Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/d81745-658d-4a74-92f7-5d3a421a0f10/1/6GJxs0Bq2Ean7gOs7u9GtQAnjS8.roa
File: 6GJxs0Bq2Ean7gOs7u9GtQAnjS8.roa (raw, json)
Hash identifier: Ua6jsrjb+j2sIyljV8KCtZyXi/cYopJygmj7AHy/dz8=
Subject key identifier: E8:62:71:B3:40:6A:D8:46:A7:EE:03:AC:EE:EF:46:B5:00:27:8D:2F
Certificate issuer: /CN=5f08dc10218ac6db79430ae7c44515590417d605
Certificate serial: 01928AD9847581574980D118F8F05CEF5D93
Authority key identifier: 5F:08:DC:10:21:8A:C6:DB:79:43:0A:E7:C4:45:15:59:04:17:D6:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XwjcECGKxtt5QwrnxEUVWQQX1gU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/d81745-658d-4a74-92f7-5d3a421a0f10/1/6GJxs0Bq2Ean7gOs7u9GtQAnjS8.roa
Signing time: Mon 14 Oct 2024 11:46:03 +0000
ROA not before: Mon 14 Oct 2024 11:46:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200554
IP address blocks: 176.101.32.0/20 maxlen: 20
176.101.32.0/24 maxlen: 24
176.101.33.0/24 maxlen: 24
176.101.34.0/24 maxlen: 24
176.101.35.0/24 maxlen: 24
176.101.36.0/24 maxlen: 24
176.101.37.0/24 maxlen: 24
176.101.38.0/24 maxlen: 24
176.101.39.0/24 maxlen: 24
176.101.40.0/24 maxlen: 24
176.101.41.0/24 maxlen: 24
176.101.42.0/24 maxlen: 24
176.101.43.0/24 maxlen: 24
176.101.44.0/24 maxlen: 24
176.101.45.0/24 maxlen: 24
176.101.46.0/24 maxlen: 24
176.101.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/d81745-658d-4a74-92f7-5d3a421a0f10/1/XwjcECGKxtt5QwrnxEUVWQQX1gU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/d81745-658d-4a74-92f7-5d3a421a0f10/1/XwjcECGKxtt5QwrnxEUVWQQX1gU.mft
rsync://rpki.ripe.net/repository/DEFAULT/XwjcECGKxtt5QwrnxEUVWQQX1gU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:8a:d9:84:75:81:57:49:80:d1:18:f8:f0:5c:ef:5d:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f08dc10218ac6db79430ae7c44515590417d605
Validity
Not Before: Oct 14 11:46:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e86271b3406ad846a7ee03aceeef46b500278d2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:06:38:cc:31:2c:a1:bb:9a:3c:cc:27:96:b5:
64:1d:fe:7a:61:d9:17:ae:2f:2d:0d:51:a1:95:4b:
2f:f4:a9:42:86:08:19:88:59:66:04:6e:5f:01:13:
0a:90:92:e9:45:f7:f3:b0:7e:a2:07:52:a5:cc:0c:
07:18:79:97:7f:b7:04:f0:d7:17:5c:1d:3d:76:d3:
97:d8:ef:e0:58:9f:56:98:c9:ae:78:a6:29:94:8e:
62:bd:c1:2c:a1:44:8e:db:ae:99:f4:93:f8:5e:94:
2d:9e:dc:f8:3f:29:56:84:1e:60:ec:46:72:4a:48:
6b:df:9c:ce:1e:bb:fa:62:64:e1:bb:1a:a9:fd:21:
c1:96:b5:d9:3a:ee:11:f5:3a:e8:82:b7:36:d0:88:
9c:38:63:f8:00:a0:e3:35:07:84:96:a6:4f:43:60:
c0:df:28:27:ca:e7:e3:86:f0:ea:60:26:a2:f9:44:
c5:af:42:09:12:eb:a5:ca:dc:5d:8b:cc:d4:ae:73:
91:59:9d:ef:b9:e4:c9:eb:3d:51:48:85:43:0d:24:
04:3a:8d:36:d9:41:de:a1:ab:b8:9e:29:39:e1:3f:
8e:ef:03:a7:02:ce:84:88:c3:eb:c3:a2:9c:4d:2b:
f8:17:5a:6a:cc:d2:16:27:b0:04:9c:ee:3b:28:5d:
0c:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:62:71:B3:40:6A:D8:46:A7:EE:03:AC:EE:EF:46:B5:00:27:8D:2F
X509v3 Authority Key Identifier:
keyid:5F:08:DC:10:21:8A:C6:DB:79:43:0A:E7:C4:45:15:59:04:17:D6:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XwjcECGKxtt5QwrnxEUVWQQX1gU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/d81745-658d-4a74-92f7-5d3a421a0f10/1/6GJxs0Bq2Ean7gOs7u9GtQAnjS8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/d81745-658d-4a74-92f7-5d3a421a0f10/1/XwjcECGKxtt5QwrnxEUVWQQX1gU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.101.32.0/20
Signature Algorithm: sha256WithRSAEncryption
47:bd:ed:5e:b8:65:3c:0e:b2:40:53:25:1b:55:ac:18:ee:14:
8f:e3:c8:a8:97:f1:12:e4:36:48:4e:2d:36:0f:32:13:e1:1e:
d0:ca:e5:31:fe:54:45:ed:f6:17:b0:17:ad:d8:15:9e:d3:9a:
83:69:49:c2:b0:c8:ca:40:c8:d2:24:82:17:1a:b5:a9:10:a1:
9b:ff:76:a8:a4:52:fb:5e:a3:b8:02:65:cd:f0:43:49:12:80:
09:72:b5:68:64:ff:eb:bb:60:8d:03:43:42:67:a4:33:2e:4d:
2c:b0:4e:ba:4f:5f:f7:a8:e1:f3:9b:f2:75:48:a6:9f:ec:90:
83:fa:1c:25:55:92:ab:16:35:bb:8d:53:c5:99:0b:50:20:f4:
77:72:7c:b2:b5:61:43:d0:66:81:ed:60:c2:5f:6d:3b:7b:9b:
45:cb:3e:04:85:c3:ea:d0:88:16:e2:e5:7c:3a:16:67:5f:aa:
4f:94:b1:4e:20:eb:93:5d:d9:54:c8:de:bf:84:b3:b2:57:3f:
c3:07:07:66:a2:21:81:a3:27:c2:e8:88:22:0a:09:73:20:c8:
7e:27:97:9d:9e:51:e0:a6:d4:63:95:9c:68:7f:1e:07:49:24:
28:a4:18:ef:62:cb:c9:89:ed:c7:60:15:24:98:73:6d:ca:e9:
ee:b0:db:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:23:11 2024 by rpki-client on console-fra.rpki-client.org