Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/6u7mJhyEhzQGCwV-nWAvmQQG-tk.roa
File: 6u7mJhyEhzQGCwV-nWAvmQQG-tk.roa (raw, json)
Hash identifier: NIovG29M2WeFvvydIUSMCZ/WG4Nt/d9l7LvOiRxpuhU=
Subject key identifier: EA:EE:E6:26:1C:84:87:34:06:0B:05:7E:9D:60:2F:99:04:06:FA:D9
Certificate issuer: /CN=aa1dc50a4b526df18e8b0a6565d7b9d58a75d315
Certificate serial: 018CC492513C0ED147DFB5E2CF7CE00ED535
Authority key identifier: AA:1D:C5:0A:4B:52:6D:F1:8E:8B:0A:65:65:D7:B9:D5:8A:75:D3:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh3FCktSbfGOiwplZde51Yp10xU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/6u7mJhyEhzQGCwV-nWAvmQQG-tk.roa
Signing time: Mon 01 Jan 2024 10:29:32 +0000
ROA not before: Mon 01 Jan 2024 10:29:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62255
IP address blocks: 37.114.96.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.mft
rsync://rpki.ripe.net/repository/DEFAULT/qh3FCktSbfGOiwplZde51Yp10xU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 08:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:92:51:3c:0e:d1:47:df:b5:e2:cf:7c:e0:0e:d5:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1dc50a4b526df18e8b0a6565d7b9d58a75d315
Validity
Not Before: Jan 1 10:29:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=eaeee6261c848734060b057e9d602f990406fad9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:7a:95:28:a4:e0:26:89:be:fc:85:dd:76:bb:
5b:e3:7f:fa:bf:ef:c0:6d:50:cf:b9:80:11:33:11:
4f:2e:b1:4f:8f:32:00:86:31:3f:a4:59:75:91:35:
24:03:d0:bb:fa:4c:22:18:9f:50:fc:d5:f1:4f:62:
af:b1:dd:4f:7a:73:44:36:9d:54:97:52:15:6b:37:
75:d4:c0:22:27:4f:61:f7:7e:a1:07:a8:39:1e:a4:
4d:ad:3d:08:f8:8f:76:8c:7d:15:61:28:63:73:d3:
34:cb:04:58:6a:63:bd:82:1c:bc:21:d9:4b:7f:73:
24:f0:45:8c:39:37:41:70:e1:1f:bb:db:30:d8:71:
67:22:98:a3:04:cc:7d:5e:18:d2:9b:ed:bf:ee:6f:
84:02:15:b7:9b:4e:26:f0:dd:6b:25:f9:63:54:34:
1a:84:83:c9:95:94:7b:53:50:c5:15:8d:29:66:15:
19:4d:af:ea:18:3c:ca:ce:40:f3:8c:3e:78:f1:9c:
5d:70:d2:b7:b1:84:23:92:4e:29:c2:c8:79:27:14:
15:9b:f0:9f:77:b5:fb:58:b0:2c:ce:57:fa:94:30:
f0:e8:4a:ba:28:4e:2c:d7:f6:9b:84:87:d9:56:72:
68:c8:fe:ec:e2:e2:5b:97:25:4f:f8:c1:38:ab:17:
95:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:EE:E6:26:1C:84:87:34:06:0B:05:7E:9D:60:2F:99:04:06:FA:D9
X509v3 Authority Key Identifier:
keyid:AA:1D:C5:0A:4B:52:6D:F1:8E:8B:0A:65:65:D7:B9:D5:8A:75:D3:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh3FCktSbfGOiwplZde51Yp10xU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/6u7mJhyEhzQGCwV-nWAvmQQG-tk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.114.96.0/19
Signature Algorithm: sha256WithRSAEncryption
20:39:60:c6:3f:6f:2f:b1:29:1b:cf:e6:8f:f0:57:e2:31:da:
71:96:6e:10:48:8e:9d:42:f0:bd:9b:a5:d3:96:ea:e9:7d:39:
4a:03:ba:79:8c:9b:d7:b4:9f:db:e7:16:2f:0a:69:f3:3d:05:
fe:c5:e9:e7:6d:92:5f:6b:3f:d3:a8:ac:5a:87:13:52:b9:77:
51:c5:c5:b5:d9:59:ab:c8:12:bf:9e:81:f7:75:b5:db:2e:f4:
36:e4:22:aa:11:69:99:92:3f:89:a5:96:97:80:fd:41:d8:68:
c5:61:53:19:dd:5a:34:37:7f:15:b6:c8:1a:bd:f9:9f:48:05:
74:59:f1:d2:eb:6a:74:96:65:78:33:bc:f0:bd:f1:92:7d:d4:
e2:d1:00:38:53:1d:9a:e4:89:d5:60:78:9a:f7:09:65:39:9e:
64:d2:c9:88:2e:97:00:50:26:fc:89:95:c6:74:d1:e3:07:d0:
52:e9:3c:08:28:32:0c:54:9e:c8:a5:ec:d1:b7:ab:1f:bf:8d:
bc:4c:e7:4f:4b:9a:7c:26:12:96:c3:e2:13:04:7f:88:0a:09:
6f:b4:af:98:3a:55:b6:c5:e1:17:40:7e:05:2b:49:08:5d:be:
7a:d4:34:35:8c:1a:9c:ca:c8:75:d9:df:0f:22:2c:7d:df:24:
98:e4:15:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 12:29:56 2024 by rpki-client on console-fra.rpki-client.org