Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/6ahdHnvvB9zaZQ6wynKcjW9Kxlw.roa
File: 6ahdHnvvB9zaZQ6wynKcjW9Kxlw.roa (raw, json)
Hash identifier: CMchUpOZCWSMevx2LPCcM8D+iHP6LTWMgK/z9h3Di0U=
Subject key identifier: E9:A8:5D:1E:7B:EF:07:DC:DA:65:0E:B0:CA:72:9C:8D:6F:4A:C6:5C
Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Certificate serial: 019324E7C7DD5DC4475133150A39B2DAFE52
Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/6ahdHnvvB9zaZQ6wynKcjW9Kxlw.roa
Signing time: Wed 13 Nov 2024 09:43:09 +0000
ROA not before: Wed 13 Nov 2024 09:43:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7018
IP address blocks: 81.22.129.0/24 maxlen: 24
81.22.131.0/24 maxlen: 24
81.22.138.0/24 maxlen: 24
89.185.0.0/24 maxlen: 24
109.72.121.0/24 maxlen: 24
109.72.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.mft
rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 16:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:24:e7:c7:dd:5d:c4:47:51:33:15:0a:39:b2:da:fe:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Validity
Not Before: Nov 13 09:43:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e9a85d1e7bef07dcda650eb0ca729c8d6f4ac65c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:f3:de:b4:aa:41:e5:64:5d:90:90:0e:f6:7d:
dc:45:f1:ef:55:ca:8d:f5:82:b6:05:6c:45:0b:51:
75:a6:58:a2:8e:b5:58:c7:b2:91:02:81:af:d5:ed:
b3:2d:61:ac:94:1c:1b:04:af:06:66:f3:b7:63:d4:
46:3d:f7:f5:b2:64:d3:9e:a6:55:63:a9:cb:65:95:
e6:88:b0:7c:c5:e7:db:37:53:6a:65:48:18:df:69:
58:82:aa:0b:28:d5:2f:15:c1:75:ac:77:0d:19:75:
2a:14:6d:8d:bd:b6:f7:27:2b:63:a1:53:01:58:43:
00:10:bb:e4:ae:6c:af:c4:8b:2c:7b:40:d8:d1:94:
60:f7:57:fe:5b:2d:35:cd:1e:87:10:fc:9e:bc:ea:
0b:76:34:f1:13:5b:ed:53:c2:db:dc:3a:b0:b6:4b:
15:02:5e:5e:00:78:e1:ca:77:a6:bf:3a:00:b5:7b:
de:e4:79:6d:38:a5:5c:e6:41:08:fa:cb:81:14:c5:
36:b7:94:5f:6f:91:d0:e5:b8:1a:81:a5:ec:a8:54:
e3:b7:2c:a0:ed:b9:fd:df:6b:11:2a:da:b5:dd:30:
a4:62:fe:df:b9:bf:fd:ad:e1:be:f1:a0:d2:d4:95:
b6:9d:4a:1e:5c:33:04:cb:0c:e5:92:de:38:5f:a6:
f1:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:A8:5D:1E:7B:EF:07:DC:DA:65:0E:B0:CA:72:9C:8D:6F:4A:C6:5C
X509v3 Authority Key Identifier:
keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/6ahdHnvvB9zaZQ6wynKcjW9Kxlw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.22.129.0/24
81.22.131.0/24
81.22.138.0/24
89.185.0.0/24
109.72.121.0/24
109.72.123.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:9b:c8:83:cc:01:5a:5c:c4:e9:dc:8f:35:c3:2d:ec:8d:7d:
13:ba:3d:73:f0:c5:6c:e6:ad:5f:9c:a0:2e:d9:dd:6c:b9:ca:
95:a4:b7:da:d9:05:f3:1e:d7:fa:4d:e2:42:5f:a0:cd:d4:a0:
60:3c:b5:01:63:92:20:44:42:55:d0:ed:af:b6:87:eb:96:45:
7d:41:ce:fa:f1:cc:68:ef:38:cb:2f:c9:ee:f6:6b:ea:a8:c7:
6c:5c:42:6f:74:c8:ff:1c:a7:8e:55:9e:c2:07:cd:ba:66:eb:
d7:a6:62:2a:5b:3c:87:c2:94:e8:3c:ad:eb:0a:ab:d0:6d:f9:
bf:e3:50:e4:4e:55:b2:46:6d:31:54:e8:24:d8:61:a8:b1:7f:
59:7e:bf:55:06:25:ef:c7:0d:5e:70:bc:e6:f0:da:6d:e7:84:
d5:90:b6:d5:43:36:38:7b:fe:ef:54:32:ca:59:e3:99:1c:eb:
ac:ff:20:da:ac:1a:c7:05:f5:d1:7b:19:8a:bd:37:24:81:d4:
97:c4:2f:d7:57:b8:b5:43:b6:ce:74:06:f4:08:de:4c:bb:64:
b8:c5:bb:7f:03:27:a6:6b:cb:5c:49:f2:cc:06:6e:78:4d:2a:
51:58:d5:7a:f2:e2:f6:69:0a:7e:81:10:54:b1:f8:d3:34:2d:
16:95:19:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:31:00 2024 by rpki-client on console-ams.rpki-client.org