Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/cb1bc5-2c15-42f7-9ef2-5c99b683db0d/1/pvIyeq5mgNft3E5suLW6NBmSsNA.roa
File: pvIyeq5mgNft3E5suLW6NBmSsNA.roa (raw, json)
Hash identifier: K3LJxZ+lcaZn7Yd/gkdGT7ReT6cF6Argo5cuZnUNvmQ=
Subject key identifier: A6:F2:32:7A:AE:66:80:D7:ED:DC:4E:6C:B8:B5:BA:34:19:92:B0:D0
Certificate issuer: /CN=6c844bd62cbfb5adccfb4dc16eca23cb5c9ddeb6
Certificate serial: 018CC86F111CEB6492EFBCD56701190A8272
Authority key identifier: 6C:84:4B:D6:2C:BF:B5:AD:CC:FB:4D:C1:6E:CA:23:CB:5C:9D:DE:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bIRL1iy_ta3M-03Bbsojy1yd3rY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/cb1bc5-2c15-42f7-9ef2-5c99b683db0d/1/pvIyeq5mgNft3E5suLW6NBmSsNA.roa
Signing time: Tue 02 Jan 2024 04:29:31 +0000
ROA not before: Tue 02 Jan 2024 04:29:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47523
IP address blocks: 93.174.251.0/24 maxlen: 24
93.174.248.0/24 maxlen: 24
93.174.249.0/24 maxlen: 24
93.174.252.0/24 maxlen: 24
93.174.250.0/24 maxlen: 24
93.174.253.0/24 maxlen: 24
93.174.254.0/24 maxlen: 24
93.174.255.0/24 maxlen: 24
2a03:8ac0:255::/48 maxlen: 48
2a03:8ac0:248::/48 maxlen: 48
2a03:8ac0:250::/48 maxlen: 48
2a03:8ac0:254::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/cb1bc5-2c15-42f7-9ef2-5c99b683db0d/1/bIRL1iy_ta3M-03Bbsojy1yd3rY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/cb1bc5-2c15-42f7-9ef2-5c99b683db0d/1/bIRL1iy_ta3M-03Bbsojy1yd3rY.mft
rsync://rpki.ripe.net/repository/DEFAULT/bIRL1iy_ta3M-03Bbsojy1yd3rY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 15:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:11:1c:eb:64:92:ef:bc:d5:67:01:19:0a:82:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c844bd62cbfb5adccfb4dc16eca23cb5c9ddeb6
Validity
Not Before: Jan 2 04:29:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a6f2327aae6680d7eddc4e6cb8b5ba341992b0d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:74:ed:82:d9:3f:35:fd:83:cc:64:31:24:73:
46:98:1d:32:3b:af:c7:bd:08:b2:5d:c1:c6:e7:0d:
f7:dd:a4:29:6f:25:0c:2e:9c:a8:2f:b7:98:21:f6:
16:07:ea:b0:e6:83:f2:e6:88:b6:51:78:2f:24:66:
d1:88:b2:31:14:ee:c1:20:11:4d:2a:9b:5c:5d:19:
e4:6b:9f:de:0e:14:33:83:83:06:c3:73:a2:ac:20:
4e:f9:76:91:fe:06:a5:96:5e:07:83:13:e2:31:d0:
a4:87:b3:0b:03:26:c3:b1:43:25:25:d0:17:e1:a9:
27:00:ad:97:cc:75:f9:18:f3:38:22:74:ab:56:0b:
93:7a:b9:fa:70:da:ad:39:ac:32:5f:f0:58:be:b4:
d7:e6:06:41:31:c4:52:33:ba:87:a1:98:c0:e5:72:
6c:bc:52:d5:87:6a:7e:d0:4e:1d:77:5c:6a:2d:35:
de:7e:48:09:ce:2d:dc:02:ec:3c:68:f4:9b:77:c7:
b0:0e:09:73:07:f1:1a:50:5d:6a:39:ee:cf:bf:65:
d2:e1:47:91:4b:04:0c:4e:ba:49:d2:5a:ad:05:44:
87:0f:52:e4:be:d0:2b:3b:4d:f6:ce:df:51:a1:34:
0c:9b:93:ad:75:41:b9:a7:b8:ea:25:d3:3f:0b:9b:
1a:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:F2:32:7A:AE:66:80:D7:ED:DC:4E:6C:B8:B5:BA:34:19:92:B0:D0
X509v3 Authority Key Identifier:
keyid:6C:84:4B:D6:2C:BF:B5:AD:CC:FB:4D:C1:6E:CA:23:CB:5C:9D:DE:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bIRL1iy_ta3M-03Bbsojy1yd3rY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/cb1bc5-2c15-42f7-9ef2-5c99b683db0d/1/pvIyeq5mgNft3E5suLW6NBmSsNA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/cb1bc5-2c15-42f7-9ef2-5c99b683db0d/1/bIRL1iy_ta3M-03Bbsojy1yd3rY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.174.248.0/21
IPv6:
2a03:8ac0:248::/48
2a03:8ac0:250::/48
2a03:8ac0:254::/47
Signature Algorithm: sha256WithRSAEncryption
70:a7:f1:7f:39:f0:6c:ff:55:06:19:44:4c:61:70:74:2b:ce:
6e:68:3a:7b:5f:a7:42:fe:a9:e6:6e:67:f8:16:eb:77:17:f5:
3d:6f:76:92:05:d5:65:f2:d0:8e:63:4d:07:33:b1:6e:57:00:
78:2e:e6:c7:aa:b5:05:62:b5:7a:ff:85:3d:35:7f:40:85:0a:
27:17:70:af:45:ff:55:18:6d:d9:22:31:e2:f0:2f:63:81:c3:
e6:aa:24:c8:66:03:e3:bd:a1:28:0c:fe:00:d5:e5:34:e5:26:
f3:08:c8:54:19:da:15:53:66:30:48:0d:7f:45:84:59:0b:9e:
ae:fc:18:d4:61:75:7a:c2:46:94:26:74:39:c9:1b:d9:a5:de:
27:78:c4:74:c4:59:5e:9e:80:d4:12:f9:de:c1:4a:cf:1a:c7:
95:e8:c2:36:60:cd:cc:fb:a0:b4:bb:3d:f5:5e:ff:e5:3e:29:
5a:db:66:9a:cb:cc:6d:72:fe:c0:bf:ad:77:bc:28:2a:b9:6d:
ab:b4:c5:b9:14:78:59:a2:9f:8c:8a:d9:15:df:3a:5a:8d:d6:
67:ae:b8:e3:8b:19:75:1f:cd:4f:4d:a3:b3:70:a0:b5:d2:9e:
07:5d:21:3a:58:d7:55:e6:05:60:ff:8d:a1:36:a1:6a:12:dd:
fa:a9:2c:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 20:57:12 2024 by rpki-client on console-ams.rpki-client.org