Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/amXkEK1i88h2PxVu2xtf_hws2Tc.roa
File: amXkEK1i88h2PxVu2xtf_hws2Tc.roa (raw, json)
Hash identifier: 1WYGGQdx++Iyk5Q5cO0Ftxba06XDJaFR9HsX8mOqvk4=
Subject key identifier: 6A:65:E4:10:AD:62:F3:C8:76:3F:15:6E:DB:1B:5F:FE:1C:2C:D9:37
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01906AFB16A9A42C329E182DE463B7EC3E60
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/amXkEK1i88h2PxVu2xtf_hws2Tc.roa
Signing time: Sun 30 Jun 2024 21:09:18 +0000
ROA not before: Sun 30 Jun 2024 21:09:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.mft
rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 01 Jul 2024 14:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:6a:fb:16:a9:a4:2c:32:9e:18:2d:e4:63:b7:ec:3e:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jun 30 21:09:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6a65e410ad62f3c8763f156edb1b5ffe1c2cd937
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f7:d5:17:a1:28:8c:e6:e8:3f:d1:61:71:d6:
7e:24:05:a1:dd:de:67:e8:c8:82:15:cf:e4:77:f0:
6f:ed:6b:f0:a8:47:9a:d2:ba:f9:ec:f4:09:55:55:
94:6d:d0:1d:be:04:28:18:c0:f1:20:fe:72:f3:3b:
bf:e1:3e:96:78:f4:f2:05:9e:ed:72:47:c9:d8:38:
b9:08:60:37:9b:cd:e8:3d:08:b2:fa:a1:72:07:35:
8d:98:6f:b0:6e:4a:e4:99:44:4c:71:1f:a5:b2:fd:
11:4c:44:ca:e8:9b:95:17:40:1e:ea:b3:33:ac:8a:
0c:a1:03:d6:0a:b8:dd:c2:9c:77:e9:bb:41:9d:08:
db:c6:55:2e:9b:06:ca:ab:36:8f:59:35:11:30:d8:
54:45:e6:6e:95:ad:27:26:e3:8c:d1:d7:79:6f:54:
67:da:ff:c9:6d:27:e5:92:32:86:7c:fa:81:79:1f:
72:4a:95:2e:27:c9:51:10:32:c1:4e:db:70:3d:85:
0f:58:43:a8:48:3c:39:96:ca:eb:32:84:1e:47:2f:
6b:20:58:68:e8:8d:fa:7c:ab:a4:e9:89:da:6a:8c:
ff:ae:e2:2b:01:ac:ef:64:4d:72:b1:99:6d:33:05:
d1:54:8e:23:51:6d:c4:2b:d8:db:dc:cc:cb:ef:fb:
86:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:65:E4:10:AD:62:F3:C8:76:3F:15:6E:DB:1B:5F:FE:1C:2C:D9:37
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/amXkEK1i88h2PxVu2xtf_hws2Tc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
86:72:0d:1e:0e:7f:44:fc:1d:ad:fb:31:90:59:b1:ef:cf:c4:
00:a5:56:af:00:31:90:de:17:de:48:3e:e9:77:46:1a:10:13:
51:69:aa:99:51:77:54:02:e9:c4:ca:eb:4e:4b:bd:53:07:7f:
79:a3:a5:5b:37:fb:3a:3a:63:2e:46:29:30:75:74:8e:92:ed:
76:b0:00:11:66:8e:24:92:3c:5c:a4:90:ce:37:69:04:24:d3:
cc:2e:6e:67:ef:3f:4d:80:a7:a5:18:6e:b0:ac:17:16:14:0c:
f7:6a:f0:b4:ca:03:50:9c:90:29:72:db:01:22:f3:bf:bf:16:
69:9d:ae:6f:47:2e:4e:e7:82:8f:59:42:bf:13:9f:3d:cd:ee:
32:cf:32:ea:59:a1:07:20:51:4e:26:f6:a0:a8:49:c0:ee:af:
49:c4:e5:fc:7e:e4:b6:66:21:7a:da:72:39:5e:df:0b:4c:25:
19:35:da:df:9e:4e:0e:7c:7e:11:49:65:93:c0:cc:5f:13:8c:
7f:b0:fb:2a:4d:b2:3f:c4:f8:2a:ec:dc:eb:a0:50:24:07:aa:
d8:b8:97:e2:be:ca:f1:e2:ae:ee:9f:0c:ff:c9:14:c6:43:64:
45:b7:ae:c2:4b:d8:f2:70:a9:bd:23:3b:23:9b:42:9b:e0:a9:
4f:0c:d8:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 30 23:42:37 2024 by rpki-client on console.sobornost.net