Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/ce3fa7-fc88-4f48-a5ce-a45bbcb34de5/1/6OS-jC-3-TNyKJStFFYiaSlgKtg.roa
File: 6OS-jC-3-TNyKJStFFYiaSlgKtg.roa (raw, json)
Hash identifier: G/p5/qiU0klKO44xudoEL7rbx19WL0hKQC6+OJqShZo=
Subject key identifier: E8:E4:BE:8C:2F:B7:F9:33:72:28:94:AD:14:56:22:69:29:60:2A:D8
Certificate issuer: /CN=07d75335f77bf4240976277b1dd0e19bb23a8e1d
Certificate serial: 018CC8DF151A3D8CCA1B9800D78F16A8F02E
Authority key identifier: 07:D7:53:35:F7:7B:F4:24:09:76:27:7B:1D:D0:E1:9B:B2:3A:8E:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B9dTNfd79CQJdid7HdDhm7I6jh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/ce3fa7-fc88-4f48-a5ce-a45bbcb34de5/1/6OS-jC-3-TNyKJStFFYiaSlgKtg.roa
Signing time: Tue 02 Jan 2024 06:31:52 +0000
ROA not before: Tue 02 Jan 2024 06:31:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 174
IP address blocks: 91.103.82.0/24 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/ce3fa7-fc88-4f48-a5ce-a45bbcb34de5/1/B9dTNfd79CQJdid7HdDhm7I6jh0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/ce3fa7-fc88-4f48-a5ce-a45bbcb34de5/1/B9dTNfd79CQJdid7HdDhm7I6jh0.mft
rsync://rpki.ripe.net/repository/DEFAULT/B9dTNfd79CQJdid7HdDhm7I6jh0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 14:10:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:15:1a:3d:8c:ca:1b:98:00:d7:8f:16:a8:f0:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07d75335f77bf4240976277b1dd0e19bb23a8e1d
Validity
Not Before: Jan 2 06:31:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e8e4be8c2fb7f933722894ad1456226929602ad8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:eb:1c:f9:ac:53:e4:38:23:bc:ec:44:ef:01:
ed:77:fc:d4:4a:12:09:6f:c1:c8:6f:a5:1c:a4:38:
0d:a5:01:76:82:98:5e:91:b8:04:b5:b5:ef:f8:36:
16:a1:9f:5c:a4:87:a5:80:11:6c:38:83:03:3e:de:
01:56:5b:61:90:1c:27:95:d4:3e:7b:ef:e1:04:21:
28:a7:76:b2:25:70:eb:f8:0a:bc:72:a5:f8:ba:b4:
14:b5:92:e1:a8:0d:72:c8:f4:b4:d1:06:71:08:c8:
4e:af:ed:f0:f5:df:6a:54:fe:80:dd:e8:45:95:1d:
1d:22:a6:e2:f8:81:15:bf:63:e1:73:53:54:86:ce:
f1:f3:cc:ce:47:69:da:4e:88:fc:0e:bb:e1:e9:2d:
eb:2a:c0:85:0f:d8:84:14:87:ab:bb:97:ea:04:0a:
87:37:ec:36:da:6f:79:36:6e:e1:75:f0:45:a0:8a:
6a:d6:b1:47:cd:0a:c5:37:3f:6e:0d:7e:57:b7:6a:
27:3a:e4:42:65:1a:fe:51:1e:d3:af:45:8b:f5:67:
b1:7b:db:ab:aa:1b:92:2b:fa:02:f7:52:55:ae:27:
e7:7b:ef:7c:31:a5:83:74:e3:9a:85:47:1e:56:50:
1d:2b:f8:8c:24:81:a5:55:00:b8:29:f1:ae:8c:91:
60:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:E4:BE:8C:2F:B7:F9:33:72:28:94:AD:14:56:22:69:29:60:2A:D8
X509v3 Authority Key Identifier:
keyid:07:D7:53:35:F7:7B:F4:24:09:76:27:7B:1D:D0:E1:9B:B2:3A:8E:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9dTNfd79CQJdid7HdDhm7I6jh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ce3fa7-fc88-4f48-a5ce-a45bbcb34de5/1/6OS-jC-3-TNyKJStFFYiaSlgKtg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ce3fa7-fc88-4f48-a5ce-a45bbcb34de5/1/B9dTNfd79CQJdid7HdDhm7I6jh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.103.82.0/24
Signature Algorithm: sha256WithRSAEncryption
33:5e:dc:00:3b:c8:5a:64:a0:0b:e3:1d:6d:e8:83:d3:55:16:
86:3e:8b:e4:b5:3f:76:18:e7:49:8e:5a:fa:b7:e1:ef:26:cb:
f2:e8:5f:bc:d0:01:49:ed:16:07:e3:87:7f:03:f0:86:d6:e3:
c8:58:f8:b8:5a:6d:86:4d:03:1d:8d:64:37:8d:78:dc:2e:a0:
59:c1:01:e0:f3:b3:cd:ed:12:57:29:67:e6:26:59:10:51:01:
02:df:12:a2:15:4a:5d:bb:35:da:8a:4e:74:79:30:91:b2:bc:
f7:b9:7a:7c:c9:1e:9c:b1:0a:9b:75:ac:bb:ff:71:37:59:62:
de:38:25:70:8b:99:71:6e:fd:f3:ad:fe:9e:7c:c2:fd:a2:5f:
29:c6:48:a1:45:59:8c:87:84:61:b4:09:29:b5:39:9c:5f:73:
4a:38:99:25:be:c8:23:3d:99:0b:b4:0a:f4:03:71:b0:67:a2:
75:65:f5:c5:7e:b1:d6:fd:50:72:e3:48:30:c0:d7:24:21:87:
12:a5:31:45:1a:91:0d:0f:29:fa:68:66:4d:db:9f:1b:d4:85:
91:d5:ad:7e:ca:41:d9:d5:4a:72:12:68:30:e9:64:92:e1:0a:
49:ea:7a:e2:a0:4a:38:8c:f9:69:8e:4d:87:7f:fd:8f:5b:71:
be:30:a1:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 23:42:07 2024 by rpki-client on console-fra.rpki-client.org