Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/32ab16-8f6d-414d-80cf-0a86358e9c84/1/6qN1bsauIEePWc0uSTCNjYJL_hw.roa
File: 6qN1bsauIEePWc0uSTCNjYJL_hw.roa (raw, json)
Hash identifier: fYiNckP7luq9t+YHZouJADBnA7yWq7nIusoa0j39ieo=
Subject key identifier: EA:A3:75:6E:C6:AE:20:47:8F:59:CD:2E:49:30:8D:8D:82:4B:FE:1C
Certificate issuer: /CN=d796afc54fe63ed1740d5e896b3f591b1184f6dc
Certificate serial: 018CC6B8BCC8ACC0BA198D1A5A97F42B8A06
Authority key identifier: D7:96:AF:C5:4F:E6:3E:D1:74:0D:5E:89:6B:3F:59:1B:11:84:F6:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/15avxU_mPtF0DV6Jaz9ZGxGE9tw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/32ab16-8f6d-414d-80cf-0a86358e9c84/1/6qN1bsauIEePWc0uSTCNjYJL_hw.roa
Signing time: Mon 01 Jan 2024 20:30:44 +0000
ROA not before: Mon 01 Jan 2024 20:30:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12509
IP address blocks: 194.153.79.0/24 maxlen: 24
91.194.176.0/24 maxlen: 24
2001:67c:368::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/32ab16-8f6d-414d-80cf-0a86358e9c84/1/15avxU_mPtF0DV6Jaz9ZGxGE9tw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/32ab16-8f6d-414d-80cf-0a86358e9c84/1/15avxU_mPtF0DV6Jaz9ZGxGE9tw.mft
rsync://rpki.ripe.net/repository/DEFAULT/15avxU_mPtF0DV6Jaz9ZGxGE9tw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 10:02:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:bc:c8:ac:c0:ba:19:8d:1a:5a:97:f4:2b:8a:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d796afc54fe63ed1740d5e896b3f591b1184f6dc
Validity
Not Before: Jan 1 20:30:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=eaa3756ec6ae20478f59cd2e49308d8d824bfe1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b9:d9:0a:6f:37:b2:65:7f:45:9b:a2:28:51:
65:fd:7f:e0:c8:81:af:91:d7:4a:17:f2:bc:0e:28:
79:5d:0c:ac:bc:10:8c:ee:0c:e2:98:2e:96:7d:9c:
c1:ac:fa:ea:cd:86:1e:7a:94:2d:a9:d6:2a:7b:a5:
5d:18:60:ff:54:ed:85:b3:be:54:61:04:8c:ed:b7:
63:51:de:f3:f1:0e:c2:45:1c:dc:07:ce:1e:e3:ce:
5b:b6:25:17:9b:20:6f:f2:09:c5:37:f8:1c:ca:a5:
4b:d1:ca:57:95:56:14:81:d7:7b:b6:89:f3:40:ad:
d8:f4:ac:2c:64:a9:20:0f:db:e1:a1:ae:fc:bf:bf:
a2:68:da:3c:b1:c9:fd:79:63:84:02:82:03:2d:4a:
07:8e:29:64:76:bd:94:63:2d:e1:aa:e5:68:5e:55:
53:2a:56:10:f4:87:c1:bc:d6:eb:3f:7b:8d:84:67:
f3:63:9e:a6:41:f8:a5:82:97:be:01:da:3c:8f:84:
9a:46:ab:45:10:40:64:4f:c3:82:01:17:44:84:50:
78:8b:cc:6b:9f:14:a7:ed:c9:3f:a3:fb:0f:0e:8e:
7b:80:bf:27:b4:ef:84:5a:f8:0d:4b:5e:c3:2f:38:
1c:e2:f3:f7:0f:3e:cd:7f:46:b4:b2:b7:9e:f4:b6:
14:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:A3:75:6E:C6:AE:20:47:8F:59:CD:2E:49:30:8D:8D:82:4B:FE:1C
X509v3 Authority Key Identifier:
keyid:D7:96:AF:C5:4F:E6:3E:D1:74:0D:5E:89:6B:3F:59:1B:11:84:F6:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/15avxU_mPtF0DV6Jaz9ZGxGE9tw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/32ab16-8f6d-414d-80cf-0a86358e9c84/1/6qN1bsauIEePWc0uSTCNjYJL_hw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/32ab16-8f6d-414d-80cf-0a86358e9c84/1/15avxU_mPtF0DV6Jaz9ZGxGE9tw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.194.176.0/24
194.153.79.0/24
IPv6:
2001:67c:368::/48
Signature Algorithm: sha256WithRSAEncryption
41:96:fd:1e:86:f0:e2:f5:29:9b:f2:d3:4c:70:d4:b0:1e:8f:
2d:7a:86:58:e2:23:a0:9f:54:f3:0e:fc:57:97:ca:03:05:45:
27:41:f5:37:fa:a2:cb:33:90:38:67:e6:51:2e:4b:50:28:bf:
f5:0d:f3:76:eb:03:69:99:0a:98:14:32:43:95:c7:36:fb:26:
9e:2a:75:2f:cf:ff:6c:25:3d:55:9e:5e:e5:2d:41:f5:8a:a7:
0c:49:f4:31:14:1d:e5:a7:ef:58:28:16:bf:31:c1:3b:9b:98:
f7:09:fc:ec:de:86:35:9f:da:b2:ef:d5:82:ad:fd:0e:56:5b:
f0:e6:bd:36:e0:1c:c0:77:db:da:69:cb:f1:7a:7b:45:fa:67:
1d:87:64:46:63:ea:81:60:f6:c1:d3:12:f7:af:4e:84:87:e4:
60:6e:67:83:b2:c7:6b:f8:8a:f0:c8:bc:0c:10:9b:e7:95:f3:
52:42:7d:bd:f5:0b:b9:c8:b5:50:5a:29:43:1d:0a:71:56:85:
f2:3f:4f:a5:2a:71:40:a1:c3:82:a2:e9:16:9d:f6:fb:95:f6:
56:52:8c:ca:80:38:c9:6a:20:c5:49:da:92:62:13:32:3b:cf:
b5:9a:1d:a8:cf:23:be:ed:20:1b:45:87:22:9c:dc:49:1a:4a:
11:7e:bb:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 14:36:05 2024 by rpki-client on console-fra.rpki-client.org