Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/847bc8-f7e6-43e0-a5cf-d3e16a163dd3/1/6GFzwSOL5roi0EYdXllMS-Nsnc4.roa
File: 6GFzwSOL5roi0EYdXllMS-Nsnc4.roa (raw, json)
Hash identifier: aHb27MmAEgSV6Y0OiehLVRSr6usbebK2sY+hA/ZwPPQ=
Subject key identifier: E8:61:73:C1:23:8B:E6:BA:22:D0:46:1D:5E:59:4C:4B:E3:6C:9D:CE
Certificate issuer: /CN=b90dfc2a651b5efab2c0cd59322d6d3b55906563
Certificate serial: 018CC4937633F861FFF4DA0AA2615DEF986C
Authority key identifier: B9:0D:FC:2A:65:1B:5E:FA:B2:C0:CD:59:32:2D:6D:3B:55:90:65:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uQ38KmUbXvqywM1ZMi1tO1WQZWM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/847bc8-f7e6-43e0-a5cf-d3e16a163dd3/1/6GFzwSOL5roi0EYdXllMS-Nsnc4.roa
Signing time: Mon 01 Jan 2024 10:30:47 +0000
ROA not before: Mon 01 Jan 2024 10:30:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201783
IP address blocks: 46.19.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/847bc8-f7e6-43e0-a5cf-d3e16a163dd3/1/uQ38KmUbXvqywM1ZMi1tO1WQZWM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/847bc8-f7e6-43e0-a5cf-d3e16a163dd3/1/uQ38KmUbXvqywM1ZMi1tO1WQZWM.mft
rsync://rpki.ripe.net/repository/DEFAULT/uQ38KmUbXvqywM1ZMi1tO1WQZWM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 07:02:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:76:33:f8:61:ff:f4:da:0a:a2:61:5d:ef:98:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b90dfc2a651b5efab2c0cd59322d6d3b55906563
Validity
Not Before: Jan 1 10:30:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e86173c1238be6ba22d0461d5e594c4be36c9dce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:3d:64:48:ec:27:40:68:55:f4:c1:ec:34:a9:
5a:75:e5:79:4e:44:4a:da:1e:68:ac:2f:6f:70:33:
04:c0:c5:7f:d5:a2:d6:6a:c4:94:a9:33:25:2c:9f:
ae:61:42:14:8a:9a:82:7e:b3:3d:76:54:63:9e:30:
aa:4a:4a:2b:35:3b:e7:5f:87:ac:1b:00:d8:32:92:
77:08:02:fc:40:cd:97:c6:fa:01:c5:fe:f6:e9:81:
33:c5:e5:6d:e1:2e:6f:ab:a2:b6:27:ce:6e:ce:eb:
98:c2:1f:48:fc:31:cb:0b:5a:9b:27:41:cb:77:e9:
d9:ba:88:76:db:aa:6e:32:72:46:6d:9e:4d:7c:42:
fd:b5:aa:e4:15:34:79:91:5b:30:33:18:06:d2:f6:
27:72:8a:b2:2e:f2:4b:2b:9a:0c:53:c3:b0:1e:69:
d9:84:63:bb:1b:b2:f8:70:98:81:8a:ce:4a:aa:db:
d8:3b:f2:94:96:42:d2:67:18:1f:6d:d1:c0:70:4b:
02:35:de:16:3a:dc:e0:fd:59:3b:3f:e8:34:c0:95:
66:45:7a:56:7e:f2:52:b8:20:49:85:ec:72:c3:6e:
ee:13:21:95:fa:b0:28:da:f4:93:a2:c2:b6:73:1a:
79:af:a4:eb:bd:a2:df:db:62:56:99:31:59:b3:0a:
d8:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:61:73:C1:23:8B:E6:BA:22:D0:46:1D:5E:59:4C:4B:E3:6C:9D:CE
X509v3 Authority Key Identifier:
keyid:B9:0D:FC:2A:65:1B:5E:FA:B2:C0:CD:59:32:2D:6D:3B:55:90:65:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uQ38KmUbXvqywM1ZMi1tO1WQZWM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/847bc8-f7e6-43e0-a5cf-d3e16a163dd3/1/6GFzwSOL5roi0EYdXllMS-Nsnc4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/847bc8-f7e6-43e0-a5cf-d3e16a163dd3/1/uQ38KmUbXvqywM1ZMi1tO1WQZWM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.19.215.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:50:a4:9f:7a:de:d5:28:3c:ee:63:38:bc:e2:f6:17:cb:7e:
b4:33:13:d6:92:57:b8:05:a9:c4:6c:ea:88:36:cd:a9:80:26:
2b:2c:de:16:66:97:e2:74:d3:73:2f:44:91:a7:96:18:2b:ba:
c1:65:38:0f:8d:d8:82:4e:cf:25:5d:07:3c:99:e4:2b:e6:6f:
27:02:70:81:28:f5:f5:b7:5e:54:30:d9:c9:17:3d:74:f3:9d:
c9:0d:ae:26:fe:0c:0d:b0:28:de:a1:41:3d:b6:a3:13:d1:07:
10:0c:b9:39:2c:5a:5b:32:72:2f:68:3d:8e:24:a7:08:b2:50:
a0:90:e7:74:50:eb:9e:6d:4e:b7:6e:2e:e7:12:8d:97:f1:ff:
c3:70:21:a6:b3:e1:37:d0:d5:10:b4:dd:b0:60:73:4d:9f:22:
0d:c5:2e:4b:97:b2:0d:ab:fe:bf:be:7f:f0:bb:6e:fb:4e:92:
a9:fc:ea:fe:48:b2:99:4f:67:ac:4c:0b:9e:f0:0b:08:0a:08:
ae:1c:50:21:4b:92:cf:aa:fd:c4:21:7f:84:9c:ed:47:80:b3:
c8:de:3a:b7:f5:ed:22:79:7f:56:00:65:45:9e:99:44:5c:93:
07:24:72:c2:d8:7b:08:23:8c:31:61:c6:a3:4f:87:e9:f8:64:
27:80:91:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:57:06 2024 by rpki-client on console-ams.rpki-client.org