Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/6n05MDgd73W6UPogiL52fi_H2rQ.roa
File: 6n05MDgd73W6UPogiL52fi_H2rQ.roa (raw, json)
Hash identifier: OCNicH/1HdV08KfjZGDs2MYKoLpajxRdUZ00juXJEBQ=
Subject key identifier: EA:7D:39:30:38:1D:EF:75:BA:50:FA:20:88:BE:76:7E:2F:C7:DA:B4
Certificate issuer: /CN=58ad60da52671e9083cf39864eca2aa23241be9e
Certificate serial: 018CC64B63AA81AB4F8D335153BF967F73EC
Authority key identifier: 58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/6n05MDgd73W6UPogiL52fi_H2rQ.roa
Signing time: Mon 01 Jan 2024 18:31:18 +0000
ROA not before: Mon 01 Jan 2024 18:31:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 19762
IP address blocks: 193.243.190.0/24 maxlen: 24
91.229.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 17:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:63:aa:81:ab:4f:8d:33:51:53:bf:96:7f:73:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58ad60da52671e9083cf39864eca2aa23241be9e
Validity
Not Before: Jan 1 18:31:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ea7d3930381def75ba50fa2088be767e2fc7dab4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:8a:34:2b:f1:5f:95:f7:b5:e4:11:f9:a3:da:
d0:b1:ae:32:37:7e:02:e9:e5:47:15:d1:ad:fb:b5:
ef:15:ae:8c:57:4f:bf:92:70:6a:4c:ef:c2:81:b5:
cc:f7:39:99:e5:0e:fe:d5:80:bd:6c:89:10:5e:a9:
10:90:1e:c9:79:88:e6:b1:7d:53:ea:ec:0c:36:13:
4d:ab:61:9c:47:23:18:45:cc:b2:48:72:92:b5:2e:
db:d9:f6:52:16:b1:9f:e0:ac:f6:3b:b2:ea:9d:87:
a3:9c:79:90:67:f8:d5:50:05:2e:37:57:6a:cd:03:
bd:ab:5c:ab:b5:bd:7d:15:be:28:c1:e7:68:d2:a2:
22:4f:c2:93:5d:df:3d:ae:49:23:a6:01:e2:7f:6e:
bf:93:fb:50:8a:34:39:25:dd:15:11:4e:4d:21:fa:
c5:e5:86:c2:56:36:0c:62:df:e5:ca:d6:90:63:b0:
5b:3b:28:15:6d:6d:ad:1a:6d:39:e3:f9:cf:47:01:
47:26:c9:50:fb:10:a2:a1:09:86:bf:c8:18:cf:fa:
7e:d7:53:0a:34:ab:2e:64:4a:2d:b1:6f:30:fd:d4:
15:94:7c:8e:1e:f7:cd:56:3b:cf:75:9e:20:dc:c9:
cc:43:01:85:d3:ba:4a:7a:46:88:aa:1d:44:cf:49:
02:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:7D:39:30:38:1D:EF:75:BA:50:FA:20:88:BE:76:7E:2F:C7:DA:B4
X509v3 Authority Key Identifier:
keyid:58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/6n05MDgd73W6UPogiL52fi_H2rQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.229.114.0/24
193.243.190.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:72:2f:d1:73:de:4a:92:b6:96:03:d2:3e:42:7e:43:08:98:
a3:ca:c2:ef:10:c1:79:fd:14:5f:50:94:a5:64:0a:53:6d:ee:
c2:40:1d:ed:70:3e:e8:15:55:c8:23:2d:d8:5e:13:7f:47:d0:
22:33:8e:b7:92:d5:ac:26:cd:13:aa:3e:41:ab:15:73:a7:7d:
83:d6:bd:7d:4b:8a:91:a9:8a:31:c3:27:c1:03:7b:29:f4:e9:
7d:02:2b:92:9a:95:e4:78:e2:5e:b4:7d:f7:93:14:24:fe:75:
64:06:f3:32:a8:6f:31:0a:26:a9:d5:f6:6c:51:89:ab:dc:19:
cc:b2:55:2e:a9:ae:84:d2:95:bc:17:89:6f:ca:fd:d4:eb:fc:
da:70:35:cf:fe:5e:a5:34:42:17:34:ec:ab:1b:73:e8:db:a6:
13:20:54:cd:06:5a:92:55:48:8c:6a:e6:73:ff:dd:a4:fc:9d:
9a:33:b7:aa:22:87:72:76:0c:af:e3:b1:8f:e5:35:d5:1e:e7:
96:fa:61:6a:b9:ed:f6:77:e6:13:86:8f:37:d7:39:dd:a5:77:
67:79:67:6a:51:ee:6c:a7:02:0d:22:d1:16:33:9a:41:78:d2:
e5:65:4d:d8:15:41:74:51:b9:fd:70:6d:1c:8a:38:f0:b3:27:
bf:a7:9a:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:56:56 2024 by rpki-client on console-ams.rpki-client.org