Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/cbd362-7694-4183-915d-8f4f291b23b6/1/6MM6shg_NR6F8IzqiDVgWZE-RMU.roa
File: 6MM6shg_NR6F8IzqiDVgWZE-RMU.roa (raw, json)
Hash identifier: uQ/ZWJnTTCe4OoxogYTybphRvlhnhrnv7oSPi8jPWzw=
Subject key identifier: E8:C3:3A:B2:18:3F:35:1E:85:F0:8C:EA:88:35:60:59:91:3E:44:C5
Certificate issuer: /CN=3f296fe945a23180753f67f7748e6f299d2e672a
Certificate serial: 018CC6B912A23FBF548A7D5D1C32627FB9D0
Authority key identifier: 3F:29:6F:E9:45:A2:31:80:75:3F:67:F7:74:8E:6F:29:9D:2E:67:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pylv6UWiMYB1P2f3dI5vKZ0uZyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/cbd362-7694-4183-915d-8f4f291b23b6/1/6MM6shg_NR6F8IzqiDVgWZE-RMU.roa
Signing time: Mon 01 Jan 2024 20:31:06 +0000
ROA not before: Mon 01 Jan 2024 20:31:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205826
IP address blocks: 193.19.188.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/cbd362-7694-4183-915d-8f4f291b23b6/1/Pylv6UWiMYB1P2f3dI5vKZ0uZyo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/cbd362-7694-4183-915d-8f4f291b23b6/1/Pylv6UWiMYB1P2f3dI5vKZ0uZyo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pylv6UWiMYB1P2f3dI5vKZ0uZyo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:12:a2:3f:bf:54:8a:7d:5d:1c:32:62:7f:b9:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f296fe945a23180753f67f7748e6f299d2e672a
Validity
Not Before: Jan 1 20:31:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e8c33ab2183f351e85f08cea88356059913e44c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:25:6f:a1:37:82:43:dd:c5:d9:54:39:b9:f7:
48:3c:d5:49:41:18:ec:81:0c:dc:6f:d6:a4:53:4d:
cb:82:75:ee:bc:9b:6f:52:e1:ed:66:fd:32:26:f6:
48:54:33:11:91:bc:b5:78:29:e5:fb:c7:ee:5b:5b:
1e:6c:73:a0:6c:c1:4d:5f:fb:fd:4d:30:b0:30:bb:
b1:fc:ae:7d:7e:2d:02:27:9d:b5:e3:e3:b4:06:fd:
b6:13:78:ec:60:a1:dc:08:1b:c6:2b:9c:a8:7d:25:
01:22:ac:f2:35:95:f4:a3:b8:08:fa:3c:e7:2d:ef:
57:5b:bf:77:5d:fd:64:a6:d4:14:da:bf:ef:80:2e:
49:80:57:1e:cf:90:03:f5:ba:e7:71:53:c1:34:df:
5b:d9:9e:de:8a:85:44:c4:94:85:43:58:2e:2d:51:
21:5a:5a:5a:48:7e:48:94:c5:72:83:30:8e:11:20:
c2:a7:d5:64:6f:d5:67:ff:a3:e6:a2:6d:df:8b:cb:
1f:e9:17:4b:4d:07:33:2b:a1:10:fb:12:2b:41:f7:
96:3a:54:aa:f0:82:bd:b5:31:5b:ec:c6:5e:d4:a1:
c0:68:21:3c:ef:28:83:24:bd:cc:9e:bf:2c:66:9c:
7b:9c:62:df:34:f9:07:89:ac:ed:08:70:dd:c4:8c:
e1:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:C3:3A:B2:18:3F:35:1E:85:F0:8C:EA:88:35:60:59:91:3E:44:C5
X509v3 Authority Key Identifier:
keyid:3F:29:6F:E9:45:A2:31:80:75:3F:67:F7:74:8E:6F:29:9D:2E:67:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pylv6UWiMYB1P2f3dI5vKZ0uZyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/cbd362-7694-4183-915d-8f4f291b23b6/1/6MM6shg_NR6F8IzqiDVgWZE-RMU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/cbd362-7694-4183-915d-8f4f291b23b6/1/Pylv6UWiMYB1P2f3dI5vKZ0uZyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.19.188.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:2f:22:7a:a1:50:88:f3:fb:c6:31:c5:7e:78:54:24:59:8e:
d3:b7:52:7c:64:4f:da:18:7d:a0:c6:42:c3:03:f6:be:bc:7b:
05:c9:32:89:80:d0:59:5b:7a:07:5c:c1:eb:2c:90:c1:a0:ce:
88:1c:a8:27:4a:cd:e0:64:94:15:8e:b8:13:14:24:03:c1:4c:
36:c7:a1:ab:fd:c3:f2:af:d8:c1:03:cc:43:bb:2c:16:6b:46:
b0:e4:64:d4:b4:e0:e6:26:ef:19:7d:21:54:2c:d5:a6:e1:6e:
13:93:88:d7:59:8c:b3:9b:2d:9d:22:e0:a6:41:d5:97:c8:d6:
29:33:75:b1:74:c2:b9:26:c3:3b:ee:a2:1d:b5:bb:cb:bb:72:
69:5a:7e:c6:1e:44:88:2d:c8:b6:cb:af:8b:2e:89:18:fc:a7:
45:83:ca:83:13:9d:ee:c0:56:9a:57:02:67:72:54:0b:40:cf:
0f:02:7a:36:db:ea:df:e8:34:2c:da:cd:a5:11:46:cf:50:b5:
b8:d6:97:13:70:d0:40:3d:d3:82:80:aa:00:e6:ad:20:c3:58:
65:91:46:1c:fb:be:48:de:eb:7f:3c:08:ec:85:86:54:3a:dd:
2a:74:ee:8d:0a:d3:fd:9a:a2:93:60:ef:e8:94:8a:cf:9c:d2:
70:d7:ed:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 07:20:41 2024 by rpki-client on console-ams.rpki-client.org