Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/2ec4b3-e65d-4612-9304-a39303d85066/1/6eMhANyFoW2Gzl9fhZNr-BC6-iw.roa
File: 6eMhANyFoW2Gzl9fhZNr-BC6-iw.roa (raw, json)
Hash identifier: TmeqqVwQnnK82M8xG3n1LEB3vbo2kHmD22vd/m3zukk=
Subject key identifier: E9:E3:21:00:DC:85:A1:6D:86:CE:5F:5F:85:93:6B:F8:10:BA:FA:2C
Certificate issuer: /CN=f1af8bb98e405539ea983384fafa82b2b4b71724
Certificate serial: 018CC50128D9F5DB010937F6A759EA20E61B
Authority key identifier: F1:AF:8B:B9:8E:40:55:39:EA:98:33:84:FA:FA:82:B2:B4:B7:17:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8a-LuY5AVTnqmDOE-vqCsrS3FyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/2ec4b3-e65d-4612-9304-a39303d85066/1/6eMhANyFoW2Gzl9fhZNr-BC6-iw.roa
Signing time: Mon 01 Jan 2024 12:30:36 +0000
ROA not before: Mon 01 Jan 2024 12:30:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51399
IP address blocks: 91.218.200.0/22 maxlen: 24
91.218.208.0/22 maxlen: 24
91.103.144.0/22 maxlen: 24
91.103.144.0/24 maxlen: 24
185.157.12.0/22 maxlen: 24
91.217.0.0/23 maxlen: 24
2a07:a080::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/2ec4b3-e65d-4612-9304-a39303d85066/1/8a-LuY5AVTnqmDOE-vqCsrS3FyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/2ec4b3-e65d-4612-9304-a39303d85066/1/8a-LuY5AVTnqmDOE-vqCsrS3FyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8a-LuY5AVTnqmDOE-vqCsrS3FyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 13:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:28:d9:f5:db:01:09:37:f6:a7:59:ea:20:e6:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1af8bb98e405539ea983384fafa82b2b4b71724
Validity
Not Before: Jan 1 12:30:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e9e32100dc85a16d86ce5f5f85936bf810bafa2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:75:32:f9:f8:45:cb:53:77:ca:59:64:b3:ca:
92:12:f7:a8:48:8f:24:70:b4:ed:7a:ad:c8:5e:33:
eb:aa:d1:86:2a:66:53:2d:a6:a2:10:11:94:4f:4c:
7d:c1:02:e2:2c:1c:42:ac:4d:e6:2a:2d:c3:af:31:
0d:7c:d4:26:48:e1:2f:12:05:1f:22:2e:b7:89:8d:
0e:9d:9b:5c:08:c1:20:6e:a3:35:27:da:34:8a:8b:
bb:6b:d9:cb:54:17:1c:ef:90:89:50:6e:f8:1c:af:
02:24:69:ba:27:98:bc:8f:58:82:d5:ea:9f:fe:37:
02:8c:b3:25:82:bb:fd:a3:26:33:5f:14:e9:f7:5a:
bc:25:71:98:3e:20:46:f8:b3:c1:38:6c:5f:06:f9:
0d:ce:81:dc:66:dd:1c:d9:f8:d3:22:5e:42:85:10:
45:11:47:ba:26:ea:79:23:6f:b1:71:7b:49:b8:df:
94:d7:c9:d5:23:f5:17:a4:61:6c:0e:8a:ae:f1:b3:
d0:c3:b1:9d:70:e6:a8:2d:f8:c3:a0:bf:91:78:94:
7f:9e:65:b4:cc:34:60:74:57:86:ee:c6:70:4b:7d:
94:9d:3e:61:91:9c:a1:e1:0f:98:c0:11:ee:57:33:
32:d3:61:5e:b1:db:f1:83:b1:fd:14:fb:2e:cf:c7:
f6:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:E3:21:00:DC:85:A1:6D:86:CE:5F:5F:85:93:6B:F8:10:BA:FA:2C
X509v3 Authority Key Identifier:
keyid:F1:AF:8B:B9:8E:40:55:39:EA:98:33:84:FA:FA:82:B2:B4:B7:17:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a-LuY5AVTnqmDOE-vqCsrS3FyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/2ec4b3-e65d-4612-9304-a39303d85066/1/6eMhANyFoW2Gzl9fhZNr-BC6-iw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/2ec4b3-e65d-4612-9304-a39303d85066/1/8a-LuY5AVTnqmDOE-vqCsrS3FyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.103.144.0/22
91.217.0.0/23
91.218.200.0/22
91.218.208.0/22
185.157.12.0/22
IPv6:
2a07:a080::/29
Signature Algorithm: sha256WithRSAEncryption
16:76:d2:a6:1f:e9:9c:8d:12:ae:3b:65:47:1f:c0:15:e9:8e:
b3:3f:38:96:92:4f:df:53:65:50:83:f1:e5:7a:5f:05:18:28:
d1:86:e1:d9:54:11:c7:ad:41:c5:91:47:55:08:b0:fd:1d:1e:
e1:46:32:45:0d:4a:d2:de:dc:99:6f:5e:ee:f5:1f:18:c1:75:
3f:7d:82:0d:cd:7f:4d:3b:95:56:86:5f:58:07:09:49:8a:8e:
8a:23:cd:9e:27:48:41:85:0f:4f:8e:9d:24:22:c2:ef:56:32:
d2:7c:4a:75:65:aa:ad:ab:06:99:8c:73:39:2a:a5:27:e9:d9:
77:07:c4:32:b6:a4:d9:31:f3:e9:72:ff:db:7f:21:e4:60:30:
71:7e:2b:5c:25:a8:9c:76:7d:e0:3c:05:8b:0f:cb:6b:a9:63:
73:49:78:ee:bf:62:34:1b:3e:d9:95:e3:cd:38:6c:96:a6:b6:
6f:c3:ca:83:2e:76:30:ab:c9:cf:33:2e:07:6d:2c:e8:62:e7:
85:87:4f:1c:f3:50:de:80:d3:d8:b0:25:3a:5b:9b:92:16:65:
bd:7d:d5:ce:ef:ff:92:17:05:a4:6c:17:15:50:89:3e:e8:85:
ec:f2:7f:b9:c8:01:f9:eb:72:df:ea:50:7b:f7:d2:bf:ad:36:
ad:09:0a:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 17:33:22 2024 by rpki-client on console-ams.rpki-client.org