Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/A4vgEsTC24UwBUkT4Za_IzrdB28.roa
File: A4vgEsTC24UwBUkT4Za_IzrdB28.roa (raw, json)
Hash identifier: ns1oAZNIl6i5EKkMBr5VQibnq4qatRlXhjDwsDd1rho=
Subject key identifier: 03:8B:E0:12:C4:C2:DB:85:30:05:49:13:E1:96:BF:23:3A:DD:07:6F
Certificate issuer: /CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Certificate serial: 018E8B964EEC53250402E43ADCD449C1F621
Authority key identifier: D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/A4vgEsTC24UwBUkT4Za_IzrdB28.roa
Signing time: Fri 29 Mar 2024 19:01:07 +0000
ROA not before: Fri 29 Mar 2024 19:01:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61317
IP address blocks: 194.15.97.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 14:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:8b:96:4e:ec:53:25:04:02:e4:3a:dc:d4:49:c1:f6:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Validity
Not Before: Mar 29 19:01:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=038be012c4c2db8530054913e196bf233add076f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:1b:ca:57:4d:cb:20:6d:b1:5a:4d:88:3c:96:
ba:d4:72:ef:51:95:60:a0:37:ce:01:d3:94:f2:37:
27:b6:86:3e:41:b5:2c:3e:3a:bb:de:c8:da:0b:1f:
db:8d:15:10:83:ad:c8:de:c2:c0:6c:62:9f:ad:0d:
58:84:44:03:46:52:6b:70:6f:34:cb:e5:01:d3:fe:
9b:48:27:46:de:fc:0b:b1:9c:38:64:be:52:0b:b1:
06:45:82:ca:ea:e3:a6:5b:68:bc:0b:60:05:58:9d:
54:c0:c7:47:ab:7c:d7:70:56:1e:51:20:8e:c2:8c:
62:51:13:af:f7:99:12:2b:a5:5d:ed:67:6b:bb:1f:
5a:b0:11:dc:45:ab:86:76:64:af:bd:11:e0:84:ee:
29:ba:f0:e3:f2:54:6c:a6:ee:74:85:f0:94:dd:6d:
cd:2c:37:73:8d:c7:4f:51:2c:10:45:20:6b:56:e5:
08:03:77:e6:be:27:e4:a1:05:09:a4:59:61:db:b3:
a3:02:28:4a:b0:d3:9c:fc:1c:04:25:90:bd:99:b9:
ca:9f:b0:21:ad:f5:22:97:83:16:16:4d:53:c9:45:
f4:cf:a1:86:24:c3:ac:72:eb:58:1f:70:e4:86:0a:
64:d6:2b:74:05:16:97:ad:82:5f:ee:da:3d:d9:5d:
43:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:8B:E0:12:C4:C2:DB:85:30:05:49:13:E1:96:BF:23:3A:DD:07:6F
X509v3 Authority Key Identifier:
keyid:D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/A4vgEsTC24UwBUkT4Za_IzrdB28.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.15.97.0/24
Signature Algorithm: sha256WithRSAEncryption
af:d2:1a:55:84:67:62:08:93:5f:ac:e7:d2:e4:ad:63:e8:d5:
10:48:b6:ec:cd:26:54:25:e7:86:c1:53:d0:26:46:b9:b4:53:
f6:4d:10:26:c5:82:61:10:4b:3f:36:08:63:7e:d6:ea:d2:4e:
02:b5:03:33:25:54:30:dc:22:28:b9:61:13:4f:5f:01:82:ab:
38:29:6b:43:31:b4:3d:9c:10:21:90:c2:af:cf:27:e0:4b:50:
44:b4:b8:6c:76:e3:48:fe:ba:aa:00:d4:a7:f5:33:0f:1e:1b:
28:96:2c:a1:af:df:46:ab:b6:0c:4a:16:4d:ab:49:3e:09:d9:
68:4f:e7:09:a0:ed:90:dd:dd:50:5b:b8:11:9f:69:7f:70:2b:
93:bc:d5:12:23:3f:60:56:f6:6c:d7:c1:18:7a:cc:94:7a:87:
b4:ae:3b:b8:3a:a6:5a:82:0c:06:d1:8e:19:79:db:56:96:08:
62:75:4e:3c:5d:fc:90:14:a7:85:3b:ee:41:33:d6:48:0c:32:
be:11:71:9c:cc:aa:c2:f1:a2:96:ba:f3:3c:78:75:71:72:e4:
76:02:65:4c:ef:21:c6:5f:8e:0c:65:63:bf:e0:d2:fe:05:c9:
db:d4:73:42:34:d0:67:7b:c7:36:76:9f:8d:15:88:c3:49:7c:
b1:0d:c0:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 18:16:55 2024 by rpki-client on console-fra.rpki-client.org