Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/974749-4d7e-4450-9793-df854f47baf4/1/6tpsGcOXc5rjCDJmhWrp5GY2KYg.roa
File: 6tpsGcOXc5rjCDJmhWrp5GY2KYg.roa (raw, json)
Hash identifier: 0Ndxu0iR3gXo1jNOGxtuQ7pwYCE2+xe5tzlWqJ4UrJw=
Subject key identifier: EA:DA:6C:19:C3:97:73:9A:E3:08:32:66:85:6A:E9:E4:66:36:29:88
Certificate issuer: /CN=b0fa0c7abc10796915e335ba19780e473e027969
Certificate serial: 018CC4923AA94958B368A51F46159493AB1A
Authority key identifier: B0:FA:0C:7A:BC:10:79:69:15:E3:35:BA:19:78:0E:47:3E:02:79:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sPoMerwQeWkV4zW6GXgORz4CeWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/974749-4d7e-4450-9793-df854f47baf4/1/6tpsGcOXc5rjCDJmhWrp5GY2KYg.roa
Signing time: Mon 01 Jan 2024 10:29:26 +0000
ROA not before: Mon 01 Jan 2024 10:29:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9211
IP address blocks: 213.238.32.0/20 maxlen: 20
213.238.50.0/23 maxlen: 23
213.238.52.0/22 maxlen: 22
212.12.32.0/20 maxlen: 20
212.12.56.0/21 maxlen: 21
194.49.7.0/24 maxlen: 24
2a00:ea8::/32 maxlen: 32
2a00:eab::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/974749-4d7e-4450-9793-df854f47baf4/1/sPoMerwQeWkV4zW6GXgORz4CeWk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/974749-4d7e-4450-9793-df854f47baf4/1/sPoMerwQeWkV4zW6GXgORz4CeWk.mft
rsync://rpki.ripe.net/repository/DEFAULT/sPoMerwQeWkV4zW6GXgORz4CeWk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:92:3a:a9:49:58:b3:68:a5:1f:46:15:94:93:ab:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0fa0c7abc10796915e335ba19780e473e027969
Validity
Not Before: Jan 1 10:29:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=eada6c19c397739ae3083266856ae9e466362988
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:28:31:19:ef:d6:f4:0f:4e:6b:48:88:3f:67:
5b:03:b4:78:59:67:9d:09:f5:e8:2c:85:c7:0c:26:
b8:87:3e:b6:fd:81:17:b6:05:17:80:e2:a1:59:4a:
2d:19:ee:fe:ee:7c:03:ac:76:b0:0a:89:1a:08:09:
ab:e1:3e:ac:b9:2e:93:ad:2e:7e:37:a4:5e:f5:39:
d3:5f:cc:be:8a:c3:22:82:52:29:d8:c8:66:de:24:
4e:f3:e8:a2:a9:5e:3b:c2:01:40:bf:1e:7c:79:58:
6d:e4:17:ee:1a:7d:b4:ec:98:df:49:59:a6:48:b5:
3f:bb:68:b2:d9:bc:ea:1e:0d:45:44:91:c5:0c:9e:
57:41:1b:fe:52:8c:0d:f8:59:b4:80:39:8d:e5:69:
99:6d:c0:89:63:db:6d:b6:91:8e:5b:dd:39:40:23:
c3:a8:3d:40:1e:6f:d8:ee:35:55:71:57:f8:8c:a5:
3f:68:fe:dd:76:fd:40:4c:d2:0d:58:4a:0d:55:19:
5c:21:e1:3c:cc:68:e3:e4:1b:5e:bf:45:a9:ce:a3:
a6:f9:0b:3c:33:03:ae:a3:13:6a:1c:f1:ff:db:c3:
bd:44:ad:88:0e:01:d7:1a:3d:67:70:ba:0e:2b:de:
43:b6:ba:50:b0:56:51:8c:b6:23:f5:16:7a:3f:5c:
1f:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:DA:6C:19:C3:97:73:9A:E3:08:32:66:85:6A:E9:E4:66:36:29:88
X509v3 Authority Key Identifier:
keyid:B0:FA:0C:7A:BC:10:79:69:15:E3:35:BA:19:78:0E:47:3E:02:79:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sPoMerwQeWkV4zW6GXgORz4CeWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/974749-4d7e-4450-9793-df854f47baf4/1/6tpsGcOXc5rjCDJmhWrp5GY2KYg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/974749-4d7e-4450-9793-df854f47baf4/1/sPoMerwQeWkV4zW6GXgORz4CeWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.49.7.0/24
212.12.32.0/20
212.12.56.0/21
213.238.32.0/20
213.238.50.0-213.238.55.255
IPv6:
2a00:ea8::/32
2a00:eab::/32
Signature Algorithm: sha256WithRSAEncryption
68:ed:6c:95:30:db:aa:83:19:d2:c5:19:f5:ac:e0:f6:8b:75:
2d:c5:5c:05:8c:a3:de:77:11:14:ef:12:50:f6:2d:1a:e1:e0:
cd:b1:76:55:89:61:07:77:37:5e:33:6e:05:e7:66:f0:65:69:
11:6e:5c:fe:21:a2:fc:02:72:a3:bf:db:58:da:b9:20:94:e6:
42:77:6d:26:94:a9:cc:54:6a:eb:e5:87:74:10:ee:10:34:67:
a4:04:03:21:24:e4:ec:ef:70:b2:99:34:5f:4e:2d:1b:8d:de:
db:46:f5:e3:34:b1:c7:b8:c0:34:3c:cf:a5:8d:c3:e6:55:a6:
f8:37:3b:1e:46:1f:2e:ea:d7:c2:14:94:3f:40:71:ea:b7:d8:
a7:78:b7:29:ee:5e:7e:20:ca:1c:9b:87:78:69:77:bd:83:46:
03:98:9f:9f:ef:f0:15:86:49:59:1b:1a:02:27:b1:ac:de:6b:
6c:79:e9:eb:7a:b1:c8:8a:81:ec:60:b7:05:06:f7:99:f5:83:
0b:08:43:16:91:e8:bc:40:88:92:5a:d6:fd:e0:76:a4:ca:30:
e0:94:91:33:69:fc:3c:6f:62:6f:61:45:f0:f0:d6:6b:3c:4f:
9f:f3:5f:1b:3b:61:2f:5d:eb:6d:7b:9f:96:8f:00:a2:62:a9:
da:53:50:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 18:38:53 2024 by rpki-client on console-ams.rpki-client.org