Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/0c6111-58f7-4b75-bcab-90bc4624c7b2/1/PW6Iuj7MuHp733UBsdFkRW_tYuc.roa
File: PW6Iuj7MuHp733UBsdFkRW_tYuc.roa (raw, json)
Hash identifier: 08NdjESeXj7pJdejnl9xzlpkdLvyZbVhFgALm6wBjMU=
Subject key identifier: 3D:6E:88:BA:3E:CC:B8:7A:7B:DF:75:01:B1:D1:64:45:6F:ED:62:E7
Certificate issuer: /CN=7470dfc0bb5ce06d86df24fe3caa4b4ef34178f4
Certificate serial: 019136E68CB6EFAF8AB4CEDCAAB272C75500
Authority key identifier: 74:70:DF:C0:BB:5C:E0:6D:86:DF:24:FE:3C:AA:4B:4E:F3:41:78:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dHDfwLtc4G2G3yT-PKpLTvNBePQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/0c6111-58f7-4b75-bcab-90bc4624c7b2/1/PW6Iuj7MuHp733UBsdFkRW_tYuc.roa
Signing time: Fri 09 Aug 2024 11:29:24 +0000
ROA not before: Fri 09 Aug 2024 11:29:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34141
IP address blocks: 217.198.16.0/20 maxlen: 20
217.198.16.0/21 maxlen: 21
217.198.24.0/22 maxlen: 22
217.198.28.0/23 maxlen: 23
217.198.30.0/23 maxlen: 23
2a02:7d0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/0c6111-58f7-4b75-bcab-90bc4624c7b2/1/dHDfwLtc4G2G3yT-PKpLTvNBePQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/0c6111-58f7-4b75-bcab-90bc4624c7b2/1/dHDfwLtc4G2G3yT-PKpLTvNBePQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/dHDfwLtc4G2G3yT-PKpLTvNBePQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:36:e6:8c:b6:ef:af:8a:b4:ce:dc:aa:b2:72:c7:55:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7470dfc0bb5ce06d86df24fe3caa4b4ef34178f4
Validity
Not Before: Aug 9 11:29:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3d6e88ba3eccb87a7bdf7501b1d164456fed62e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:b2:4b:64:bb:34:f7:1f:16:c3:d4:1c:6a:50:
33:c1:fd:d6:90:2f:70:2b:a7:fa:0e:b1:78:d8:b3:
3e:8f:ec:a6:00:4f:17:9a:72:ce:d6:54:92:b4:e4:
a6:ec:f1:7d:49:b4:b6:12:d5:08:bd:55:60:31:9a:
49:45:58:25:52:e2:cc:a5:62:a5:97:fb:6f:b5:f8:
37:fb:86:0b:8b:12:3a:1a:c0:6a:b9:4d:e7:0d:73:
1f:b5:70:3f:8d:54:f7:78:78:fc:fe:1f:5a:f0:14:
59:8c:48:64:06:77:4e:1a:b5:59:89:25:c7:04:1e:
b7:53:d9:66:6b:cd:65:7e:d6:87:5a:5f:3f:5f:cc:
f5:c3:d2:bc:4c:5e:70:30:a6:5f:af:6c:05:0a:8b:
a8:e1:01:2f:65:3b:01:58:4d:3f:a7:b4:21:f0:39:
58:56:ff:32:05:53:42:a1:3b:cb:24:e5:6e:0f:ec:
33:3f:b2:fb:b0:b6:29:e0:83:4e:73:30:bf:ad:d7:
91:06:ba:79:75:f0:c6:3f:ed:f0:46:4d:c7:25:78:
ba:4b:a6:8a:2f:f3:56:00:d8:02:32:a0:42:ba:87:
f2:65:7e:28:0d:85:17:f1:fa:91:f0:99:73:7f:49:
a2:d4:21:c2:d0:57:c8:98:94:59:e6:3d:10:f0:63:
be:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:6E:88:BA:3E:CC:B8:7A:7B:DF:75:01:B1:D1:64:45:6F:ED:62:E7
X509v3 Authority Key Identifier:
keyid:74:70:DF:C0:BB:5C:E0:6D:86:DF:24:FE:3C:AA:4B:4E:F3:41:78:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dHDfwLtc4G2G3yT-PKpLTvNBePQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/0c6111-58f7-4b75-bcab-90bc4624c7b2/1/PW6Iuj7MuHp733UBsdFkRW_tYuc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/0c6111-58f7-4b75-bcab-90bc4624c7b2/1/dHDfwLtc4G2G3yT-PKpLTvNBePQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.198.16.0/20
IPv6:
2a02:7d0::/32
Signature Algorithm: sha256WithRSAEncryption
9e:00:06:20:b2:4e:40:af:59:08:1b:94:f3:7e:da:52:6f:7f:
80:75:4d:d6:51:2f:a7:12:fd:2f:99:78:9c:55:ae:ea:2f:e8:
f5:52:37:9c:5e:35:62:10:d4:25:c4:d2:f2:ff:bd:c8:43:cc:
b2:eb:81:27:85:5c:6c:c3:55:61:51:3e:03:ec:05:64:61:fc:
00:67:53:3f:41:89:ea:17:cb:bd:5b:5f:4b:63:3d:86:53:2e:
ba:55:62:79:ee:29:5f:c6:d6:1b:6a:b7:4d:31:f2:f4:3a:94:
d7:c3:b8:28:56:a4:62:05:ba:09:b1:2a:71:a0:f8:2c:d9:ac:
28:6c:01:d5:a2:3d:5c:49:74:32:31:84:89:fe:51:45:42:f0:
3b:ee:dc:4c:2c:04:6e:3f:c6:54:d1:bf:2e:21:37:4b:68:2d:
b9:36:c0:4b:cf:75:92:c5:88:c4:d7:5f:1e:00:f5:6c:1f:0d:
aa:f7:81:ca:6d:6f:8d:15:9e:14:59:88:21:b4:8f:26:e4:e8:
89:b6:a1:66:ad:66:91:62:89:54:07:e1:4e:56:e0:fa:82:c2:
a0:02:a2:1e:57:78:62:b4:6a:b6:f3:95:24:14:db:2d:94:b6:
89:45:1c:e3:96:af:99:d1:eb:d6:ee:a5:23:f0:e0:f4:e3:e1:
bc:99:4f:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:57:44 2024 by rpki-client on console-fra.rpki-client.org