Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/5835be-69e0-469b-bcba-00d14a203eb1/1/pK-6EdoBzgHvOl8FOFou5sHcQa8.roa
File: pK-6EdoBzgHvOl8FOFou5sHcQa8.roa (raw, json)
Hash identifier: TpKsMI/atvmhcZn2ycq02yhXkLODdO3+7QaUGBqcoIQ=
Subject key identifier: A4:AF:BA:11:DA:01:CE:01:EF:3A:5F:05:38:5A:2E:E6:C1:DC:41:AF
Certificate issuer: /CN=0b6efda3edcb2f745cccabb45e20b79e79a9fc98
Certificate serial: 018CC794B8B50DABEFBB703BA240F83B3BA7
Authority key identifier: 0B:6E:FD:A3:ED:CB:2F:74:5C:CC:AB:B4:5E:20:B7:9E:79:A9:FC:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C279o-3LL3RczKu0XiC3nnmp_Jg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/5835be-69e0-469b-bcba-00d14a203eb1/1/pK-6EdoBzgHvOl8FOFou5sHcQa8.roa
Signing time: Tue 02 Jan 2024 00:31:01 +0000
ROA not before: Tue 02 Jan 2024 00:31:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 1754
IP address blocks: 141.34.0.0/16 maxlen: 16
192.76.172.0/24 maxlen: 24
131.169.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/5835be-69e0-469b-bcba-00d14a203eb1/1/C279o-3LL3RczKu0XiC3nnmp_Jg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/5835be-69e0-469b-bcba-00d14a203eb1/1/C279o-3LL3RczKu0XiC3nnmp_Jg.mft
rsync://rpki.ripe.net/repository/DEFAULT/C279o-3LL3RczKu0XiC3nnmp_Jg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:b8:b5:0d:ab:ef:bb:70:3b:a2:40:f8:3b:3b:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b6efda3edcb2f745cccabb45e20b79e79a9fc98
Validity
Not Before: Jan 2 00:31:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a4afba11da01ce01ef3a5f05385a2ee6c1dc41af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:3e:b4:44:cb:d2:be:0d:5e:f6:f9:18:eb:dd:
c5:f9:e5:54:44:f1:cb:3f:44:b5:41:93:ca:13:f6:
fe:3b:5f:34:38:2a:5f:fe:f3:50:a0:e0:eb:02:6e:
a6:c4:df:d5:5b:34:78:04:d9:6d:87:33:d6:ff:26:
f7:88:53:90:04:39:93:1f:79:50:a8:c3:9f:fd:41:
00:33:ef:c9:83:2f:7d:6f:13:03:32:61:fd:54:3f:
2c:47:1e:1d:7a:93:94:dd:32:4b:f5:9c:6a:66:79:
e0:49:2f:00:22:36:73:58:5d:67:ac:34:62:3e:3b:
70:93:e8:ea:b6:89:08:a6:13:ce:d3:f6:4d:5a:7d:
fb:7d:d1:9f:05:e7:09:08:7e:5a:9a:cd:7b:e3:53:
37:46:b9:0c:cc:fe:99:96:c6:64:0b:0a:a2:c6:f1:
16:ff:c7:3b:fa:d4:b1:d4:4c:16:10:9d:22:03:f4:
de:ec:88:3f:74:94:48:51:19:6a:27:4d:9e:32:51:
d6:39:7b:90:c9:7e:00:e3:db:3b:72:fc:6a:47:55:
fa:51:de:38:ea:ba:3e:8e:9d:dc:98:a1:ee:e4:f3:
96:60:95:63:4d:4a:f7:bc:84:ec:ec:e3:b6:c9:7f:
d2:7f:e1:53:bf:01:25:a8:9a:2c:6d:d8:ec:e0:3c:
66:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:AF:BA:11:DA:01:CE:01:EF:3A:5F:05:38:5A:2E:E6:C1:DC:41:AF
X509v3 Authority Key Identifier:
keyid:0B:6E:FD:A3:ED:CB:2F:74:5C:CC:AB:B4:5E:20:B7:9E:79:A9:FC:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C279o-3LL3RczKu0XiC3nnmp_Jg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/5835be-69e0-469b-bcba-00d14a203eb1/1/pK-6EdoBzgHvOl8FOFou5sHcQa8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/5835be-69e0-469b-bcba-00d14a203eb1/1/C279o-3LL3RczKu0XiC3nnmp_Jg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.169.0.0/16
141.34.0.0/16
192.76.172.0/24
Signature Algorithm: sha256WithRSAEncryption
24:c0:d0:71:85:02:41:71:9b:e3:67:9e:5c:10:ab:64:59:3a:
08:ff:19:2a:bd:6f:ab:c5:26:11:16:c6:9b:84:11:43:03:de:
3e:9c:07:69:c1:89:91:8b:02:c5:f2:fb:c2:88:66:27:b8:52:
2f:04:69:d7:71:5b:fb:d6:3d:d6:f0:66:02:eb:4f:5c:b7:af:
3b:54:54:21:97:67:62:5c:3c:1e:b5:f6:25:f5:72:4e:4a:0f:
82:f9:36:76:b7:b1:22:8f:08:f5:f9:7a:55:de:d2:34:a7:a6:
d3:d4:52:96:3d:0e:ac:7d:a6:7e:61:38:13:db:f1:71:ba:d3:
44:b8:08:28:12:e1:69:96:eb:8d:58:26:8b:ba:c8:56:2d:87:
5c:56:68:3e:98:3f:31:45:9d:12:38:72:10:a0:9f:64:10:24:
ce:9d:49:5b:ab:e8:e1:97:f2:28:57:ea:4d:e3:fa:18:4c:1c:
fc:7e:cf:f8:12:f4:90:08:12:c2:57:9a:4b:16:54:8a:d2:ff:
c8:a8:d7:03:0c:09:4a:98:17:04:c2:eb:d2:63:0c:3e:78:ef:
7f:41:c7:92:e5:87:c1:6b:4b:eb:5c:24:1e:f7:7c:16:2d:3e:
cc:54:09:c3:33:5c:ee:2b:59:d1:c0:dd:86:87:b1:e8:e4:2e:
a2:77:d4:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:44:01 2024 by rpki-client on console-fra.rpki-client.org