Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/338d33-72c6-4802-aefe-70e60edbc1e7/1/6M64KGEnDKpkvFXsRb9OJ7bzvgE.roa
File: 6M64KGEnDKpkvFXsRb9OJ7bzvgE.roa (raw, json)
Hash identifier: nFQqMPni1JWxJ2lsdXi2HlvknLtWIBYUOBydsqQWTH4=
Subject key identifier: E8:CE:B8:28:61:27:0C:AA:64:BC:55:EC:45:BF:4E:27:B6:F3:BE:01
Certificate issuer: /CN=64465a8a1e8e42f1a60d278198c320aec0f3f7dc
Certificate serial: 018CC56E4F74731F9A3A0C6A9B95BB74908B
Authority key identifier: 64:46:5A:8A:1E:8E:42:F1:A6:0D:27:81:98:C3:20:AE:C0:F3:F7:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZEZaih6OQvGmDSeBmMMgrsDz99w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/338d33-72c6-4802-aefe-70e60edbc1e7/1/6M64KGEnDKpkvFXsRb9OJ7bzvgE.roa
Signing time: Mon 01 Jan 2024 14:29:49 +0000
ROA not before: Mon 01 Jan 2024 14:29:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202049
IP address blocks: 193.162.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/338d33-72c6-4802-aefe-70e60edbc1e7/1/ZEZaih6OQvGmDSeBmMMgrsDz99w.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/338d33-72c6-4802-aefe-70e60edbc1e7/1/ZEZaih6OQvGmDSeBmMMgrsDz99w.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZEZaih6OQvGmDSeBmMMgrsDz99w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 19:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:4f:74:73:1f:9a:3a:0c:6a:9b:95:bb:74:90:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64465a8a1e8e42f1a60d278198c320aec0f3f7dc
Validity
Not Before: Jan 1 14:29:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e8ceb82861270caa64bc55ec45bf4e27b6f3be01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:3e:35:ff:eb:a4:21:52:c5:04:05:1c:8b:87:
59:ce:2b:3e:75:b2:73:fc:de:c4:ec:1d:cd:c0:5f:
e0:9d:aa:bb:cf:88:f6:8a:2a:e1:a2:88:47:13:a4:
ce:5a:8d:92:6c:ac:c0:a6:81:9d:7c:05:3a:8f:cf:
3a:79:92:dc:e6:70:91:7e:de:7c:38:68:bd:c6:8b:
a9:16:74:79:8e:a4:e9:f3:7d:a9:7c:40:82:a6:98:
36:86:8b:c3:56:f9:dd:d1:f3:50:63:1a:38:2f:0d:
40:14:52:89:95:6a:c8:c7:80:8e:cb:0b:80:0b:3a:
98:a6:1c:03:22:d9:52:a4:15:a8:68:47:07:e6:a1:
74:51:5f:54:2c:34:5e:c1:e9:cc:ec:5b:dc:9f:77:
df:14:1c:60:41:9f:a9:cd:4d:63:83:97:60:e6:74:
d0:1a:ee:42:ed:62:4a:b8:02:0d:34:73:51:1d:34:
0c:b8:e9:24:0f:fb:9a:cf:de:83:c0:fe:6f:b3:0a:
b0:24:50:86:b0:2a:d6:ed:6b:f8:e6:24:91:54:a3:
d0:cd:33:45:2c:27:b0:50:68:4e:9c:84:12:a2:9b:
47:b5:b3:c5:49:06:6b:71:6e:ad:93:d2:97:7c:a0:
55:cb:22:bd:b2:0e:29:88:d5:6f:c7:e8:95:2b:71:
94:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:CE:B8:28:61:27:0C:AA:64:BC:55:EC:45:BF:4E:27:B6:F3:BE:01
X509v3 Authority Key Identifier:
keyid:64:46:5A:8A:1E:8E:42:F1:A6:0D:27:81:98:C3:20:AE:C0:F3:F7:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZEZaih6OQvGmDSeBmMMgrsDz99w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/338d33-72c6-4802-aefe-70e60edbc1e7/1/6M64KGEnDKpkvFXsRb9OJ7bzvgE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/338d33-72c6-4802-aefe-70e60edbc1e7/1/ZEZaih6OQvGmDSeBmMMgrsDz99w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.162.134.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:53:3f:5f:b1:6c:3f:65:5c:df:eb:2b:4c:48:af:22:95:a3:
a0:e8:67:97:cd:a0:8a:26:ed:d4:c4:d4:58:3f:22:74:58:95:
19:f5:62:22:99:fa:d3:c6:21:02:08:44:d6:81:56:79:69:32:
26:ca:4f:88:f6:bd:a0:97:8c:3f:36:29:6b:1c:a9:b7:57:24:
9d:3d:64:ee:a9:5c:ba:c0:08:f8:c9:c4:d6:ed:eb:61:59:e0:
ec:99:02:80:2a:84:fc:ef:42:29:95:1d:6f:1b:23:0d:12:06:
9b:01:22:c3:f4:c8:a0:78:84:a2:7c:15:a4:7e:b0:5e:5d:36:
17:dc:01:6d:7d:a4:95:b6:d0:53:97:d7:8f:29:a4:5c:3c:1f:
74:72:c6:2f:a9:69:b7:1e:99:4b:aa:ab:08:df:43:bc:11:5b:
6b:d8:a8:e8:31:10:ba:ed:2e:15:2d:fc:8b:b6:2e:f5:ee:84:
f3:a4:d2:21:00:8a:4b:9e:99:0a:02:12:2d:e9:7f:cf:32:c4:
3e:11:0d:97:07:a7:e8:41:af:f1:58:45:e5:f1:93:a5:9e:d9:
65:28:97:9d:ad:54:21:f7:79:5d:68:5c:2d:f0:2d:34:0a:c3:
f1:45:bd:99:89:7a:98:b9:3c:9d:22:1d:f7:58:97:59:d5:47:
2a:d2:02:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 22:19:57 2024 by rpki-client on console-fra.rpki-client.org