Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/cca6c4-ec70-4405-a6a8-6eaa59b0d750/1/sr2N48hw6ZahiCftA5KH3n5HLBY.roa
File: sr2N48hw6ZahiCftA5KH3n5HLBY.roa (raw, json)
Hash identifier: CfSi4bk2Bu3Wju90J0Bbjnv0pClkHYgTLG+6qTijlP8=
Subject key identifier: B2:BD:8D:E3:C8:70:E9:96:A1:88:27:ED:03:92:87:DE:7E:47:2C:16
Certificate issuer: /CN=e8464c8c167dd2c87aa3d88acbfae4c233ff77b0
Certificate serial: 018CC4935CB72D5C3753136F34F4AD264DB7
Authority key identifier: E8:46:4C:8C:16:7D:D2:C8:7A:A3:D8:8A:CB:FA:E4:C2:33:FF:77:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6EZMjBZ90sh6o9iKy_rkwjP_d7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/cca6c4-ec70-4405-a6a8-6eaa59b0d750/1/sr2N48hw6ZahiCftA5KH3n5HLBY.roa
Signing time: Mon 01 Jan 2024 10:30:40 +0000
ROA not before: Mon 01 Jan 2024 10:30:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43623
IP address blocks: 194.55.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/cca6c4-ec70-4405-a6a8-6eaa59b0d750/1/6EZMjBZ90sh6o9iKy_rkwjP_d7A.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/cca6c4-ec70-4405-a6a8-6eaa59b0d750/1/6EZMjBZ90sh6o9iKy_rkwjP_d7A.mft
rsync://rpki.ripe.net/repository/DEFAULT/6EZMjBZ90sh6o9iKy_rkwjP_d7A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 16:03:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:5c:b7:2d:5c:37:53:13:6f:34:f4:ad:26:4d:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8464c8c167dd2c87aa3d88acbfae4c233ff77b0
Validity
Not Before: Jan 1 10:30:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b2bd8de3c870e996a18827ed039287de7e472c16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:09:4d:f5:78:9c:5d:0f:6f:c0:2d:ff:3d:b1:
99:ce:8e:95:75:02:86:e1:8c:af:cc:ce:a0:5d:76:
b0:c1:7f:d5:05:d7:fc:c7:e3:c8:9d:ae:28:b0:ee:
63:95:c8:95:de:78:2d:18:f3:17:d4:0f:5b:ac:53:
8c:5a:59:78:fa:bc:94:31:8d:9f:fd:77:4f:14:7e:
d0:8d:34:fb:20:b5:21:a7:df:d1:e5:b5:1e:b9:28:
a0:29:52:2b:5b:a7:ef:aa:ee:b6:a7:5d:61:df:75:
07:ab:f7:f6:e5:ae:db:22:82:2b:d2:3f:d6:8d:7b:
d0:49:c9:7a:69:b1:fe:8a:9b:63:c8:af:a2:96:dd:
db:f7:b9:20:48:a4:9b:b6:b6:65:59:55:dd:ff:29:
08:87:11:8d:4a:ca:1b:7a:ce:94:28:ca:fc:2d:64:
87:d4:6e:72:d6:fb:8b:31:a4:e0:7d:2e:a3:2e:86:
25:ca:96:c2:30:38:7a:78:e9:2d:46:f6:a0:ff:70:
ab:1a:d5:47:c0:90:fe:a0:56:48:b4:0f:7a:30:aa:
95:b4:e8:4d:b7:75:00:b8:c5:9b:56:1a:90:16:47:
ef:c4:97:99:23:69:16:07:bf:04:30:c0:6a:a3:3b:
f2:cf:04:86:f4:5b:21:a0:9d:93:82:15:65:0d:50:
dc:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:BD:8D:E3:C8:70:E9:96:A1:88:27:ED:03:92:87:DE:7E:47:2C:16
X509v3 Authority Key Identifier:
keyid:E8:46:4C:8C:16:7D:D2:C8:7A:A3:D8:8A:CB:FA:E4:C2:33:FF:77:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6EZMjBZ90sh6o9iKy_rkwjP_d7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/cca6c4-ec70-4405-a6a8-6eaa59b0d750/1/sr2N48hw6ZahiCftA5KH3n5HLBY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/cca6c4-ec70-4405-a6a8-6eaa59b0d750/1/6EZMjBZ90sh6o9iKy_rkwjP_d7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.55.39.0/24
Signature Algorithm: sha256WithRSAEncryption
02:30:8f:8d:b9:4b:01:04:62:74:e3:24:5a:79:1a:c2:69:af:
5a:0c:aa:f2:56:16:85:51:99:66:97:96:e4:9a:4d:3a:0c:75:
3d:84:77:5d:0c:ce:ac:1b:b4:5c:ef:ad:5e:c0:ef:24:11:40:
83:9f:a2:4a:dd:68:0d:4e:a5:93:32:b1:13:ad:7c:6b:8f:aa:
e9:58:7b:9d:ca:4b:91:b0:02:86:3e:4d:3c:77:61:d7:f8:ae:
ce:94:2e:e1:0f:bc:15:0d:a3:31:76:82:2d:88:f8:e5:0c:83:
a4:6d:a5:f9:20:da:ac:a9:c5:53:c2:d5:e9:49:1c:05:1c:7a:
34:a7:2d:63:3a:9b:aa:97:81:f2:a4:8b:61:8d:4e:78:7a:3f:
92:99:f2:f8:46:0f:83:4f:80:31:74:7e:f5:5d:fd:64:39:92:
72:b0:fd:98:cb:69:51:3b:14:98:7b:16:96:de:1a:ac:46:a6:
0c:fb:0f:46:68:bb:d8:12:0f:d3:6b:72:44:a7:09:12:cc:42:
43:a3:6d:56:71:c3:8b:04:a1:87:42:87:1a:0c:38:01:20:d9:
c4:46:d5:a4:1a:66:34:fc:f7:6a:ee:b1:ea:1a:d7:50:56:46:
2a:57:06:05:e9:c6:64:10:44:b1:e8:96:f3:14:79:39:c3:8c:
fd:56:52:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 02:43:31 2024 by rpki-client on console-ams.rpki-client.org