Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/31081a-8b5a-49ec-9036-862e99973fc3/1/6Ad9gp6HzJux2SKi4zYImppvBOE.roa
File: 6Ad9gp6HzJux2SKi4zYImppvBOE.roa (raw, json)
Hash identifier: rMCwxRCnp5f1R///W23Q8ueUIiLOxda4uPvWHwPFRqs=
Subject key identifier: E8:07:7D:82:9E:87:CC:9B:B1:D9:22:A2:E3:36:08:9A:9A:6F:04:E1
Certificate issuer: /CN=f7822d4597e5493d15178bfb10e6841dd17e5897
Certificate serial: 018EC3532EF2E36942AC0ABF60406B75AAC0
Authority key identifier: F7:82:2D:45:97:E5:49:3D:15:17:8B:FB:10:E6:84:1D:D1:7E:58:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/94ItRZflST0VF4v7EOaEHdF-WJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/31081a-8b5a-49ec-9036-862e99973fc3/1/6Ad9gp6HzJux2SKi4zYImppvBOE.roa
Signing time: Tue 09 Apr 2024 14:46:32 +0000
ROA not before: Tue 09 Apr 2024 14:46:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202098
IP address blocks: 158.47.216.0/21 maxlen: 21
158.47.224.0/19 maxlen: 20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/31081a-8b5a-49ec-9036-862e99973fc3/1/94ItRZflST0VF4v7EOaEHdF-WJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/31081a-8b5a-49ec-9036-862e99973fc3/1/94ItRZflST0VF4v7EOaEHdF-WJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/94ItRZflST0VF4v7EOaEHdF-WJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 May 2024 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:c3:53:2e:f2:e3:69:42:ac:0a:bf:60:40:6b:75:aa:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7822d4597e5493d15178bfb10e6841dd17e5897
Validity
Not Before: Apr 9 14:46:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e8077d829e87cc9bb1d922a2e336089a9a6f04e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:a2:91:10:a8:74:bd:24:cb:5b:e2:bf:37:88:
25:87:29:54:f0:0e:73:41:93:b6:06:e5:32:32:0d:
3d:22:eb:1a:57:75:f0:a1:6c:f1:72:12:d6:23:ce:
9e:cd:05:2b:44:b9:9e:07:ee:87:de:e8:ed:c7:02:
50:a4:83:89:8c:45:7f:36:73:f7:e3:72:7d:25:c1:
09:93:0f:0d:85:11:e3:b5:5e:8f:3e:ff:56:08:f9:
1a:81:aa:7f:70:f8:6f:e3:fa:4a:db:00:76:89:ef:
a7:fe:ba:35:42:1d:17:74:e2:3d:ec:55:1a:9b:4d:
64:ed:dd:3e:29:be:d2:fc:b5:74:69:0c:4c:d2:17:
b1:6e:bd:80:0c:c2:24:2a:4c:45:f6:a4:40:26:69:
d1:e7:b0:01:cd:8a:33:13:43:19:9b:52:8c:b9:db:
5c:9d:66:76:21:74:c2:b5:9f:c4:34:e5:9d:3f:47:
78:4b:62:df:25:7d:b1:63:7b:13:bb:e1:87:92:26:
89:53:13:e0:26:3e:75:18:d5:52:df:af:d6:3c:4b:
53:8d:c6:3b:8a:34:61:62:f7:73:fa:f9:5b:f4:9f:
5e:24:51:95:15:c6:fd:34:18:65:7d:36:3d:48:0c:
58:ca:17:07:2b:74:30:ca:ea:71:b3:b7:62:d2:c0:
5a:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:07:7D:82:9E:87:CC:9B:B1:D9:22:A2:E3:36:08:9A:9A:6F:04:E1
X509v3 Authority Key Identifier:
keyid:F7:82:2D:45:97:E5:49:3D:15:17:8B:FB:10:E6:84:1D:D1:7E:58:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/94ItRZflST0VF4v7EOaEHdF-WJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/31081a-8b5a-49ec-9036-862e99973fc3/1/6Ad9gp6HzJux2SKi4zYImppvBOE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/31081a-8b5a-49ec-9036-862e99973fc3/1/94ItRZflST0VF4v7EOaEHdF-WJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.47.216.0-158.47.255.255
Signature Algorithm: sha256WithRSAEncryption
12:bf:4c:76:ba:9c:27:f5:12:49:f9:2b:0b:8a:f7:67:32:3f:
b5:e2:4e:0c:6a:85:b3:8e:b0:f8:fd:64:f0:e3:82:0e:33:8c:
c1:b7:f4:eb:d7:63:f0:9a:33:d7:ec:96:b3:47:08:5e:6f:38:
4c:15:e1:e1:c4:f4:d4:08:2f:bc:6a:f6:b4:7c:14:0b:b7:6c:
01:fa:eb:4c:c5:bd:b7:0e:47:cb:16:6a:d5:d1:74:a9:d7:47:
45:c3:e4:aa:7b:09:6f:d0:03:a9:83:1f:a1:64:8b:88:94:73:
4d:0b:f3:c6:47:a7:5f:30:86:df:9e:40:3c:66:f2:cd:1c:67:
06:a7:cd:a4:98:5d:a8:7e:b5:48:29:83:b1:c8:54:a2:2b:3b:
79:6e:0d:31:dd:28:51:a5:21:21:e9:1a:56:27:57:ff:07:f4:
92:21:9b:24:86:4b:94:28:54:ad:9e:2e:32:9b:37:ab:64:83:
f6:8d:fa:2a:00:b4:7f:99:c9:97:ff:df:5a:ec:69:29:dd:34:
1a:77:5b:cf:f0:62:53:27:50:81:45:18:2d:22:e4:4b:c5:94:
84:10:bb:e7:34:63:b1:c8:52:7d:9c:84:84:06:78:e3:3c:52:
bb:bf:81:b4:92:a6:7c:cf:72:9c:bc:ef:de:1d:99:4b:45:d6:
30:15:3c:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 29 09:12:13 2024 by rpki-client on console-ams.rpki-client.org