Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/dee72d-d91d-465e-9d57-37a7cd37d49e/1/cUuPBbaJv8SjDvaPRnlwSaZx_54.roa
File: cUuPBbaJv8SjDvaPRnlwSaZx_54.roa (raw, json)
Hash identifier: uJGZ234tfU7suEArJxgYtESjdah+OcLOuyxVv/MRjFU=
Subject key identifier: 71:4B:8F:05:B6:89:BF:C4:A3:0E:F6:8F:46:79:70:49:A6:71:FF:9E
Certificate issuer: /CN=6ffc7253c0da15b56e0095731a10c2bbad6c117e
Certificate serial: 018FFBBEAB3E090DCF98CF139D75DB9EA793
Authority key identifier: 6F:FC:72:53:C0:DA:15:B5:6E:00:95:73:1A:10:C2:BB:AD:6C:11:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b_xyU8DaFbVuAJVzGhDCu61sEX4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/dee72d-d91d-465e-9d57-37a7cd37d49e/1/cUuPBbaJv8SjDvaPRnlwSaZx_54.roa
Signing time: Sun 09 Jun 2024 06:45:27 +0000
ROA not before: Sun 09 Jun 2024 06:45:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47752
IP address blocks: 91.204.236.0/22 maxlen: 22
178.216.128.0/21 maxlen: 21
178.216.131.0/24 maxlen: 24
2001:678:c3c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/dee72d-d91d-465e-9d57-37a7cd37d49e/1/b_xyU8DaFbVuAJVzGhDCu61sEX4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/dee72d-d91d-465e-9d57-37a7cd37d49e/1/b_xyU8DaFbVuAJVzGhDCu61sEX4.mft
rsync://rpki.ripe.net/repository/DEFAULT/b_xyU8DaFbVuAJVzGhDCu61sEX4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Sep 2024 21:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:fb:be:ab:3e:09:0d:cf:98:cf:13:9d:75:db:9e:a7:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ffc7253c0da15b56e0095731a10c2bbad6c117e
Validity
Not Before: Jun 9 06:45:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=714b8f05b689bfc4a30ef68f46797049a671ff9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ca:66:a3:ab:74:b7:e0:b6:7a:30:dd:e0:27:
fb:0b:08:43:de:5b:c3:60:78:b7:8c:66:7a:28:53:
ed:75:ad:db:ea:73:43:9a:a4:b3:e0:f7:16:25:3e:
dd:5a:c4:85:60:88:b4:fd:1d:a2:bb:ba:76:6b:bb:
18:8f:6b:7b:2f:f5:42:43:83:52:2c:19:cc:04:9f:
29:76:8b:95:10:79:39:e4:95:77:a5:b6:1f:3a:64:
2e:71:c9:88:3c:93:8f:46:e7:60:fb:65:d2:55:c4:
98:9b:e2:cc:28:ef:2e:e2:55:b4:c4:f8:f6:73:a1:
ee:9a:fe:b6:96:59:2b:33:79:95:d8:0f:6d:b0:41:
86:f0:7a:89:a0:5c:bb:e6:17:19:f2:4a:69:38:bd:
12:23:b7:94:5a:c0:b0:6d:9b:29:71:c1:95:72:79:
9f:76:9c:09:20:55:ac:4d:dd:ef:1d:0b:25:04:f3:
c2:53:63:ed:c7:75:fa:a2:ac:6c:1c:d5:f0:62:b2:
11:55:3b:fe:6f:f3:3c:13:16:c9:36:50:e4:c6:5c:
a9:e7:2c:be:4a:d5:c4:d9:ce:85:3d:da:45:b5:09:
9c:ba:39:87:ca:b0:5d:a2:e9:37:19:be:1c:c7:87:
f7:67:5a:b2:07:fb:75:34:4c:16:ec:48:20:c2:02:
57:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:4B:8F:05:B6:89:BF:C4:A3:0E:F6:8F:46:79:70:49:A6:71:FF:9E
X509v3 Authority Key Identifier:
keyid:6F:FC:72:53:C0:DA:15:B5:6E:00:95:73:1A:10:C2:BB:AD:6C:11:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b_xyU8DaFbVuAJVzGhDCu61sEX4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/dee72d-d91d-465e-9d57-37a7cd37d49e/1/cUuPBbaJv8SjDvaPRnlwSaZx_54.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/dee72d-d91d-465e-9d57-37a7cd37d49e/1/b_xyU8DaFbVuAJVzGhDCu61sEX4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.204.236.0/22
178.216.128.0/21
IPv6:
2001:678:c3c::/48
Signature Algorithm: sha256WithRSAEncryption
37:94:fc:8c:c6:e3:52:79:7b:69:de:73:d9:d2:c9:5b:c5:c0:
d0:5b:2e:68:3a:fe:7b:e5:c1:fb:f4:86:d8:a8:61:17:4b:10:
cf:5e:89:96:09:79:5b:b9:92:f7:e0:29:07:77:04:a9:58:57:
44:59:b1:dc:7d:0d:46:05:34:3d:86:05:47:5f:c7:81:1c:84:
79:23:fc:e8:f8:fb:23:1c:79:be:b2:e0:db:4f:2b:bd:93:75:
d9:ee:45:c3:e4:35:68:55:cb:32:6c:06:36:89:72:64:1c:e7:
b1:03:01:5f:65:4b:13:d9:90:51:ac:67:35:15:22:f7:16:7e:
e4:88:82:34:d1:97:7e:34:dd:ab:b8:d8:b4:c5:de:71:1a:65:
7e:e9:e8:8d:0d:eb:79:98:75:7a:4e:76:ab:1a:0f:48:f8:4c:
fb:92:c3:64:fd:e8:7f:ac:33:99:d0:19:8a:54:60:00:d2:49:
16:9c:7b:2a:0e:65:6b:a4:a7:3f:e3:5e:02:bb:61:d7:1b:5e:
f8:e7:85:c3:a5:13:26:6a:41:26:e1:43:9c:78:ac:3e:2e:02:
ab:43:57:40:d4:58:56:46:64:77:cf:f9:b1:b1:33:9f:cd:5c:
c8:68:9e:15:2a:43:c8:c2:e5:bd:c0:72:1c:7b:f3:1d:05:c0:
56:ed:ee:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 18 23:56:34 2024 by rpki-client on console-fra.rpki-client.org