Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/200366-d881-4030-8280-b5e0e4c3315c/1/35xjOqxW6rFHScqa9K2M7EFP5IY.roa
File: 35xjOqxW6rFHScqa9K2M7EFP5IY.roa (raw, json)
Hash identifier: OE/LRPVkfS18gE8Re0BnKo7k/Ftr56OgDuFw6SsSqeo=
Subject key identifier: DF:9C:63:3A:AC:56:EA:B1:47:49:CA:9A:F4:AD:8C:EC:41:4F:E4:86
Certificate issuer: /CN=bd25f71ba4131483bb9b823dd88651d3afd44e7b
Certificate serial: 018CC7936F60552446B5403D9E88CC79BAF2
Authority key identifier: BD:25:F7:1B:A4:13:14:83:BB:9B:82:3D:D8:86:51:D3:AF:D4:4E:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vSX3G6QTFIO7m4I92IZR06_UTns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/200366-d881-4030-8280-b5e0e4c3315c/1/35xjOqxW6rFHScqa9K2M7EFP5IY.roa
Signing time: Tue 02 Jan 2024 00:29:37 +0000
ROA not before: Tue 02 Jan 2024 00:29:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35197
IP address blocks: 194.146.152.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/200366-d881-4030-8280-b5e0e4c3315c/1/vSX3G6QTFIO7m4I92IZR06_UTns.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/200366-d881-4030-8280-b5e0e4c3315c/1/vSX3G6QTFIO7m4I92IZR06_UTns.mft
rsync://rpki.ripe.net/repository/DEFAULT/vSX3G6QTFIO7m4I92IZR06_UTns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Jun 2024 22:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:93:6f:60:55:24:46:b5:40:3d:9e:88:cc:79:ba:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd25f71ba4131483bb9b823dd88651d3afd44e7b
Validity
Not Before: Jan 2 00:29:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=df9c633aac56eab14749ca9af4ad8cec414fe486
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:4e:ff:fd:d0:e3:32:52:77:42:92:a4:6e:6e:
a6:49:68:ff:2a:77:73:89:69:56:c7:3c:14:72:9b:
08:e2:3c:f4:b4:fb:12:11:c6:88:c0:27:08:16:d8:
8b:d0:57:c9:a0:f8:47:b4:71:7c:40:78:b5:7d:de:
f7:bf:a1:37:86:51:db:cf:af:78:68:84:38:31:5a:
5b:33:bd:36:29:21:e1:4b:7f:d3:a1:22:49:41:ac:
3a:fd:56:d3:c8:a3:30:66:41:5d:43:b4:53:5c:69:
f7:86:2b:6e:10:2a:60:91:cc:a5:c3:fc:a8:c4:28:
11:0c:c4:42:78:86:d6:0f:d9:15:99:1c:1d:0d:d5:
0d:3c:fe:ea:bd:17:a7:d3:79:b4:fd:3f:62:ef:14:
e8:b2:fc:7a:28:a1:63:73:71:cc:73:32:09:74:4f:
5b:c4:f6:83:27:4b:75:fa:d9:02:bc:58:e0:2b:df:
e4:a0:ab:9e:7f:92:93:ea:79:9f:8f:67:6a:dd:cd:
e2:a6:76:a2:e9:07:b2:51:4d:95:4d:5e:a4:fb:15:
49:e6:f3:40:87:06:59:0f:a4:a7:76:2b:4d:f7:e6:
60:90:96:08:c7:dd:c1:c8:27:e6:33:f3:95:df:92:
ff:07:36:a4:f9:24:b3:d2:1d:f6:9f:2b:48:9a:8f:
6f:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:9C:63:3A:AC:56:EA:B1:47:49:CA:9A:F4:AD:8C:EC:41:4F:E4:86
X509v3 Authority Key Identifier:
keyid:BD:25:F7:1B:A4:13:14:83:BB:9B:82:3D:D8:86:51:D3:AF:D4:4E:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vSX3G6QTFIO7m4I92IZR06_UTns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/200366-d881-4030-8280-b5e0e4c3315c/1/35xjOqxW6rFHScqa9K2M7EFP5IY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/200366-d881-4030-8280-b5e0e4c3315c/1/vSX3G6QTFIO7m4I92IZR06_UTns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.146.152.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:49:1e:29:52:85:43:57:c4:33:7a:77:37:58:d6:bf:4e:43:
e2:b7:4c:0a:8c:fb:16:2f:cc:0e:5e:1d:f3:09:26:46:7b:29:
89:71:92:84:b6:f1:28:81:bd:d3:99:ab:8c:d4:a3:23:81:54:
04:ce:69:69:3d:51:3a:54:77:82:e1:89:80:da:69:ca:a6:cd:
cf:0f:1a:89:03:32:74:d2:9a:c0:82:8f:8b:f1:77:bf:22:67:
bf:2f:76:4e:57:88:b1:b9:f0:93:e4:d8:b2:ae:bb:bc:f5:d7:
d6:5b:9d:f8:33:29:2c:7b:16:9b:3d:b7:f7:e7:c2:10:73:44:
5e:d4:ba:7a:12:a9:42:40:9a:62:55:af:2e:8c:ea:cd:bd:ff:
cd:3d:c0:13:7f:df:16:7c:b5:dd:fa:fc:83:ec:2e:c8:c0:87:
96:36:43:91:9f:19:02:4e:bb:0f:2c:36:9a:0d:7b:e3:4a:11:
e7:0f:df:dd:63:7f:ed:db:54:63:a6:1c:15:b3:2a:ff:fb:d5:
c8:0e:fb:dd:dd:49:82:18:3c:38:a0:8a:84:27:91:e9:c5:ba:
49:41:c4:18:4e:5f:77:c9:fc:14:25:47:2e:34:3b:0f:a6:51:
2a:70:b6:9a:2c:1c:52:f7:11:a0:c3:b5:15:34:04:f8:69:fc:
90:8b:86:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 07:06:07 2024 by rpki-client on console-ams.rpki-client.org