Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/n6_VjKXzxGlImLn5LvQ6JqflqjU.roa
File: n6_VjKXzxGlImLn5LvQ6JqflqjU.roa (raw, json)
Hash identifier: HBVOLFnMy0IMbaQXOUsE/+gR9P8y9K1WHSZYPm1dhWQ=
Subject key identifier: 9F:AF:D5:8C:A5:F3:C4:69:48:98:B9:F9:2E:F4:3A:26:A7:E5:AA:35
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 01923E4A97F67C2962AAA10A9FF0547FA40C
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/n6_VjKXzxGlImLn5LvQ6JqflqjU.roa
Signing time: Sun 29 Sep 2024 14:58:48 +0000
ROA not before: Sun 29 Sep 2024 14:58:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43260
IP address blocks: 85.208.106.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:3e:4a:97:f6:7c:29:62:aa:a1:0a:9f:f0:54:7f:a4:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Sep 29 14:58:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9fafd58ca5f3c4694898b9f92ef43a26a7e5aa35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:b7:9c:45:3a:2d:b7:e9:5e:44:7b:c1:be:cd:
4c:f4:dc:2e:d5:46:5c:94:c0:64:0e:2e:5b:47:8b:
a7:c7:46:c0:06:20:bf:1c:51:ee:1d:3c:ab:a1:18:
a7:23:a6:22:b4:41:e0:39:22:34:8e:03:7d:82:e3:
33:c4:cd:76:88:3d:40:65:17:0e:c1:0b:9b:ec:84:
b7:21:48:bf:3c:3e:f4:d2:ed:0e:0d:9d:80:7e:f0:
df:ac:e8:c4:84:fb:de:88:4c:6f:7d:fe:bd:72:cc:
e4:ed:c0:1a:32:69:5e:17:42:87:ab:bd:40:c3:fb:
61:2a:84:8e:62:85:b7:8b:0d:0e:d2:ca:90:ff:fd:
c2:28:8b:76:30:c6:45:ae:52:ef:d6:47:98:0d:1d:
4d:2d:d8:5f:3e:10:3b:7f:b5:49:a1:2f:3e:3b:8d:
7b:04:32:1a:01:63:81:bb:73:38:c9:df:ed:f3:cd:
7d:2c:17:34:02:78:10:94:6b:28:44:6e:2a:f1:88:
11:3d:00:62:29:5c:e2:66:6a:fd:0a:55:13:8a:2a:
78:80:2a:f2:0a:00:95:53:22:81:a5:cc:44:fe:b4:
bc:f9:70:9c:b0:ec:37:5b:51:4b:79:16:4e:a9:1c:
2b:2c:26:2e:fb:d7:56:84:cd:f4:43:89:0d:29:b0:
02:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:AF:D5:8C:A5:F3:C4:69:48:98:B9:F9:2E:F4:3A:26:A7:E5:AA:35
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/n6_VjKXzxGlImLn5LvQ6JqflqjU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.208.106.0/24
Signature Algorithm: sha256WithRSAEncryption
00:7b:10:51:b8:39:7a:55:d1:44:36:bd:61:b9:27:0f:4a:72:
1a:e6:08:4b:bc:91:e8:31:2f:2a:b8:25:df:15:eb:b0:69:00:
17:5c:43:64:19:f2:5f:5b:0e:c3:bc:69:28:cb:9d:6d:73:4b:
39:5f:09:fb:11:6e:ed:0e:b8:15:14:95:88:dc:75:ca:82:48:
b9:f3:a4:64:f0:73:ee:d0:57:f6:b7:36:8a:da:12:35:eb:59:
bf:da:dd:86:88:a3:72:8b:25:ab:b4:88:35:23:06:9b:a9:dc:
e1:f5:42:ec:27:af:a6:5d:ee:21:1c:82:99:b5:07:ba:82:d8:
85:4f:a3:b6:8b:27:bd:f0:44:dd:33:81:b6:ad:9b:a3:56:ef:
33:19:f1:4a:2c:63:09:15:1e:4e:2e:59:8d:09:26:df:91:9c:
c3:c2:96:ff:77:6a:f5:45:6a:92:42:6a:bf:2e:42:26:1d:e9:
9e:dc:d9:27:1f:04:95:dd:96:37:d5:de:1c:77:a5:3b:76:25:
73:2a:3f:21:ec:dd:cb:a7:74:58:42:ea:e0:dd:06:d4:39:aa:
93:88:5c:de:ee:c8:e3:50:f8:0f:51:14:12:57:59:fb:11:03:
af:78:e5:6e:d5:be:db:3a:69:92:7a:25:19:22:77:5f:18:b8:
c5:7f:0b:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:47:38 2024 by rpki-client on console-fra.rpki-client.org