Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/2a4ee3-d76d-48be-add6-78f992475e1f/1/biCT2cV6pqlkVt8Gv9-UOPYWDA8.roa
File: biCT2cV6pqlkVt8Gv9-UOPYWDA8.roa (raw, json)
Hash identifier: 3ZxtVaJcXNo/d+A+d0bhxm1arbcRKq4mOejDYJ8Hjc0=
Subject key identifier: 6E:20:93:D9:C5:7A:A6:A9:64:56:DF:06:BF:DF:94:38:F6:16:0C:0F
Certificate issuer: /CN=d33a620b2acc8fc30b8c4d518f9297e3f7c9a60a
Certificate serial: 018CC79505F3E8A0B3DD0A2220907FA79E6B
Authority key identifier: D3:3A:62:0B:2A:CC:8F:C3:0B:8C:4D:51:8F:92:97:E3:F7:C9:A6:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0zpiCyrMj8MLjE1Rj5KX4_fJpgo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/2a4ee3-d76d-48be-add6-78f992475e1f/1/biCT2cV6pqlkVt8Gv9-UOPYWDA8.roa
Signing time: Tue 02 Jan 2024 00:31:21 +0000
ROA not before: Tue 02 Jan 2024 00:31:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198061
IP address blocks: 194.0.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/2a4ee3-d76d-48be-add6-78f992475e1f/1/0zpiCyrMj8MLjE1Rj5KX4_fJpgo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/2a4ee3-d76d-48be-add6-78f992475e1f/1/0zpiCyrMj8MLjE1Rj5KX4_fJpgo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0zpiCyrMj8MLjE1Rj5KX4_fJpgo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 15:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:05:f3:e8:a0:b3:dd:0a:22:20:90:7f:a7:9e:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d33a620b2acc8fc30b8c4d518f9297e3f7c9a60a
Validity
Not Before: Jan 2 00:31:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6e2093d9c57aa6a96456df06bfdf9438f6160c0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b8:46:cb:76:50:9b:bf:ee:cc:4e:d1:1f:4d:
2b:b4:02:0d:53:7e:6d:28:cd:cd:62:6f:ef:60:89:
fe:eb:54:11:2d:d8:26:a6:91:ba:ec:96:48:e5:64:
c7:26:a4:33:08:0e:3a:b0:8f:d5:71:4b:17:e5:5e:
c4:17:a3:4b:67:be:00:c0:8d:dd:d0:8c:53:aa:15:
2a:9b:3b:f2:75:54:b0:6c:7f:9a:11:12:1c:68:d5:
5c:fd:8a:70:61:91:4c:96:80:fb:75:ad:c0:8c:c0:
33:b0:69:e9:ee:54:3a:2a:ae:cb:69:24:53:50:51:
ff:32:ec:ce:35:58:97:07:d0:7f:0c:a6:40:b9:01:
01:34:4e:75:e1:a6:d7:76:eb:90:bb:3b:7d:9f:68:
4f:51:ac:68:8c:fb:28:dc:2e:8e:1c:7e:ab:77:e4:
a8:9a:c4:1d:dd:d4:e3:ad:6a:46:56:11:af:56:92:
1f:5f:16:2a:2e:26:81:a9:a0:40:60:d2:af:0d:d9:
24:13:15:22:c4:49:6f:38:21:d5:cb:c4:1f:e7:7a:
78:76:44:01:56:9a:14:ad:80:a6:bb:4f:4b:5b:03:
69:3c:f1:d8:16:4d:80:0c:75:6b:ae:ed:fa:9a:d3:
fa:3d:1f:30:ba:c2:74:6d:3a:2e:b4:01:9d:24:7f:
49:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:20:93:D9:C5:7A:A6:A9:64:56:DF:06:BF:DF:94:38:F6:16:0C:0F
X509v3 Authority Key Identifier:
keyid:D3:3A:62:0B:2A:CC:8F:C3:0B:8C:4D:51:8F:92:97:E3:F7:C9:A6:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0zpiCyrMj8MLjE1Rj5KX4_fJpgo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/2a4ee3-d76d-48be-add6-78f992475e1f/1/biCT2cV6pqlkVt8Gv9-UOPYWDA8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/2a4ee3-d76d-48be-add6-78f992475e1f/1/0zpiCyrMj8MLjE1Rj5KX4_fJpgo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.0.191.0/24
Signature Algorithm: sha256WithRSAEncryption
12:48:7d:e5:02:55:28:ad:d2:e4:79:73:4c:1b:1f:b4:47:77:
73:b8:da:d9:67:f3:87:cc:fd:55:fc:2c:e1:34:a1:1d:ca:9f:
26:2d:ab:df:dd:e1:2a:65:ed:b2:18:33:cf:47:47:23:ce:8f:
6d:d6:b8:40:66:6c:24:5a:bc:ba:bb:3a:fa:a0:1e:bc:d9:b5:
85:ae:19:6e:15:d9:00:2a:e1:75:bf:22:0f:44:1a:45:8e:0e:
5e:de:2b:2f:ce:b7:f9:fd:03:5b:8d:4d:e6:a5:29:48:b0:0d:
dc:3c:1e:c8:3b:de:f2:25:23:3e:e4:f8:f0:6f:84:07:6b:1c:
e1:3c:ac:39:e6:24:29:ae:62:95:b6:78:df:a8:cd:78:57:70:
13:7e:d7:9d:c0:3b:50:26:b0:31:e0:d5:b3:52:da:43:51:65:
cc:14:04:20:e4:3a:0c:5b:50:4f:d8:5b:ed:db:eb:1e:47:87:
fa:13:26:42:aa:9b:c1:ba:14:e8:c2:3e:97:a1:0a:bb:8e:34:
cb:b4:60:8f:d7:d6:2c:86:a6:5f:5a:81:a2:84:6e:f8:d3:0f:
d1:f2:92:75:9c:1d:e0:d9:58:98:7e:17:6b:4e:18:2e:1e:bb:
1e:9f:85:e9:51:03:80:6f:bd:e1:c5:ad:cb:ad:60:61:29:ba:
6b:22:57:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 19:07:41 2024 by rpki-client on console-fra.rpki-client.org