Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/e17644-93d4-4457-8e5e-9675068857f1/1/6YD9bZc72K7jEA5pZxaz9g5oC_M.roa
File: 6YD9bZc72K7jEA5pZxaz9g5oC_M.roa (raw, json)
Hash identifier: oLvYSq3y4Ts7CUfHduP24IsKarDUR3RaVvoqtKn6psE=
Subject key identifier: E9:80:FD:6D:97:3B:D8:AE:E3:10:0E:69:67:16:B3:F6:0E:68:0B:F3
Certificate issuer: /CN=c22d553b28c5d0ea5b1ef60c9bce33df50bcb493
Certificate serial: 018CC56E296A3B8328962B57141526DAD1D5
Authority key identifier: C2:2D:55:3B:28:C5:D0:EA:5B:1E:F6:0C:9B:CE:33:DF:50:BC:B4:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wi1VOyjF0OpbHvYMm84z31C8tJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/e17644-93d4-4457-8e5e-9675068857f1/1/6YD9bZc72K7jEA5pZxaz9g5oC_M.roa
Signing time: Mon 01 Jan 2024 14:29:40 +0000
ROA not before: Mon 01 Jan 2024 14:29:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25447
IP address blocks: 91.210.220.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/e17644-93d4-4457-8e5e-9675068857f1/1/wi1VOyjF0OpbHvYMm84z31C8tJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/e17644-93d4-4457-8e5e-9675068857f1/1/wi1VOyjF0OpbHvYMm84z31C8tJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/wi1VOyjF0OpbHvYMm84z31C8tJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:29:6a:3b:83:28:96:2b:57:14:15:26:da:d1:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c22d553b28c5d0ea5b1ef60c9bce33df50bcb493
Validity
Not Before: Jan 1 14:29:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e980fd6d973bd8aee3100e696716b3f60e680bf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:97:5e:0b:23:ff:b5:48:9e:58:a2:bb:a4:b4:
f1:28:74:10:8a:34:b5:cf:f9:f3:b6:9b:3c:65:de:
e7:ec:4c:ae:3f:32:0d:f0:ea:a8:32:2b:35:db:b7:
59:e0:73:9e:bc:dd:b0:75:fe:b7:2a:a9:6a:26:60:
82:19:3c:ee:09:cf:f4:d6:de:fd:8f:bb:80:e6:97:
60:04:7a:64:2e:32:0a:51:ba:ab:09:94:c6:2e:40:
6a:15:66:f9:16:4c:bd:aa:f3:0e:f1:e8:f1:ef:23:
23:85:49:be:be:79:41:94:d5:59:33:66:af:98:56:
11:7e:e4:14:15:bf:5f:9f:ef:5b:8b:41:f9:f4:0e:
7a:a2:dd:ac:ba:61:2b:22:d3:12:1d:8e:46:98:72:
15:e7:3a:29:3c:36:f0:61:09:5d:a9:eb:e9:fc:3f:
92:f6:48:00:4f:e6:96:74:e7:1f:2b:ae:6a:56:dd:
db:d2:18:1e:20:75:6f:47:33:53:e3:f6:8c:bf:93:
ae:39:5f:74:c9:b0:59:5d:83:1c:fb:2c:4f:6e:11:
90:b4:72:3f:ad:3a:11:54:8b:f4:f1:7d:d4:bd:f9:
99:eb:f0:8e:0d:b5:6f:c4:63:1e:6f:26:aa:15:fc:
99:fc:f5:f5:08:f6:38:51:71:a2:c1:00:35:b8:c0:
b3:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:80:FD:6D:97:3B:D8:AE:E3:10:0E:69:67:16:B3:F6:0E:68:0B:F3
X509v3 Authority Key Identifier:
keyid:C2:2D:55:3B:28:C5:D0:EA:5B:1E:F6:0C:9B:CE:33:DF:50:BC:B4:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wi1VOyjF0OpbHvYMm84z31C8tJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e17644-93d4-4457-8e5e-9675068857f1/1/6YD9bZc72K7jEA5pZxaz9g5oC_M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e17644-93d4-4457-8e5e-9675068857f1/1/wi1VOyjF0OpbHvYMm84z31C8tJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.210.220.0/22
Signature Algorithm: sha256WithRSAEncryption
89:0b:28:7f:42:47:d9:23:7a:c2:3a:a1:c3:bf:0c:cb:cf:83:
40:b3:0a:ab:e6:d3:11:b8:62:42:f0:20:ef:3a:37:87:a9:1b:
1d:d6:40:ce:24:29:58:7f:10:49:d3:c8:0a:6a:0e:ea:3f:37:
7b:59:92:ea:14:25:01:ed:c2:ed:85:1f:5c:e7:5e:e4:a9:08:
f9:2f:43:cb:8c:96:e0:a8:5b:c9:73:7c:0c:25:6a:d6:1e:9b:
f2:d7:12:b7:0c:7f:5b:20:8c:5d:72:10:6e:7d:59:3e:39:7e:
40:a6:37:a8:82:07:b1:1b:8c:f7:df:ea:e4:fa:a2:fe:f1:57:
c4:8b:f0:4c:f0:61:79:09:aa:4b:aa:fb:14:10:2d:b2:12:15:
e6:b0:d2:f6:11:3a:d1:3e:17:db:c6:e1:3c:c0:9a:e4:81:f1:
72:83:cc:98:4a:2b:97:ad:84:8c:cd:a8:d8:d9:1e:20:8f:06:
eb:66:e6:b7:05:4c:23:be:f2:88:bc:84:b7:1d:7c:36:bc:fa:
55:7d:48:ea:b6:85:f7:38:4d:36:6b:ab:1d:95:dc:1c:82:3b:
58:94:ba:df:8f:e9:64:37:b1:58:ab:ce:e5:63:94:a1:32:f0:
bb:bf:d8:c5:48:cd:03:2c:c0:18:42:0e:6a:91:46:59:f5:e7:
5c:64:9c:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 17:12:54 2024 by rpki-client on console-ams.rpki-client.org