZu2SdcTEKJq3tg4c4ep1nCR3PT+ffd74/wmW5P+xx2Uhaza1mz4v
dD150tMTcKrKO5GqUW7GxhDEr8pN/ZJhnkRVafsueH/iPnaOIZqh+H5q3UhLlHij
ZWdv1pi1Lmc/P/bMyw6lYOpPTW8j/3Z6K6C8M/DnFJv9H10mOdkV7eEDE6Ry/ax2
8NofWJ8zRMojDrSRVQpkzdgFzTsQo+ue3mKgQt+QMELOZ5GNEmePqjwBqnu1131w
0KZSk7gU+H3mLuZe8MP9NctT3xX35sS2K8rnoMKliAq03tgVZbifs4wUlQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFOi1fbzlXd5IKd4L1jT4mMdF9GHbMB8GA1UdIwQY
MBaAFAskfnM5HsnWoqRvLLCwL8mUKI8TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ3lSLWN6a2V5ZGFpcEc4c3NMQXZ5WlFvanhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9iM2ZkNDAtYjEyNS00MjgyLWI4ODMt
NzM2Nzg5ZWU2ZmQwLzEvNkxWOXZPVmQza2dwM2d2V05QaVl4MFgwWWRzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC9iM2ZkNDAtYjEyNS00MjgyLWI4ODMtNzM2Nzg5ZWU2ZmQw
LzEvQ3lSLWN6a2V5ZGFpcEc4c3NMQXZ5WlFvanhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQALUKEAwQB
LZDyAwQBW9zKAwQAuX7jMA0GCSqGSIb3DQEBCwUAA4IBAQCvZlSFzqWiTGjiVqLx
24OMREn7JOMPeCPynGWvK/BxB5GWLKw/4BZbORZpg8yMMNd/BhNSNavy3avhX7Ma
Y5PrNYbN0IP/6T5YnTZXjn2kezQKL7fomrzt0rgvw9n3ISIsbXRaRpQ+j8mPvMBC
bmWKlu+qG649eNlyMSo6rtaa/p20O5U+SMeGq8PA1uOZkts524AiUtRlZ7YIkSMS
4wFD6TlMAALwV0iF7g7hVWS1jk3OwPodfzuGpCo8F5JiNUADkSgrARk187AALnwp
yayH2SRmBFs1GuTccn4zzvjA78f1OcuUhBzVXuNJuIht+DCi866WEu8QB8ygjOSy
pD30
-----END CERTIFICATE-----
Generated at Fri Nov 22 00:04:46 2024 by rpki-client on console-ams.rpki-client.org