Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/6aa017-2fe8-4cd8-8a7d-3a8a61006a4f/1/maxfnIrv5kMwjDOhma71tlr06s4.roa
File: maxfnIrv5kMwjDOhma71tlr06s4.roa (raw, json)
Hash identifier: 96cOXCNPzyxHyTPC+7UqYSvLvosT3o61JBuwzLyd2vE=
Subject key identifier: 99:AC:5F:9C:8A:EF:E6:43:30:8C:33:A1:99:AE:F5:B6:5A:F4:EA:CE
Certificate issuer: /CN=68d1ef163a661cce5bc62117ec763758b1b5bb89
Certificate serial: 018CC50007D517014673475A444C8CB27BD3
Authority key identifier: 68:D1:EF:16:3A:66:1C:CE:5B:C6:21:17:EC:76:37:58:B1:B5:BB:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aNHvFjpmHM5bxiEX7HY3WLG1u4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/6aa017-2fe8-4cd8-8a7d-3a8a61006a4f/1/maxfnIrv5kMwjDOhma71tlr06s4.roa
Signing time: Mon 01 Jan 2024 12:29:22 +0000
ROA not before: Mon 01 Jan 2024 12:29:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212947
IP address blocks: 206.204.107.0/24 maxlen: 24
206.204.106.0/24 maxlen: 24
93.157.187.0/24 maxlen: 24
206.204.104.0/24 maxlen: 24
206.204.105.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/6aa017-2fe8-4cd8-8a7d-3a8a61006a4f/1/aNHvFjpmHM5bxiEX7HY3WLG1u4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/6aa017-2fe8-4cd8-8a7d-3a8a61006a4f/1/aNHvFjpmHM5bxiEX7HY3WLG1u4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/aNHvFjpmHM5bxiEX7HY3WLG1u4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 18:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:07:d5:17:01:46:73:47:5a:44:4c:8c:b2:7b:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68d1ef163a661cce5bc62117ec763758b1b5bb89
Validity
Not Before: Jan 1 12:29:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=99ac5f9c8aefe643308c33a199aef5b65af4eace
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:46:a7:95:16:7f:d6:ee:1f:b3:58:de:46:47:
a9:8e:98:98:ba:f1:2f:ad:ed:aa:18:23:a7:ad:c2:
61:46:0c:09:6c:c3:a6:fa:0b:95:0f:9c:dd:25:f0:
e8:b1:ae:45:57:22:25:b3:24:93:72:0d:c0:aa:49:
64:6a:27:37:87:1d:02:4a:81:8a:1c:6e:1f:04:f3:
50:1d:22:2d:ce:d7:41:81:b5:82:d6:84:2d:da:f8:
7a:27:fa:40:fc:21:b7:5d:43:c2:b7:06:aa:06:7c:
fe:b1:3a:6c:fe:3e:74:5f:18:a6:5c:b0:a4:61:b1:
8c:01:94:3c:e0:46:a6:1d:12:1b:bd:58:73:60:40:
ba:17:61:78:b8:9a:bf:60:a7:c9:70:b3:f6:dd:0e:
0b:91:d1:2d:30:e2:5c:6d:7b:dd:19:9f:42:a5:07:
dd:32:b2:b9:f0:a5:8f:53:83:8f:fd:74:07:b9:af:
ca:1d:6a:cd:f3:73:50:74:b7:a5:5d:96:d4:b6:fb:
4d:6e:b8:4d:1e:db:59:cb:5b:a2:94:08:3c:84:95:
8b:88:10:3b:c9:45:81:ae:29:a8:23:cb:50:53:c5:
7b:d0:f3:db:b0:cf:c5:8c:ef:d8:2d:ae:ae:3f:79:
66:54:64:8b:7b:16:7a:28:85:94:59:fe:b5:3e:00:
11:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:AC:5F:9C:8A:EF:E6:43:30:8C:33:A1:99:AE:F5:B6:5A:F4:EA:CE
X509v3 Authority Key Identifier:
keyid:68:D1:EF:16:3A:66:1C:CE:5B:C6:21:17:EC:76:37:58:B1:B5:BB:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aNHvFjpmHM5bxiEX7HY3WLG1u4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/6aa017-2fe8-4cd8-8a7d-3a8a61006a4f/1/maxfnIrv5kMwjDOhma71tlr06s4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/6aa017-2fe8-4cd8-8a7d-3a8a61006a4f/1/aNHvFjpmHM5bxiEX7HY3WLG1u4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.157.187.0/24
206.204.104.0/22
Signature Algorithm: sha256WithRSAEncryption
5c:1d:04:62:ad:ad:5a:9d:61:05:a9:58:c0:71:58:32:7f:0a:
96:bc:85:7e:39:78:2c:4c:b8:15:a7:7e:65:6b:28:92:35:d0:
67:85:b6:ab:a8:61:36:1c:29:41:a7:52:e0:8a:fb:8e:95:d4:
b1:98:d2:17:12:96:d8:e5:b2:f2:99:26:9f:7e:4b:3d:ee:34:
a6:52:b5:fa:ae:dd:b8:3f:d1:5e:99:ed:5c:b0:ab:48:d9:5b:
e5:e1:d4:35:ea:3f:34:80:98:81:c1:cf:4a:a1:98:62:c5:ad:
0d:bd:2c:c2:27:07:24:a9:27:0e:3c:bb:d3:47:8d:85:3f:37:
a3:b9:1f:fe:32:36:92:93:23:bb:7d:7e:cf:8b:29:34:68:b2:
41:78:65:5a:16:3f:9b:ef:db:45:a1:32:58:5f:7b:64:f9:71:
c9:03:3e:ac:19:25:b9:21:7e:db:e9:69:53:8c:db:25:53:c5:
fc:59:d0:2c:da:94:2b:f2:42:ce:e9:85:4e:ff:ac:6f:bb:24:
76:83:66:3f:3a:e6:50:24:02:08:fc:89:7c:17:be:a6:01:f0:
5c:b7:4a:42:21:c0:5f:b0:0e:fc:bc:fd:95:ba:0d:d6:d7:00:
fc:c9:8f:d9:ab:f9:d0:f9:e6:25:b9:9e:ed:c3:9a:f6:ef:8f:
4f:e6:2c:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 01:40:56 2024 by rpki-client on console-fra.rpki-client.org