Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/9d4203-2eee-41de-8d85-08bf22f64097/1/P4emc_XwnRT7F5sXtkD9LH3poNQ.roa
File: P4emc_XwnRT7F5sXtkD9LH3poNQ.roa (raw, json)
Hash identifier: uCau8Yw+RZgHfp4IjXKQOeGNnd3wHLwel3cztqmGHR8=
Subject key identifier: 3F:87:A6:73:F5:F0:9D:14:FB:17:9B:17:B6:40:FD:2C:7D:E9:A0:D4
Certificate issuer: /CN=d9f9fa7b944f7e7c60d73ef10b776fc27995a4ed
Certificate serial: 018CCA2A7608BC81B6D9FA2ED297FC59E7FA
Authority key identifier: D9:F9:FA:7B:94:4F:7E:7C:60:D7:3E:F1:0B:77:6F:C2:79:95:A4:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2fn6e5RPfnxg1z7xC3dvwnmVpO0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/9d4203-2eee-41de-8d85-08bf22f64097/1/P4emc_XwnRT7F5sXtkD9LH3poNQ.roa
Signing time: Tue 02 Jan 2024 12:33:49 +0000
ROA not before: Tue 02 Jan 2024 12:33:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201558
IP address blocks: 185.69.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/9d4203-2eee-41de-8d85-08bf22f64097/1/2fn6e5RPfnxg1z7xC3dvwnmVpO0.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/9d4203-2eee-41de-8d85-08bf22f64097/1/2fn6e5RPfnxg1z7xC3dvwnmVpO0.mft
rsync://rpki.ripe.net/repository/DEFAULT/2fn6e5RPfnxg1z7xC3dvwnmVpO0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 18:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:76:08:bc:81:b6:d9:fa:2e:d2:97:fc:59:e7:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f9fa7b944f7e7c60d73ef10b776fc27995a4ed
Validity
Not Before: Jan 2 12:33:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3f87a673f5f09d14fb179b17b640fd2c7de9a0d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:3b:c5:b7:4c:47:5b:4f:d1:3f:94:cf:07:0f:
26:40:51:f6:37:8e:07:86:0e:ab:e1:ce:f0:f7:f0:
3c:e6:54:66:69:cb:65:c9:e9:08:4e:7a:67:09:10:
2f:a8:f4:18:c7:5c:7e:9d:57:9d:2b:c3:3b:19:d6:
c3:08:72:1f:16:c7:80:38:fb:4a:8e:92:ce:e0:ca:
88:3a:fb:6b:95:09:11:8a:17:99:d8:dc:a1:07:12:
1b:5c:40:3a:05:51:3d:34:fa:1b:29:22:bb:b3:02:
9b:7a:65:fe:8f:ef:ea:53:29:f6:ef:ef:1f:a7:35:
3f:d0:50:c4:75:04:6a:13:d5:d5:3d:6d:fb:ff:79:
40:48:21:da:0c:39:4d:98:1b:f9:e3:b6:e8:d1:38:
c8:95:30:aa:8c:1c:f9:2d:4c:c1:74:8f:31:e7:e2:
ec:e6:dd:a5:37:4f:1d:08:5d:79:6a:21:8a:ff:14:
3a:b3:3a:78:60:9d:88:3f:b7:83:6b:83:47:1f:e2:
8e:13:16:94:85:04:fa:b0:2d:c9:12:51:96:86:b4:
2c:50:52:72:b8:48:93:f3:25:7f:8c:9e:e7:5c:e6:
fd:bf:bb:77:0c:0b:86:cb:ee:53:09:87:7d:b5:0d:
17:62:43:b3:28:ce:a5:d0:73:27:47:57:bc:8c:db:
ff:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:87:A6:73:F5:F0:9D:14:FB:17:9B:17:B6:40:FD:2C:7D:E9:A0:D4
X509v3 Authority Key Identifier:
keyid:D9:F9:FA:7B:94:4F:7E:7C:60:D7:3E:F1:0B:77:6F:C2:79:95:A4:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2fn6e5RPfnxg1z7xC3dvwnmVpO0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9d4203-2eee-41de-8d85-08bf22f64097/1/P4emc_XwnRT7F5sXtkD9LH3poNQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9d4203-2eee-41de-8d85-08bf22f64097/1/2fn6e5RPfnxg1z7xC3dvwnmVpO0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.69.187.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:65:53:5c:86:70:f3:4b:b2:c7:63:f8:a6:67:cc:21:f3:6c:
04:77:47:a9:78:a4:a8:ed:8e:4a:87:9d:44:5d:97:c0:96:f5:
66:6e:fd:0f:e7:05:c5:04:f0:10:41:2f:a7:da:f9:1c:c5:29:
41:fc:77:24:e9:d8:2d:fa:26:db:f5:6a:60:ba:66:f6:eb:43:
ef:d0:d3:15:10:f6:f6:9b:9f:6a:d9:1e:e5:f9:c7:f9:6d:64:
d8:56:22:68:76:6f:31:f1:61:05:9f:ab:90:7f:60:f1:29:44:
59:3c:71:f1:80:06:ad:52:fe:62:6b:46:79:83:5d:0b:c3:c2:
11:a8:bd:b6:d3:e9:51:fd:7c:f3:0a:0f:7a:7d:1f:8f:57:7e:
85:f1:0c:46:36:7f:28:0b:16:70:00:b0:cb:8c:4d:41:43:8e:
09:7f:9c:f9:9a:f9:a6:a7:d7:17:55:fa:45:26:ca:1e:1b:1b:
1b:d2:66:07:c8:85:46:98:b4:4d:45:c1:e1:d3:52:4a:b8:b7:
f2:fa:89:f1:cd:c7:f4:32:f0:26:35:43:41:db:fa:17:81:3d:
7b:be:3d:5a:88:cb:cd:0f:4d:f5:d5:86:45:2f:7e:96:da:f2:
9c:e5:a8:04:e3:63:1b:41:fe:0c:2f:9c:52:91:2f:dd:f9:a2:
0e:59:57:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 00:43:13 2024 by rpki-client on console-fra.rpki-client.org