Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/6CneQwGIdtbb5lsyjYncescluxY.roa
File: 6CneQwGIdtbb5lsyjYncescluxY.roa (raw, json)
Hash identifier: L22oJdnSc7sOzBGfLtnpLRzZygWN2Sr+NNfPd8DL4Fk=
Subject key identifier: E8:29:DE:43:01:88:76:D6:DB:E6:5B:32:8D:89:DC:7A:C7:25:BB:16
Certificate issuer: /CN=391a0ecc2b9beaba9eb76d5519fe787b4033fc12
Certificate serial: 018CC3B7161E3120F140F3503516D6E6BAFF
Authority key identifier: 39:1A:0E:CC:2B:9B:EA:BA:9E:B7:6D:55:19:FE:78:7B:40:33:FC:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ORoOzCub6rqet21VGf54e0Az_BI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/6CneQwGIdtbb5lsyjYncescluxY.roa
Signing time: Mon 01 Jan 2024 06:30:04 +0000
ROA not before: Mon 01 Jan 2024 06:30:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204717
IP address blocks: 91.132.7.0/24 maxlen: 24
91.132.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/ORoOzCub6rqet21VGf54e0Az_BI.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/ORoOzCub6rqet21VGf54e0Az_BI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ORoOzCub6rqet21VGf54e0Az_BI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 03:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:16:1e:31:20:f1:40:f3:50:35:16:d6:e6:ba:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=391a0ecc2b9beaba9eb76d5519fe787b4033fc12
Validity
Not Before: Jan 1 06:30:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e829de43018876d6dbe65b328d89dc7ac725bb16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:f9:47:91:85:da:7d:48:9d:af:34:24:ea:8b:
0f:c0:c9:ff:23:36:8d:b0:f7:58:1a:51:34:82:3c:
07:ef:65:a8:63:9b:78:28:b4:b5:2f:02:01:02:c1:
4c:b3:a7:33:44:84:35:a0:ec:95:a4:42:06:d4:71:
d8:94:1e:56:e5:da:b4:e0:80:e0:6e:44:d1:5d:80:
f8:c2:7e:c2:9e:06:14:a5:4d:ca:70:b7:97:fa:40:
e4:35:47:d1:c4:ba:bd:6b:0e:be:ac:7d:2d:6d:49:
a9:8d:59:f9:71:83:f3:ac:89:72:b8:bc:5a:7e:4d:
6a:52:c8:9e:d6:2a:c6:a4:c8:97:5d:68:ea:68:50:
06:68:28:96:e7:8f:23:ce:1d:ac:91:d4:93:82:5d:
74:c8:fd:68:33:33:16:94:02:3d:cb:63:33:44:45:
f5:33:f5:1f:b1:e6:28:13:5f:c4:16:33:42:05:d5:
ac:6c:77:3f:c2:ff:dc:be:2c:a6:ff:a1:ec:01:d5:
81:b2:83:f3:62:4d:f9:ea:6c:40:dc:3d:18:88:a5:
5c:5d:41:23:6e:b9:d7:ee:f0:09:cb:a1:5f:dd:d7:
e3:04:e7:d6:fa:f2:11:64:4c:d3:d6:1f:8d:98:cc:
f2:a0:bf:62:d2:39:5d:84:fc:ef:46:94:93:42:cd:
d5:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:29:DE:43:01:88:76:D6:DB:E6:5B:32:8D:89:DC:7A:C7:25:BB:16
X509v3 Authority Key Identifier:
keyid:39:1A:0E:CC:2B:9B:EA:BA:9E:B7:6D:55:19:FE:78:7B:40:33:FC:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORoOzCub6rqet21VGf54e0Az_BI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/6CneQwGIdtbb5lsyjYncescluxY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/ORoOzCub6rqet21VGf54e0Az_BI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.132.6.0/23
Signature Algorithm: sha256WithRSAEncryption
0b:10:2a:1c:10:5a:c6:fe:b6:59:df:81:63:c1:77:8e:6d:97:
77:b2:5f:49:0f:ed:77:66:b7:91:fc:3b:b5:63:cf:3c:06:d7:
0c:2a:11:0f:2e:29:d8:71:2c:00:92:a6:71:c7:fb:07:0d:e6:
b4:b0:af:f7:83:99:4a:a7:d4:f9:3a:ff:8b:69:ad:a1:3b:55:
fa:42:39:d3:a8:a2:b1:2b:74:34:c6:38:70:1e:5d:66:37:cb:
4a:88:be:6c:0b:79:5b:75:ca:bc:21:19:36:97:71:8d:4f:b0:
51:32:39:43:8c:73:99:aa:eb:5d:62:be:bd:8d:98:d5:81:ff:
71:d5:8b:fb:9f:99:83:b6:d9:53:14:49:02:ef:a0:f4:b5:b4:
ca:9d:38:ed:d2:56:d8:65:b4:27:17:b8:d6:bf:96:e4:5d:8d:
f7:e8:86:29:7b:40:44:de:3f:48:56:d5:79:a3:be:e9:41:0a:
2a:95:f6:74:ed:7d:80:af:27:e1:ea:47:c9:e7:21:e2:3c:c2:
7d:de:0b:09:62:41:35:01:75:30:f1:59:80:6c:44:63:b5:6c:
5d:3e:56:1b:b3:54:bb:80:72:5a:8c:2a:af:07:b0:c8:21:9f:
64:3c:d1:ef:84:d4:2c:56:63:dd:32:06:57:50:d9:82:22:c9:
8f:5e:9e:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 12:12:44 2024 by rpki-client on console-fra.rpki-client.org