Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/6PW-Vqk5H6Wj2081fgjzEJHGT3k.roa
File: 6PW-Vqk5H6Wj2081fgjzEJHGT3k.roa (raw, json)
Hash identifier: WGAglAZwZl39V8IC8LwnuDktx/vfJKpbzCf34mlkaf8=
Subject key identifier: E8:F5:BE:56:A9:39:1F:A5:A3:DB:4F:35:7E:08:F3:10:91:C6:4F:79
Certificate issuer: /CN=2e82963ff1aa70ab10d1d33e86b1d6d494d6ce51
Certificate serial: 01929938D7460512E6B63AE003B5FBD99775
Authority key identifier: 2E:82:96:3F:F1:AA:70:AB:10:D1:D3:3E:86:B1:D6:D4:94:D6:CE:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/6PW-Vqk5H6Wj2081fgjzEJHGT3k.roa
Signing time: Thu 17 Oct 2024 06:44:52 +0000
ROA not before: Thu 17 Oct 2024 06:44:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7018
IP address blocks: 5.249.176.0/22 maxlen: 24
5.249.184.0/22 maxlen: 24
37.19.64.0/22 maxlen: 24
37.19.68.0/22 maxlen: 24
185.145.52.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.mft
rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:99:38:d7:46:05:12:e6:b6:3a:e0:03:b5:fb:d9:97:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e82963ff1aa70ab10d1d33e86b1d6d494d6ce51
Validity
Not Before: Oct 17 06:44:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e8f5be56a9391fa5a3db4f357e08f31091c64f79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c9:ac:e9:1e:91:0c:57:32:61:63:bd:5e:8e:
f5:92:da:04:51:89:24:c8:6e:f8:02:a9:87:62:81:
1d:d8:58:ae:48:ca:fe:d9:3b:a9:f0:de:88:53:f8:
86:a4:ec:36:80:f2:9e:8c:80:a5:f1:1a:71:9d:68:
59:96:4f:77:40:be:df:c2:ac:dc:90:e5:25:bd:b3:
da:01:75:57:b5:3b:bb:d2:bf:c2:4e:46:db:81:b9:
a0:9c:07:ce:39:64:42:af:a9:a7:59:c5:f6:06:69:
ac:e8:d5:cb:45:76:2c:7f:e4:9a:51:fc:d1:58:6f:
43:97:2f:d3:85:fa:03:c2:eb:02:31:bc:67:ba:0a:
30:ea:22:40:88:e1:09:c0:bd:fd:03:a8:eb:d6:83:
82:85:57:5f:92:55:8b:57:98:ae:57:de:5f:52:b1:
71:da:ab:8f:c7:35:4a:1a:9a:7d:1d:29:b2:64:37:
0a:d1:fa:3d:93:dd:d0:f9:d9:97:71:0a:c9:d9:dd:
c1:a2:51:69:d5:89:35:aa:3f:e6:23:b2:32:87:25:
dc:c6:61:6a:6b:66:42:b9:b5:4a:d9:33:6d:21:06:
d8:12:94:20:24:8b:92:8f:60:9a:76:a1:8f:de:db:
3f:a4:61:6e:39:73:08:5d:87:7d:9f:9a:b6:32:dc:
f7:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:F5:BE:56:A9:39:1F:A5:A3:DB:4F:35:7E:08:F3:10:91:C6:4F:79
X509v3 Authority Key Identifier:
keyid:2E:82:96:3F:F1:AA:70:AB:10:D1:D3:3E:86:B1:D6:D4:94:D6:CE:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/6PW-Vqk5H6Wj2081fgjzEJHGT3k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.249.176.0/22
5.249.184.0/22
37.19.64.0/21
185.145.52.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:b2:ad:f3:fc:d9:40:66:04:01:25:89:c0:20:4d:ab:35:55:
8b:14:15:20:b8:de:ef:15:e4:da:2f:af:c1:cb:2d:ef:57:a8:
35:af:d5:98:70:bc:de:01:aa:18:03:ef:86:b5:cb:b3:6d:68:
cc:3a:a7:a1:fc:f7:a5:8b:47:e5:bf:cb:ad:99:74:df:ac:59:
30:b4:d8:fd:41:83:37:75:52:e0:4f:36:eb:c1:b5:a7:3c:5b:
5d:70:f6:a8:43:10:5b:8a:99:96:e8:93:6e:ad:97:00:d0:b2:
24:7a:98:3a:da:a7:32:f4:cf:b2:48:7f:f3:51:54:90:20:4e:
3a:77:73:52:48:38:b4:60:26:5a:68:05:37:1d:cf:be:db:b8:
e6:39:1a:c1:a0:45:17:c3:49:6f:04:46:7e:14:7e:85:6a:12:
c0:5d:68:67:e3:5f:d0:30:df:d7:aa:8d:96:92:a6:1f:81:da:
65:11:d6:83:4f:d7:3f:14:70:6d:10:21:e7:07:39:2f:b1:9f:
7c:96:ec:b0:54:e5:c5:c3:ab:28:e2:7f:65:c0:9e:82:e9:88:
fa:b8:e5:71:73:05:06:cd:da:0f:98:45:a9:b2:9f:43:5c:c4:
cb:86:f1:67:6a:01:9e:ab:5c:3f:41:68:e1:8c:0b:a8:94:b1:
bb:a1:f8:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:26:38 2024 by rpki-client on console-ams.rpki-client.org