Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/2c237a-8bbc-49c3-adea-cc3376ef7300/1/6Ts15geXA-6FMLr0JVaPUJWGCTI.roa
File: 6Ts15geXA-6FMLr0JVaPUJWGCTI.roa (raw, json)
Hash identifier: UFVVAAf8+E5u+71wn/u782Clq1HW0HtD/SFFQumE3y4=
Subject key identifier: E9:3B:35:E6:07:97:03:EE:85:30:BA:F4:25:56:8F:50:95:86:09:32
Certificate issuer: /CN=46cfc41a419a7bbd6d8e8c4ee685595b6a40b9f1
Certificate serial: 018CCA2A768B056877DE1804F15627053C3A
Authority key identifier: 46:CF:C4:1A:41:9A:7B:BD:6D:8E:8C:4E:E6:85:59:5B:6A:40:B9:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rs_EGkGae71tjoxO5oVZW2pAufE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/2c237a-8bbc-49c3-adea-cc3376ef7300/1/6Ts15geXA-6FMLr0JVaPUJWGCTI.roa
Signing time: Tue 02 Jan 2024 12:33:49 +0000
ROA not before: Tue 02 Jan 2024 12:33:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9044
IP address blocks: 82.220.0.0/16 maxlen: 18
185.252.240.0/22 maxlen: 23
212.101.0.0/19 maxlen: 20
212.41.64.0/18 maxlen: 19
194.124.208.0/24 maxlen: 24
2001:1680::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/2c237a-8bbc-49c3-adea-cc3376ef7300/1/Rs_EGkGae71tjoxO5oVZW2pAufE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/2c237a-8bbc-49c3-adea-cc3376ef7300/1/Rs_EGkGae71tjoxO5oVZW2pAufE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rs_EGkGae71tjoxO5oVZW2pAufE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 07:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:76:8b:05:68:77:de:18:04:f1:56:27:05:3c:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46cfc41a419a7bbd6d8e8c4ee685595b6a40b9f1
Validity
Not Before: Jan 2 12:33:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e93b35e6079703ee8530baf425568f5095860932
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:d4:c5:e4:1b:29:8a:7b:95:37:da:79:c4:52:
4c:eb:e7:32:78:3f:17:6b:87:22:4a:e6:26:c8:d2:
ea:05:de:28:52:1c:64:02:4c:25:f9:eb:36:1a:e1:
bd:fc:1e:1f:f7:84:b9:13:14:b0:9a:41:0e:a8:27:
90:5b:2a:6e:26:8d:9e:12:99:16:a1:2f:a3:7a:1c:
a2:5b:5d:15:92:01:62:69:8d:4d:9e:79:59:63:64:
51:9b:8b:5c:77:8a:8b:4d:40:e5:9b:2d:89:05:28:
4f:6d:8c:39:22:e2:6e:a9:0b:9d:bf:f2:6e:66:f4:
a0:66:ea:34:9a:22:0c:99:4f:16:eb:c8:11:79:d8:
7d:2b:ce:06:aa:b8:6d:92:c2:71:68:00:ce:fb:f6:
53:f2:a3:10:ca:67:ab:ba:bf:8e:96:15:da:2a:cc:
43:7f:82:4d:dd:44:d4:25:ee:81:1e:bc:29:da:55:
74:43:ce:dd:c1:2b:90:68:56:ea:1a:28:49:af:52:
fb:14:80:5a:aa:b5:38:4a:5d:72:7e:46:d8:80:16:
04:b3:54:87:ec:f7:e1:97:d6:0f:1d:36:69:0c:32:
87:7a:ff:81:ee:14:46:69:d2:92:5f:24:f4:bd:4c:
e0:fe:6d:45:32:55:a0:69:58:d3:87:cd:3b:d0:ce:
39:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:3B:35:E6:07:97:03:EE:85:30:BA:F4:25:56:8F:50:95:86:09:32
X509v3 Authority Key Identifier:
keyid:46:CF:C4:1A:41:9A:7B:BD:6D:8E:8C:4E:E6:85:59:5B:6A:40:B9:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rs_EGkGae71tjoxO5oVZW2pAufE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/2c237a-8bbc-49c3-adea-cc3376ef7300/1/6Ts15geXA-6FMLr0JVaPUJWGCTI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/2c237a-8bbc-49c3-adea-cc3376ef7300/1/Rs_EGkGae71tjoxO5oVZW2pAufE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.220.0.0/16
185.252.240.0/22
194.124.208.0/24
212.41.64.0/18
212.101.0.0/19
IPv6:
2001:1680::/29
Signature Algorithm: sha256WithRSAEncryption
33:3a:0c:b4:4c:20:ae:d7:6c:5d:30:91:a3:00:65:2c:1f:f6:
74:7a:6d:21:d0:0b:81:99:ba:09:7e:c0:00:e4:db:0d:df:c4:
47:d6:b6:58:74:ff:9a:39:e7:09:b1:d5:f0:12:ca:0c:f1:67:
f9:79:3b:fe:09:24:61:85:51:44:b1:1b:48:34:c2:eb:2e:2c:
6a:f3:cc:68:bd:36:81:38:19:7c:ee:f3:f6:c3:7f:80:18:e9:
96:8c:00:25:91:0e:9b:0d:f1:1a:a5:11:63:63:bb:03:20:bc:
05:63:c9:5a:4b:6b:76:06:f5:2c:65:27:cc:b2:3b:9f:17:f3:
83:d7:96:82:c9:b7:30:b8:14:01:2e:fe:75:a7:d7:5d:85:80:
ca:8f:fc:93:02:58:42:46:f2:1f:1e:69:43:27:87:6d:cd:ed:
07:5f:43:1d:c9:87:0d:7b:70:eb:7a:50:49:dc:c1:54:d5:37:
a9:09:75:a3:dc:1a:fd:0d:82:86:2d:82:cc:d8:43:5f:54:d6:
32:ca:60:d6:4c:af:ee:d9:f2:67:4a:d9:42:1f:5d:9b:8d:01:
00:65:2c:ef:42:39:1a:8a:36:99:0f:9b:db:de:6a:9a:e6:9b:
db:81:77:6d:bb:b9:e6:b0:ec:46:e0:47:fe:e5:7a:94:54:bd:
e6:23:85:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 14:08:30 2024 by rpki-client on console-ams.rpki-client.org