Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/6JqUOcQXgpuDd-_osGCf16-ywtk.roa
File: 6JqUOcQXgpuDd-_osGCf16-ywtk.roa (raw, json)
Hash identifier: 3RNIIF2TWuJ8+tpIl6MzYu4TfgJPGudiWUSPGDIDh4A=
Subject key identifier: E8:9A:94:39:C4:17:82:9B:83:77:EF:E8:B0:60:9F:D7:AF:B2:C2:D9
Certificate issuer: /CN=644f033f782eaf32ab09088775d64ac4b94b5b11
Certificate serial: 018CF887395ECAAF33A4E3381F8B3F2830AF
Authority key identifier: 64:4F:03:3F:78:2E:AF:32:AB:09:08:87:75:D6:4A:C4:B9:4B:5B:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZE8DP3gurzKrCQiHddZKxLlLWxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/6JqUOcQXgpuDd-_osGCf16-ywtk.roa
Signing time: Thu 11 Jan 2024 12:37:40 +0000
ROA not before: Thu 11 Jan 2024 12:37:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44947
IP address blocks: 213.134.17.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/ZE8DP3gurzKrCQiHddZKxLlLWxE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/ZE8DP3gurzKrCQiHddZKxLlLWxE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZE8DP3gurzKrCQiHddZKxLlLWxE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 28 Jun 2024 06:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:f8:87:39:5e:ca:af:33:a4:e3:38:1f:8b:3f:28:30:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=644f033f782eaf32ab09088775d64ac4b94b5b11
Validity
Not Before: Jan 11 12:37:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e89a9439c417829b8377efe8b0609fd7afb2c2d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a7:71:3c:68:c1:0f:ea:9f:4d:46:2a:5d:c0:
89:a0:84:22:e3:e9:3c:08:3a:e1:33:7b:b4:88:af:
31:6d:96:d8:12:81:23:46:b4:29:30:c4:51:e5:ac:
4f:7e:f8:97:42:23:50:11:0b:46:b4:4a:dc:4d:e2:
9f:44:dd:40:de:b4:54:fe:c3:2b:ed:97:99:cb:61:
65:99:6c:1b:5b:f2:6d:52:8b:62:99:8d:f9:ae:9c:
3d:92:7b:15:9b:a1:6f:5e:79:da:b9:8f:1a:5c:45:
68:b1:e6:6a:22:5f:87:e0:2c:39:95:05:9b:e3:ef:
df:0a:6e:a6:e8:d5:ce:cc:73:09:6f:35:c2:d6:78:
62:f2:2d:5f:d1:7b:26:32:36:1f:b5:d4:7e:df:8a:
64:db:18:62:20:69:30:00:d4:47:24:74:93:7f:11:
bb:e7:f0:af:4d:81:0c:a1:28:f2:00:22:b6:1f:9f:
6d:f8:97:59:6e:48:9e:1f:e2:48:b0:c0:bf:ab:78:
1f:fb:da:ef:3e:34:c7:92:96:ac:53:ac:0e:e8:39:
0d:9c:37:26:10:e1:a4:a8:5d:43:4d:2e:d9:14:0b:
00:84:6c:f2:0a:28:45:82:a4:99:e3:03:81:77:45:
98:42:ae:67:f9:c7:e9:30:3d:c4:b6:e6:82:18:81:
1b:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:9A:94:39:C4:17:82:9B:83:77:EF:E8:B0:60:9F:D7:AF:B2:C2:D9
X509v3 Authority Key Identifier:
keyid:64:4F:03:3F:78:2E:AF:32:AB:09:08:87:75:D6:4A:C4:B9:4B:5B:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZE8DP3gurzKrCQiHddZKxLlLWxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/6JqUOcQXgpuDd-_osGCf16-ywtk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/ZE8DP3gurzKrCQiHddZKxLlLWxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.134.17.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:6f:87:af:2b:fa:66:e5:f4:b2:17:e0:b2:1d:c4:83:31:76:
19:a7:4f:93:3f:57:ee:b5:78:8b:ab:39:9d:da:e8:d8:8b:b9:
80:47:62:b2:6f:28:09:55:39:5f:aa:1d:1c:33:b4:d4:fd:43:
64:1f:b7:2d:20:05:78:d7:a5:9a:4d:50:53:d8:85:5e:99:c4:
02:35:98:8c:d1:b4:86:64:69:bd:a1:bb:58:c4:47:7f:10:72:
a7:08:50:56:77:bd:11:11:f8:41:69:34:d6:07:23:7a:dc:82:
7f:4d:a8:62:dd:54:c0:d9:f8:0c:a4:e2:16:4e:89:2d:4b:07:
27:cf:12:e9:be:11:4b:65:54:5f:d2:a3:5e:f5:7d:53:31:d9:
40:bb:f1:53:46:8f:0b:24:66:32:b1:39:1d:5d:2d:7b:fe:d4:
15:10:8e:07:99:45:2f:f6:5f:27:bb:a7:75:9b:5c:11:b3:e1:
5c:53:27:2a:7d:33:5d:75:a7:40:c6:1a:ba:d2:46:ec:88:cb:
a7:6b:75:4b:de:9a:5d:ee:90:2c:c0:ef:93:cd:6b:87:27:e7:
eb:7c:c0:c9:fb:fe:7d:5b:a7:c7:3f:86:c6:f7:2e:14:27:df:
69:4e:a4:d9:e6:78:1b:69:bb:82:0b:6c:52:96:79:41:32:35:
f6:1d:b9:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 27 15:19:59 2024 by rpki-client on console-ams.rpki-client.org