Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/K6YhMZnSs27VV5lESl6YYfuwzgQ.roa
File: K6YhMZnSs27VV5lESl6YYfuwzgQ.roa (raw, json)
Hash identifier: VRkXOnsOV3TLwgmpv72XdWuWvhqKsvrx2TFjTdEkQbQ=
Subject key identifier: 2B:A6:21:31:99:D2:B3:6E:D5:57:99:44:4A:5E:98:61:FB:B0:CE:04
Certificate issuer: /CN=722a8c1d311895016108ffbd14575c77cc28773a
Certificate serial: 018CC56EF5CC021569D16EC9A2D24ADF14A8
Authority key identifier: 72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/K6YhMZnSs27VV5lESl6YYfuwzgQ.roa
Signing time: Mon 01 Jan 2024 14:30:32 +0000
ROA not before: Mon 01 Jan 2024 14:30:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200024
IP address blocks: 87.246.25.0/24 maxlen: 24
87.246.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 May 2024 02:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:f5:cc:02:15:69:d1:6e:c9:a2:d2:4a:df:14:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=722a8c1d311895016108ffbd14575c77cc28773a
Validity
Not Before: Jan 1 14:30:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2ba6213199d2b36ed55799444a5e9861fbb0ce04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:29:c2:5d:ed:de:5d:c8:ac:62:16:54:77:0b:
5a:a6:e6:25:0e:70:53:50:98:85:e1:9e:39:ff:de:
50:38:5a:61:f0:75:98:1d:e5:0e:d7:72:f7:21:49:
01:e8:ba:3e:5f:6c:0e:6d:7a:c2:fe:11:11:ae:9c:
ad:17:0d:c0:0c:74:32:46:c0:d2:47:2e:a8:ec:a1:
3e:ae:b5:95:55:39:27:f8:cd:ec:10:24:23:cd:8b:
2c:ff:ae:f7:15:04:24:47:fd:63:60:d2:34:c9:e7:
d9:fc:f5:d3:41:93:76:b6:3e:6f:8a:8f:83:60:e7:
25:4a:11:40:39:dc:8b:a6:55:d1:0f:fb:08:b2:58:
44:73:e8:67:43:c0:6a:36:ec:48:fe:7a:51:db:37:
5f:04:5a:fc:9f:02:ca:83:ba:35:5b:da:00:ff:36:
f0:b6:9d:8b:36:70:46:85:fd:4e:02:a4:14:49:c1:
1c:0a:bf:f9:cd:d7:79:52:63:6e:ef:47:b5:7f:66:
ae:f0:e7:56:4b:bf:8b:b6:ca:86:38:8b:46:d7:ce:
31:ce:bf:25:8a:ce:93:3f:38:42:f3:b8:52:d7:69:
a7:82:60:4f:09:9f:02:3a:b3:0f:8e:ee:62:04:a7:
0c:e4:02:cf:4f:87:5b:9b:a7:7b:ad:45:d1:9f:f0:
b6:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:A6:21:31:99:D2:B3:6E:D5:57:99:44:4A:5E:98:61:FB:B0:CE:04
X509v3 Authority Key Identifier:
keyid:72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/K6YhMZnSs27VV5lESl6YYfuwzgQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.246.25.0-87.246.26.255
Signature Algorithm: sha256WithRSAEncryption
42:48:8d:c4:d6:05:21:ff:2d:cb:3d:2e:35:45:47:f1:e2:31:
29:04:16:df:85:69:e2:a0:0c:ec:b2:ee:a2:58:80:27:15:f6:
