Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/6cn8yHwpomTZQtprJ4vVFkZGvZo.roa
File: 6cn8yHwpomTZQtprJ4vVFkZGvZo.roa (raw, json)
Hash identifier: 4XlmQsHn0YIXw6zvKZMKw18yBh0M1WBYUsS+Y6Scst8=
Subject key identifier: E9:C9:FC:C8:7C:29:A2:64:D9:42:DA:6B:27:8B:D5:16:46:46:BD:9A
Certificate issuer: /CN=7415fec4ae76b24e4f02991649917b99b740044a
Certificate serial: 0192BE2435CDBF5052938F4D574AC75F5302
Authority key identifier: 74:15:FE:C4:AE:76:B2:4E:4F:02:99:16:49:91:7B:99:B7:40:04:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dBX-xK52sk5PApkWSZF7mbdABEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/6cn8yHwpomTZQtprJ4vVFkZGvZo.roa
Signing time: Thu 24 Oct 2024 10:48:17 +0000
ROA not before: Thu 24 Oct 2024 10:48:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209242
IP address blocks: 77.105.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/dBX-xK52sk5PApkWSZF7mbdABEo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/dBX-xK52sk5PApkWSZF7mbdABEo.mft
rsync://rpki.ripe.net/repository/DEFAULT/dBX-xK52sk5PApkWSZF7mbdABEo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:be:24:35:cd:bf:50:52:93:8f:4d:57:4a:c7:5f:53:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7415fec4ae76b24e4f02991649917b99b740044a
Validity
Not Before: Oct 24 10:48:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e9c9fcc87c29a264d942da6b278bd5164646bd9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:90:6d:a4:cc:4b:ca:05:eb:17:25:54:9a:19:
bc:fe:f1:88:ea:ba:37:59:b3:55:05:84:30:1b:0a:
47:1f:de:3a:de:8d:7e:9d:af:4c:95:a1:ed:f5:3a:
9f:20:78:10:03:d6:c3:94:76:dd:58:2f:42:d8:55:
59:2a:d9:d7:f5:48:c2:db:3f:36:b6:11:5c:7e:71:
da:6c:2e:50:b5:93:55:0e:a7:56:3d:08:93:15:19:
57:82:f2:27:c2:b0:0c:2e:69:be:2c:2c:8a:f0:d7:
d9:5b:7c:12:b0:5a:c9:58:cb:63:ea:5e:54:3f:f4:
56:2e:cb:58:b2:12:71:57:26:60:f4:25:3c:8a:5b:
a9:8f:6a:d2:13:e1:f3:36:65:17:c9:4c:1b:58:09:
da:a2:9e:52:cf:ec:9a:9f:cd:19:39:2f:ed:ea:16:
03:3f:52:a9:c9:ac:3e:3b:de:2f:a5:54:de:f7:58:
ec:89:51:27:8f:69:2b:2f:eb:5b:ae:b5:e5:25:0c:
d5:91:f1:b3:63:d8:5a:88:74:2a:53:5b:e0:d4:96:
4c:5b:5f:fe:f5:c6:4c:7d:27:d6:f5:9c:41:e6:92:
a3:20:c7:61:30:4d:4a:51:29:71:d3:78:e4:49:1d:
2f:9c:c3:a5:11:b3:91:32:2b:25:19:56:98:f5:5e:
82:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:C9:FC:C8:7C:29:A2:64:D9:42:DA:6B:27:8B:D5:16:46:46:BD:9A
X509v3 Authority Key Identifier:
keyid:74:15:FE:C4:AE:76:B2:4E:4F:02:99:16:49:91:7B:99:B7:40:04:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dBX-xK52sk5PApkWSZF7mbdABEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/6cn8yHwpomTZQtprJ4vVFkZGvZo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/dBX-xK52sk5PApkWSZF7mbdABEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.105.163.0/24
Signature Algorithm: sha256WithRSAEncryption
96:52:ce:0f:4e:ab:76:d5:b2:8d:8d:e2:f4:b5:2a:88:ad:26:
f7:d0:df:4c:5a:db:16:9d:07:fb:2f:f8:71:35:00:4b:4b:63:
27:dd:d1:06:ba:0a:d1:59:1e:27:1a:df:56:47:20:22:38:e7:
9b:58:4c:92:bf:6f:63:9f:f5:5d:d2:0d:a5:28:9e:05:e3:7b:
c2:f9:1e:0d:3b:e9:3f:22:7a:9d:e4:cd:23:82:57:23:06:22:
32:ce:bc:d7:08:4b:1d:ee:6f:f2:7b:8c:99:8d:93:b6:a2:4b:
c1:c7:65:ea:93:fb:39:61:be:3a:8d:5d:ac:e6:da:00:46:bc:
a8:a6:ad:19:7f:f8:5c:1d:9a:22:fe:b8:86:71:f1:a1:d2:b2:
4d:94:3f:68:01:03:87:9c:cc:e3:32:1b:4c:05:02:46:46:a6:
68:a6:2e:20:ac:61:a1:5d:dc:f2:8f:e3:b0:f1:4f:76:00:aa:
f4:84:4b:f5:3f:c6:78:64:2e:0d:56:ce:43:4e:4a:1a:fc:12:
03:4c:90:3d:7a:71:ce:5c:e4:28:15:22:ea:c6:09:af:a9:15:
20:3d:4a:a3:5f:e0:48:9e:e6:da:55:1d:aa:10:4d:b5:f2:5c:
1f:9b:ee:75:7a:89:3a:55:13:75:10:c7:a0:6d:9e:a9:35:5f:
51:16:58:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:28:25 2024 by rpki-client on console-ams.rpki-client.org