Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/0c55d2-c89c-46d6-ba35-4c65bd33d6f6/1/6e0bUWbuK69A43URUAQkm8oFHPM.roa
File: 6e0bUWbuK69A43URUAQkm8oFHPM.roa (raw, json)
Hash identifier: k205XjSEURDubp4OZOguIzuviTJDF6O+jykEq1zfMkU=
Subject key identifier: E9:ED:1B:51:66:EE:2B:AF:40:E3:75:11:50:04:24:9B:CA:05:1C:F3
Certificate issuer: /CN=6050099e335409db03ac1133d164f02a0d5dc66f
Certificate serial: 018CC424635E8606058E4340D42A8C1B3EC9
Authority key identifier: 60:50:09:9E:33:54:09:DB:03:AC:11:33:D1:64:F0:2A:0D:5D:C6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFAJnjNUCdsDrBEz0WTwKg1dxm8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/0c55d2-c89c-46d6-ba35-4c65bd33d6f6/1/6e0bUWbuK69A43URUAQkm8oFHPM.roa
Signing time: Mon 01 Jan 2024 08:29:28 +0000
ROA not before: Mon 01 Jan 2024 08:29:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 24951
IP address blocks: 77.244.48.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/0c55d2-c89c-46d6-ba35-4c65bd33d6f6/1/YFAJnjNUCdsDrBEz0WTwKg1dxm8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/0c55d2-c89c-46d6-ba35-4c65bd33d6f6/1/YFAJnjNUCdsDrBEz0WTwKg1dxm8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YFAJnjNUCdsDrBEz0WTwKg1dxm8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 10:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:63:5e:86:06:05:8e:43:40:d4:2a:8c:1b:3e:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6050099e335409db03ac1133d164f02a0d5dc66f
Validity
Not Before: Jan 1 08:29:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e9ed1b5166ee2baf40e375115004249bca051cf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:5a:d9:f5:dd:fe:1f:c8:75:9b:b3:c7:9c:ef:
f3:46:d5:4f:2d:bb:d1:f9:9b:d7:37:b1:00:37:1b:
8c:81:be:bc:7f:a9:64:82:b3:dc:b9:c3:a3:5f:a5:
f8:fe:77:22:5b:42:8f:1c:22:35:df:01:54:3d:f8:
35:bc:93:7d:c6:66:48:89:8b:1e:ce:e5:76:d2:6f:
95:e8:b7:cb:d7:78:5e:29:68:a6:d7:be:c9:0b:db:
8d:c9:2f:b9:b8:fe:3c:2c:3e:d6:59:69:1c:28:25:
38:06:d7:83:14:75:62:f5:f5:74:66:d4:9b:74:1f:
1b:14:7a:dd:26:78:45:f1:5f:c6:4d:e3:2d:68:10:
ce:92:d9:99:06:75:d2:dc:3a:04:ed:73:f0:5e:85:
d9:8e:3c:a0:d0:b8:58:0d:c2:45:27:3d:43:ff:2f:
0d:9d:df:10:34:ea:45:e7:c1:f0:c6:cc:26:29:fe:
6f:8f:b6:39:1a:b4:a7:43:f5:28:fa:f5:4d:1c:52:
b0:e6:b4:41:9a:99:67:c0:74:43:a4:a4:09:27:ab:
bb:20:f1:c3:6b:f0:83:6d:b4:ce:30:8a:05:da:3e:
9a:33:02:a8:0e:bf:0d:c3:f2:55:72:81:c7:e2:a0:
35:9e:b8:e2:82:b4:d2:73:3d:10:b4:0c:d7:ec:da:
3b:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:ED:1B:51:66:EE:2B:AF:40:E3:75:11:50:04:24:9B:CA:05:1C:F3
X509v3 Authority Key Identifier:
keyid:60:50:09:9E:33:54:09:DB:03:AC:11:33:D1:64:F0:2A:0D:5D:C6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFAJnjNUCdsDrBEz0WTwKg1dxm8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0c55d2-c89c-46d6-ba35-4c65bd33d6f6/1/6e0bUWbuK69A43URUAQkm8oFHPM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0c55d2-c89c-46d6-ba35-4c65bd33d6f6/1/YFAJnjNUCdsDrBEz0WTwKg1dxm8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.244.48.0/20
Signature Algorithm: sha256WithRSAEncryption
12:86:a8:86:43:ae:0c:13:b4:0b:9f:0a:60:85:ee:55:85:64:
72:f0:20:a9:d9:ea:0b:aa:15:17:0b:9c:58:97:2f:1f:48:0b:
3e:72:08:b8:34:8c:a1:fc:2f:1e:d6:d6:51:e5:48:c5:80:c8:
ac:f9:da:aa:f6:d4:47:ec:32:3d:72:6f:0e:b1:1e:bb:f6:29:
84:ad:6d:4a:50:2e:bd:68:ac:c0:a8:19:5d:8b:11:17:a4:0b:
16:0d:47:ea:cc:3a:2a:87:c5:56:d2:d3:6a:79:a0:1e:c3:71:
8e:3b:30:f8:19:78:09:d9:df:ed:d7:c5:61:73:2b:ba:26:b0:
50:6b:62:99:14:cc:b1:89:fe:84:89:7d:91:99:a3:a0:1f:84:
a2:ba:fa:c1:49:3c:60:93:d1:bb:51:89:b4:78:db:af:7d:b8:
7d:c9:50:08:74:41:7c:4d:16:a9:23:55:5e:3b:07:33:9f:06:
ec:98:0b:22:90:2d:62:eb:38:fb:5a:a7:f3:65:a8:df:f1:3d:
b9:f9:6a:e5:d7:32:1a:2a:a9:77:dd:53:cb:5b:9a:04:93:42:
41:50:fd:8a:90:95:e6:e1:82:13:b1:8a:0c:fb:8f:ac:09:3f:
7b:15:bc:32:58:c5:d4:e9:fd:50:1d:af:1d:4b:7e:08:b1:af:
7a:84:9e:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 18:37:58 2024 by rpki-client on console-ams.rpki-client.org