66:b9:8f:76:ae:a6:f8:3b:a1:e1:41:fd:cf:7c:d9:f4:65:f2:
78:4c:3f:f6:f2:44:93:ff:6b:3a:8d:36:86:79:3b:88:55:10:
6c:87:50:c5:9f:d2:0d:24:f8:6b:86:f1:5d:f9:8f:a0:05:63:
cb:dc:d3:29:c1:80:41:fc:f9:46:ff:a0:3c:6b:07:2d:ab:d2:
8b:d3:55:16:3d:e9:0d:25:66:ad:da:10:41:2e:bb:2e:a8:81:
11:ae:fd:4f:1e:f1:dc:32:a0:c1:ee:3a:f5:99:4f:0d:53:31:
b1:0d:1a:a6:d6:7c:09:5a:b2:df:97:3d:b4:18:16:45:de:5f:
52:b1:25:45:04:1a:bd:9b:64:47:8c:33:99:75:1f:6b:99:1d:
10:aa:40:cf:6f:44:fd:89:61:f9:ca:cf:d3:f1:d7:f1:ad:14:
6e:4d:d5:92:34:dc:45:79:bf:8e:5f:7b:2f:62:21:7f:c4:66:
60:25:cd:05:ff:f1:4f:0f:af:03:99:df:67:51:01:95:bb:cd:
66:74:b9:ed:9e:03:94:76:d1:6e:44:e3:84:e6:fe:7f:d1:53:
1e:f8:05:d9
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAYzFbvXMAhVp0W7JotJK3xSoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMmE4YzFkMzExODk1MDE2MTA4ZmZiZDE0NTc1Yzc3Y2My
ODc3M2EwHhcNMjQwMTAxMTQzMDMyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYmE2MjEzMTk5ZDJiMzZlZDU1Nzk5NDQ0YTVlOTg2MWZiYjBjZTA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApSnCXe3eXcisYhZUdwtapuYlDnBT
UJiF4Z45/95QOFph8HWYHeUO13L3IUkB6Lo+X2wObXrC/hERrpytFw3ADHQyRsDS
Ry6o7KE+rrWVVTkn+M3sECQjzYss/673FQQkR/1jYNI0yefZ/PXTQZN2tj5vio+D
YOclShFAOdyLplXRD/sIslhEc+hnQ8BqNuxI/npR2zdfBFr8nwLKg7o1W9oA/zbw
tp2LNnBGhf1OAqQUScEcCr/5zdd5UmNu70e1f2au8OdWS7+LtsqGOItG184xzr8l
is6TPzhC87hS12mngmBPCZ8COrMPju5iBKcM5ALPT4dbm6d7rUXRn/C20wIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFCumITGZ0rNu1VeZREpemGH7sM4EMB8GA1UdIwQY
MBaAFHIqjB0xGJUBYQj/vRRXXHfMKHc6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2lxTUhURVlsUUZoQ1AtOUZGZGNkOHdvZHpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9iMWY2ZWUtYzRlZi00MzU1LWFmMzYt
YTU1OGVlNjU0MzFmLzEvSzZZaE1ablNzMjdWVjVsRVNsNllZZnV3emdRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC9iMWY2ZWUtYzRlZi00MzU1LWFmMzYtYTU1OGVlNjU0MzFm
LzEvY2lxTUhURVlsUUZoQ1AtOUZGZGNkOHdvZHpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBABX9hkD
BABX9howDQYJKoZIhvcNAQELBQADggEBAEJIjcTWBSH/Lcs9LjVFR/HiMSkEFt+F
aeKgDOyy7qJYgCcV9ma5j3aupvg7oeFB/c982fRl8nhMP/byRJP/azqNNoZ5O4hV
EGyHUMWf0g0k+GuG8V35j6AFY8vc0ynBgEH8+Ub/oDxrBy2r0ovTVRY96Q0lZq3a
EEEuuy6ogRGu/U8e8dwyoMHuOvWZTw1TMbENGqbWfAlast+XPbQYFkXeX1KxJUUE
Gr2bZEeMM5l1H2uZHRCqQM9vRP2JYfnKz9Px1/GtFG5N1ZI03EV5v45fey9iIX/E
ZmAlzQX/8U8PrwOZ32dRAZW7zWZ0ue2eA5R20W5E44Tm/n/RUx74Bdk=
-----END CERTIFICATE-----
Generated at Tue Apr 30 11:55:25 2024 by rpki-client on console-fra.rpki-client.org