Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/6PYCzhgpwN4ubp1pjE6fJBECWH8.roa
File: 6PYCzhgpwN4ubp1pjE6fJBECWH8.roa (raw, json)
Hash identifier: btlh+JX3D6qDPSulH/uFFx4c361Lqs/hfTxhBa1p4Fs=
Subject key identifier: E8:F6:02:CE:18:29:C0:DE:2E:6E:9D:69:8C:4E:9F:24:11:02:58:7F
Certificate issuer: /CN=4a644c1156851803f37adeec0876ccf989d5aef0
Certificate serial: 018CC2DB02428F5C8E156A22F51A80271BCF
Authority key identifier: 4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/6PYCzhgpwN4ubp1pjE6fJBECWH8.roa
Signing time: Mon 01 Jan 2024 02:29:42 +0000
ROA not before: Mon 01 Jan 2024 02:29:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207306
IP address blocks: 2a0f:5707:aa30::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:02:42:8f:5c:8e:15:6a:22:f5:1a:80:27:1b:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a644c1156851803f37adeec0876ccf989d5aef0
Validity
Not Before: Jan 1 02:29:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e8f602ce1829c0de2e6e9d698c4e9f241102587f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:9a:7a:ce:52:5c:e4:98:9c:0c:51:63:4c:0e:
91:f1:81:70:50:bd:d1:dd:4d:cb:17:dc:1e:1f:d3:
20:55:ba:01:be:fe:ae:67:b7:10:18:0a:98:fd:4c:
73:fd:11:be:c8:e1:57:f8:96:c9:44:8b:c5:52:ee:
2f:28:29:91:6b:e3:5b:f2:b4:71:17:60:16:a8:93:
00:44:d0:7f:cf:99:dd:5d:2d:61:b3:3f:2e:ac:85:
f2:dd:7b:51:cc:eb:85:ed:fa:e6:ea:9c:8f:54:c8:
c6:3a:16:b1:9c:d8:db:36:c2:19:22:4a:d0:f0:ad:
16:48:1f:3a:9f:77:cd:cb:75:82:95:2f:a2:f8:23:
8a:4b:1d:25:86:69:6a:bd:52:6e:c8:6f:7e:20:79:
56:0e:1f:75:17:23:21:b7:ac:89:14:26:22:fd:55:
98:31:3f:7d:52:e9:c7:a1:9f:f1:06:59:55:05:aa:
31:06:ce:9b:ae:54:44:51:6b:f4:df:1c:68:6b:9c:
ad:4c:dc:4b:f9:5d:f6:d0:79:77:c3:eb:ac:3a:be:
a0:82:6c:c6:c6:01:df:4d:3a:07:ae:f0:93:cb:fe:
e9:f8:99:3c:f3:41:b4:80:c1:13:25:b3:09:ba:bb:
37:69:11:5d:21:ab:f4:8b:44:c4:bc:9f:29:26:ee:
de:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:F6:02:CE:18:29:C0:DE:2E:6E:9D:69:8C:4E:9F:24:11:02:58:7F
X509v3 Authority Key Identifier:
keyid:4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/6PYCzhgpwN4ubp1pjE6fJBECWH8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:5707:aa30::/44
Signature Algorithm: sha256WithRSAEncryption
b8:4f:8f:2b:6d:49:33:f9:af:71:c5:0a:37:6c:7c:34:f6:b9:
bb:20:3e:27:d4:39:03:b7:cd:d4:9b:0c:cb:83:63:b3:82:8e:
df:8c:5e:33:27:74:48:b7:63:19:8a:bf:58:c3:d1:1c:3a:9b:
e5:9e:4a:47:0c:88:5a:c1:52:c3:ae:aa:2b:44:0e:2d:73:07:
89:e5:f7:e1:4b:1b:6f:cb:b4:d3:8e:c6:38:e7:74:7d:6f:3a:
c5:b0:b7:6d:4a:19:e7:2f:1e:12:ea:a3:c8:e6:51:68:f6:20:
b4:cd:10:0a:7a:d1:5b:75:d1:01:5a:48:56:75:4a:49:62:41:
bf:b5:c9:0e:58:ad:e2:a2:17:b9:e3:b9:a4:c2:0f:3a:ae:6d:
49:0e:f1:1b:10:9d:9c:b8:f2:b7:5d:48:5f:63:bb:16:77:f8:
19:47:ad:18:b9:cb:13:7a:fb:57:9e:6b:3f:ff:e5:1d:8e:1f:
8d:1f:58:97:68:7e:83:1f:bb:86:6f:67:c6:df:8a:1b:7a:12:
20:da:b2:7f:10:c6:ee:d6:7c:3d:ce:64:aa:ef:2f:75:23:6d:
67:b7:1d:dc:38:79:b2:d0:11:1a:96:26:28:3d:83:09:11:7a:
9b:07:98:3c:03:2c:cc:df:7c:31:e2:5d:5b:da:ff:97:4a:bd:
6f:11:6d:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 23:36:28 2024 by rpki-client on console-fra.rpki-client.org