Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/adad20-c512-4fb0-a127-48cf412b387b/1/43BVPBx9zD5h-Q0DK1OZ6p8WmvE.roa
File: 43BVPBx9zD5h-Q0DK1OZ6p8WmvE.roa (raw, json)
Hash identifier: n3wEzRzA1zzxnrrNmRLcBly13TE2V7iVGBqIngv160A=
Subject key identifier: E3:70:55:3C:1C:7D:CC:3E:61:F9:0D:03:2B:53:99:EA:9F:16:9A:F1
Certificate issuer: /CN=4ee843a85dd664e9dc0310892bd7dd9ce52591c7
Certificate serial: 018CC500E6AF0DA2106DD4D6FE41EA09F2A8
Authority key identifier: 4E:E8:43:A8:5D:D6:64:E9:DC:03:10:89:2B:D7:DD:9C:E5:25:91:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TuhDqF3WZOncAxCJK9fdnOUlkcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/adad20-c512-4fb0-a127-48cf412b387b/1/43BVPBx9zD5h-Q0DK1OZ6p8WmvE.roa
Signing time: Mon 01 Jan 2024 12:30:19 +0000
ROA not before: Mon 01 Jan 2024 12:30:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 400790
IP address blocks: 206.245.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/adad20-c512-4fb0-a127-48cf412b387b/1/TuhDqF3WZOncAxCJK9fdnOUlkcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/adad20-c512-4fb0-a127-48cf412b387b/1/TuhDqF3WZOncAxCJK9fdnOUlkcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/TuhDqF3WZOncAxCJK9fdnOUlkcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Jun 2024 09:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:e6:af:0d:a2:10:6d:d4:d6:fe:41:ea:09:f2:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ee843a85dd664e9dc0310892bd7dd9ce52591c7
Validity
Not Before: Jan 1 12:30:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e370553c1c7dcc3e61f90d032b5399ea9f169af1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ea:04:6e:eb:a2:57:e4:6d:c0:77:5d:9f:89:
80:9f:2b:f8:01:f7:aa:af:b1:f3:94:ec:cb:d6:83:
f5:b7:f3:86:d4:48:bd:88:02:c8:8d:b1:78:ad:d8:
73:a9:d1:1e:22:f5:3c:43:96:e9:b2:95:a3:1c:c9:
55:3c:02:c1:37:e9:3e:2d:bb:ce:8f:37:e9:6b:d4:
2b:0f:0c:10:8b:e0:0a:0b:14:85:90:db:0e:32:61:
f1:01:a5:b8:9b:5c:54:dd:fb:d7:fa:b3:fe:a2:57:
3f:91:32:ee:f5:c2:76:81:24:d2:f6:4e:28:68:71:
b9:49:d0:42:71:96:97:de:97:fa:a0:31:2d:4b:5f:
36:04:f6:c2:c1:fa:0c:83:3e:b9:62:69:dd:20:16:
49:66:ad:71:62:c2:b8:8d:be:ee:42:88:c2:68:80:
b6:4c:6e:5f:e8:90:71:1b:42:76:c3:7b:65:96:fc:
2f:c5:41:76:d2:7f:bc:79:16:73:81:b9:94:95:1e:
b2:98:24:93:c2:59:a3:b1:5c:d0:80:eb:33:dc:3c:
a4:98:b1:bf:29:53:6c:5f:03:a5:36:0a:a8:f0:d0:
b7:58:7c:34:c9:1c:40:52:4e:c8:76:88:72:04:43:
4f:bc:fd:bb:ec:3d:88:f5:02:be:bb:c3:f5:e9:5d:
42:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:70:55:3C:1C:7D:CC:3E:61:F9:0D:03:2B:53:99:EA:9F:16:9A:F1
X509v3 Authority Key Identifier:
keyid:4E:E8:43:A8:5D:D6:64:E9:DC:03:10:89:2B:D7:DD:9C:E5:25:91:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TuhDqF3WZOncAxCJK9fdnOUlkcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/adad20-c512-4fb0-a127-48cf412b387b/1/43BVPBx9zD5h-Q0DK1OZ6p8WmvE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/adad20-c512-4fb0-a127-48cf412b387b/1/TuhDqF3WZOncAxCJK9fdnOUlkcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
206.245.208.0/24
Signature Algorithm: sha256WithRSAEncryption
07:6f:7e:67:d8:00:8b:b0:af:82:d8:37:76:33:c2:ae:ab:f9:
dd:e0:46:1c:20:2f:ea:f1:4f:9a:30:4a:9a:a4:0b:e5:98:32:
9a:76:9e:d5:38:38:d6:18:95:49:2e:07:e2:24:7b:f4:2c:b9:
de:e3:f3:83:1f:d7:65:15:04:c1:c2:57:0f:92:a0:b4:10:40:
1e:b2:ff:9f:17:16:ee:97:24:14:17:40:ea:07:63:14:f8:44:
07:1a:22:09:5c:6b:5b:4f:d7:e1:dd:d0:80:e7:c9:67:82:08:
19:1e:c8:76:2c:2d:3a:67:38:a4:63:8a:1e:f1:d6:c5:6c:0c:
0d:cf:cf:b8:e1:ae:04:36:8a:e1:17:43:4d:b4:51:b2:88:56:
0a:f6:3d:4d:04:03:88:d2:54:23:32:35:1a:e8:39:7e:7b:ac:
27:26:b1:01:66:ba:a7:9e:3e:d9:52:49:2d:f8:cb:a1:a2:d7:
99:97:cc:8c:1d:10:54:88:00:37:de:7c:f0:7e:02:4a:7d:52:
9d:37:de:37:b1:f2:fb:5c:a0:40:8d:9d:4a:52:00:06:84:84:
17:c7:9e:81:48:c3:96:4e:60:b6:7e:33:8f:dc:02:30:ba:33:
64:ce:f0:64:37:36:41:1f:ec:97:50:a3:3a:b0:81:a5:42:53:
ab:6e:05:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 16:57:26 2024 by rpki-client on console-fra.rpki-client.org