Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/b72999-0952-4576-b118-21e739563683/1/6J60-z9ylaZOYtMzmcJl9a69KoA.roa
File: 6J60-z9ylaZOYtMzmcJl9a69KoA.roa (raw, json)
Hash identifier: mE9GFirVWsaQpVReBrRzKVdbuNON/HBhtT2ETTM95ko=
Subject key identifier: E8:9E:B4:FB:3F:72:95:A6:4E:62:D3:33:99:C2:65:F5:AE:BD:2A:80
Certificate issuer: /CN=7701ee4c1a226f9f62429f35756a78980a5b457a
Certificate serial: 018CC8019E26A576FF10AD329A87A7353F52
Authority key identifier: 77:01:EE:4C:1A:22:6F:9F:62:42:9F:35:75:6A:78:98:0A:5B:45:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dwHuTBoib59iQp81dWp4mApbRXo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/b72999-0952-4576-b118-21e739563683/1/6J60-z9ylaZOYtMzmcJl9a69KoA.roa
Signing time: Tue 02 Jan 2024 02:29:58 +0000
ROA not before: Tue 02 Jan 2024 02:29:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204635
IP address blocks: 91.213.37.0/24 maxlen: 24
185.244.196.0/22 maxlen: 24
2a0d:3d80:245::/48 maxlen: 48
2a0d:3d80:248::/48 maxlen: 48
2a0d:3d80:150::/48 maxlen: 48
2001:67c:26ac::/48 maxlen: 48
2a0d:3d80:246::/48 maxlen: 48
2a0d:3d80:ffff::/48 maxlen: 48
2a0d:3d80::/29 maxlen: 48
2a0d:3d80:232::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/b72999-0952-4576-b118-21e739563683/1/dwHuTBoib59iQp81dWp4mApbRXo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/b72999-0952-4576-b118-21e739563683/1/dwHuTBoib59iQp81dWp4mApbRXo.mft
rsync://rpki.ripe.net/repository/DEFAULT/dwHuTBoib59iQp81dWp4mApbRXo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:9e:26:a5:76:ff:10:ad:32:9a:87:a7:35:3f:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7701ee4c1a226f9f62429f35756a78980a5b457a
Validity
Not Before: Jan 2 02:29:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e89eb4fb3f7295a64e62d33399c265f5aebd2a80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:59:ae:a0:f3:51:d8:6d:c1:db:ad:8b:6f:76:
ef:be:9f:f0:07:bc:c9:ec:e9:7b:3d:74:ba:6a:e4:
c6:f9:74:70:4e:8d:00:c1:20:74:0e:03:c1:ab:cb:
e5:ba:e8:f5:af:8a:32:ff:80:6c:84:8f:43:15:2a:
70:b7:7a:5f:4d:99:78:0e:5d:06:d6:2a:46:ed:78:
06:01:0f:f5:15:ee:ab:ab:0f:ec:f7:e7:ee:eb:28:
ed:a1:30:ef:6d:1c:3b:c5:a3:e7:68:6b:a9:a3:14:
56:36:f0:81:f0:66:a5:0e:27:8a:96:1c:b1:19:77:
66:06:dd:41:a0:ee:dd:e1:d3:5b:be:de:bf:e3:81:
f1:28:8e:52:13:8c:7e:75:7e:c5:d6:71:5a:d2:63:
97:a9:75:2f:83:7c:68:3e:23:3b:28:aa:05:93:7c:
54:83:f5:8f:75:1d:21:3e:c8:43:f5:7c:48:65:aa:
ec:e5:a0:c3:aa:f5:bb:36:8b:8f:8a:5f:2f:a2:a3:
42:1d:de:f6:e2:9e:b9:60:d9:f7:a4:cf:bd:c7:20:
26:2f:66:ec:75:9b:a2:fa:ba:dd:1d:3a:38:06:55:
d0:e4:89:42:11:e7:8b:28:3f:39:cc:28:f5:29:65:
39:50:1b:f1:f6:5b:19:95:6d:c7:da:32:6c:c4:11:
3c:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:9E:B4:FB:3F:72:95:A6:4E:62:D3:33:99:C2:65:F5:AE:BD:2A:80
X509v3 Authority Key Identifier:
keyid:77:01:EE:4C:1A:22:6F:9F:62:42:9F:35:75:6A:78:98:0A:5B:45:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dwHuTBoib59iQp81dWp4mApbRXo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b72999-0952-4576-b118-21e739563683/1/6J60-z9ylaZOYtMzmcJl9a69KoA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b72999-0952-4576-b118-21e739563683/1/dwHuTBoib59iQp81dWp4mApbRXo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.213.37.0/24
185.244.196.0/22
IPv6:
2001:67c:26ac::/48
2a0d:3d80::/29
Signature Algorithm: sha256WithRSAEncryption
34:d6:29:42:be:4d:c9:73:da:59:a9:7c:ee:af:f9:50:8c:c0:
24:5e:1d:75:82:23:25:26:ec:95:a4:62:d9:d4:1a:6b:b2:e7:
fe:63:33:bb:8e:db:c9:18:41:0d:98:16:c3:5d:a5:75:c7:b0:
05:87:d6:af:24:49:eb:5d:39:75:4b:3e:8d:1d:1c:90:cf:98:
e2:8d:3c:ec:18:b6:1f:ed:8e:50:65:01:33:21:2a:c6:8a:70:
60:4b:27:fd:68:23:6e:4a:f6:8d:93:7e:a6:2d:c4:1e:ce:83:
dd:7b:b1:49:c2:0c:44:39:2a:d2:fc:d7:ac:aa:bb:91:32:52:
76:8b:4e:7b:e7:87:7a:95:18:d7:d2:53:d9:66:0c:17:ca:24:
7e:25:fb:95:91:66:2f:86:aa:a5:2a:8d:47:c6:2d:09:34:f9:
42:48:e4:91:81:89:67:dd:15:67:c4:a1:2b:21:55:f2:1b:c0:
8d:1c:94:40:bd:02:17:d7:27:e7:f8:bb:8a:88:01:08:27:b3:
f6:e1:27:a1:6b:25:4d:4e:d2:6a:cc:dc:c2:c1:73:7c:ea:28:
bb:90:34:f6:38:12:52:50:dc:a2:1e:bd:7a:f7:0f:58:63:16:
7a:df:17:63:f4:af:2e:3a:6b:11:e0:f2:b2:1c:28:4a:23:5b:
e1:80:4d:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 20:46:21 2024 by rpki-client on console-ams.rpki-client.org