Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/asYc0hSRKg_SxY4vs3O_Y5BNQkg.roa
File: asYc0hSRKg_SxY4vs3O_Y5BNQkg.roa (raw, json)
Hash identifier: jF5tMEiWEkeMOBp1HKRZBFBuKlpqvo4p+/DqM7uT+0M=
Subject key identifier: 6A:C6:1C:D2:14:91:2A:0F:D2:C5:8E:2F:B3:73:BF:63:90:4D:42:48
Certificate issuer: /CN=f651dc9875e35ec580c571fd0416f4d5f5d4158a
Certificate serial: 018CC6B77C686AED74C7151956F2DE2714A3
Authority key identifier: F6:51:DC:98:75:E3:5E:C5:80:C5:71:FD:04:16:F4:D5:F5:D4:15:8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/asYc0hSRKg_SxY4vs3O_Y5BNQkg.roa
Signing time: Mon 01 Jan 2024 20:29:22 +0000
ROA not before: Mon 01 Jan 2024 20:29:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39020
IP address blocks: 193.30.100.0/24 maxlen: 24
2a07:f7c7:ffff::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 07:02:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:7c:68:6a:ed:74:c7:15:19:56:f2:de:27:14:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f651dc9875e35ec580c571fd0416f4d5f5d4158a
Validity
Not Before: Jan 1 20:29:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6ac61cd214912a0fd2c58e2fb373bf63904d4248
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:cd:29:f3:a5:46:24:5e:a1:b6:cc:84:1e:fe:
2f:a0:ca:50:c6:a0:45:10:75:b3:6f:8d:f4:68:9c:
bf:23:5b:fd:77:2c:dd:7c:5b:c2:9e:2e:2c:d9:ab:
72:92:c0:aa:0b:50:4b:d2:ca:4f:e9:7b:a6:03:35:
3b:c3:5f:95:4e:46:b3:6c:ed:52:5e:0f:bd:d5:7d:
db:11:23:d3:32:de:7b:cd:12:5f:a8:0c:c7:4d:17:
e7:ec:00:ee:6f:4c:62:e4:27:11:6e:9d:df:50:43:
c7:1d:cd:17:22:13:03:96:a0:af:fb:48:8a:c2:27:
ac:df:2b:12:11:c1:9a:c3:a8:e3:ba:bd:a9:0b:53:
7b:fc:dd:ae:5e:9c:48:dc:f0:d7:f7:2e:28:c3:28:
eb:94:55:a0:a0:ef:36:95:3b:2d:87:2c:08:24:d1:
c1:57:e7:f4:80:4e:e1:97:b1:42:dc:f2:ff:af:5b:
e8:52:72:a1:c9:c6:d9:3d:e3:bf:a2:1e:0c:ba:c3:
e2:09:bd:0a:54:35:09:bc:6b:97:95:7d:ad:7d:b6:
88:76:a1:c9:40:08:07:1c:98:f3:20:80:20:47:c5:
4b:46:8d:94:8e:bb:29:b7:e3:81:4b:79:af:21:80:
4c:7d:95:c1:00:b3:36:c4:cb:fb:6c:7b:9f:6f:03:
ca:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:C6:1C:D2:14:91:2A:0F:D2:C5:8E:2F:B3:73:BF:63:90:4D:42:48
X509v3 Authority Key Identifier:
keyid:F6:51:DC:98:75:E3:5E:C5:80:C5:71:FD:04:16:F4:D5:F5:D4:15:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/asYc0hSRKg_SxY4vs3O_Y5BNQkg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.30.100.0/24
IPv6:
2a07:f7c7:ffff::/48
Signature Algorithm: sha256WithRSAEncryption
3f:ac:ea:c5:ce:4d:26:54:f7:e9:31:2c:de:c3:f6:5d:db:a3:
15:24:8e:c9:92:ad:86:81:bc:06:6e:00:f7:68:fc:b4:e6:fe:
4f:23:06:92:c1:13:8b:75:9c:01:2b:70:f5:c3:ee:d4:1e:94:
59:3d:d7:d6:08:be:09:a3:4d:c8:87:e9:f5:33:dd:af:a2:9d:
5a:be:f4:a0:f9:2c:31:a0:22:7a:7f:90:35:a7:78:89:cf:66:
8b:6e:60:f6:38:f6:88:78:f1:3a:50:54:ce:97:b5:6a:57:d2:
7f:d4:8d:ee:0c:a3:99:a6:76:72:56:62:8b:69:30:32:36:54:
a2:d0:a3:30:c5:1f:ab:10:8c:1f:a2:4d:86:a8:70:96:0e:d3:
49:e7:f6:48:ee:60:52:5f:0d:a8:73:89:67:cf:d4:05:3b:4a:
63:38:fe:f0:97:09:0d:14:2c:39:86:ff:da:23:3c:1c:30:ce:
5d:9c:4e:63:f6:b2:a2:ab:70:84:fb:ce:35:d2:ec:a2:0e:aa:
fa:3a:7f:c2:eb:b8:e7:6e:1b:d3:d3:95:db:fb:11:a8:56:48:
ab:24:6f:23:c6:84:93:59:61:1d:36:32:13:5c:12:08:1b:a7:
75:9d:4e:30:ab:39:c7:10:e7:f6:b8:0b:b3:4f:81:d0:70:4b:
22:03:b2:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:39:34 2024 by rpki-client on console-fra.rpki-client.org