Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/a5cedc-bf61-4cbc-ab36-ad0953f7fd49/1/Ru0tL3cYY9dgBMr2AsOFSvoQANo.roa
File: Ru0tL3cYY9dgBMr2AsOFSvoQANo.roa (raw, json)
Hash identifier: 80MVz2tdsRkYLyzzK/H2tl72l35v9hg2F3x9/bvVVyc=
Subject key identifier: 46:ED:2D:2F:77:18:63:D7:60:04:CA:F6:02:C3:85:4A:FA:10:00:DA
Certificate issuer: /CN=b3fedb5009526f0c6bad423f00cda08a0933b78b
Certificate serial: 018CC94D93ECFCBC46FD724169C0BA6218B9
Authority key identifier: B3:FE:DB:50:09:52:6F:0C:6B:AD:42:3F:00:CD:A0:8A:09:33:B7:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s_7bUAlSbwxrrUI_AM2gigkzt4s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/a5cedc-bf61-4cbc-ab36-ad0953f7fd49/1/Ru0tL3cYY9dgBMr2AsOFSvoQANo.roa
Signing time: Tue 02 Jan 2024 08:32:33 +0000
ROA not before: Tue 02 Jan 2024 08:32:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202932
IP address blocks: 185.136.4.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/a5cedc-bf61-4cbc-ab36-ad0953f7fd49/1/s_7bUAlSbwxrrUI_AM2gigkzt4s.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/a5cedc-bf61-4cbc-ab36-ad0953f7fd49/1/s_7bUAlSbwxrrUI_AM2gigkzt4s.mft
rsync://rpki.ripe.net/repository/DEFAULT/s_7bUAlSbwxrrUI_AM2gigkzt4s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 09 Jun 2024 05:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:93:ec:fc:bc:46:fd:72:41:69:c0:ba:62:18:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3fedb5009526f0c6bad423f00cda08a0933b78b
Validity
Not Before: Jan 2 08:32:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=46ed2d2f771863d76004caf602c3854afa1000da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:c4:45:d1:9c:ba:23:2b:71:f2:0e:c5:36:2b:
7a:c5:b7:66:f9:c9:47:53:3f:a2:6f:51:de:d5:dc:
ae:8b:50:68:89:64:41:9a:ef:43:ae:12:5e:67:5b:
d0:3f:22:79:6c:8f:5c:6f:41:89:f1:72:ec:c7:d7:
36:fb:60:ff:6f:c4:b6:17:44:1b:70:4d:d8:25:5a:
b5:38:90:63:ab:4e:c2:ff:64:07:a3:e3:ea:52:6a:
c4:fb:58:5d:8d:37:33:22:8a:73:3a:21:da:64:8e:
ba:c5:20:1c:8c:a9:9d:41:15:c9:f6:55:72:e2:62:
a5:a5:3f:fc:52:72:18:f8:da:04:e6:c4:de:c3:77:
01:96:c5:73:d0:f9:52:c8:83:2e:43:cb:3d:45:7b:
7f:af:40:46:cc:55:3a:a3:77:4c:3c:a3:fb:9a:97:
82:cb:72:69:5c:1c:e2:65:4c:a9:f4:ec:b2:18:2a:
7c:99:a4:95:c2:02:93:d3:d8:c1:c0:8f:8b:24:ad:
e4:94:bd:7c:0a:b2:56:b0:a2:45:8c:70:6c:3b:89:
e1:2f:1f:53:65:a0:ab:d4:5b:d2:75:db:a7:9d:b2:
da:ab:4d:4d:ae:28:0e:a4:f3:62:7e:13:70:fe:29:
3f:65:e9:eb:6d:26:b8:5e:21:2f:cf:71:f1:5c:70:
ae:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:ED:2D:2F:77:18:63:D7:60:04:CA:F6:02:C3:85:4A:FA:10:00:DA
X509v3 Authority Key Identifier:
keyid:B3:FE:DB:50:09:52:6F:0C:6B:AD:42:3F:00:CD:A0:8A:09:33:B7:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s_7bUAlSbwxrrUI_AM2gigkzt4s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5cedc-bf61-4cbc-ab36-ad0953f7fd49/1/Ru0tL3cYY9dgBMr2AsOFSvoQANo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5cedc-bf61-4cbc-ab36-ad0953f7fd49/1/s_7bUAlSbwxrrUI_AM2gigkzt4s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.136.4.0/22
Signature Algorithm: sha256WithRSAEncryption
93:3b:e7:0f:86:97:1d:26:aa:86:2c:d7:77:48:89:ee:fe:f0:
32:b7:cb:b0:3c:ae:0c:b0:30:10:db:d9:69:9a:36:65:e2:89:
0e:22:6c:f5:43:a2:0d:1f:cb:12:60:1b:7c:79:03:c5:1f:4b:
02:94:30:87:c0:70:f8:87:2f:48:3c:1e:ca:65:81:f1:b7:4a:
5c:39:29:9b:5b:fb:c2:ac:70:9e:bc:3f:5c:95:13:3f:de:9d:
0a:7b:45:a3:00:0d:78:55:ff:24:31:04:c0:60:98:8f:81:c1:
c5:d5:53:9d:1f:ae:15:e4:89:0c:fa:92:68:2a:00:7a:bf:6e:
f3:71:eb:a4:90:de:88:d3:70:c0:6b:81:13:41:05:db:f1:f8:
1a:84:57:21:6c:fd:7c:59:43:48:7a:0d:48:04:9b:97:93:64:
9c:83:b8:bd:f0:9a:d6:11:61:8c:57:e0:25:62:a1:9e:30:6c:
2a:53:b7:02:cd:53:1a:29:d6:7f:a0:da:9a:b4:f2:ab:e5:85:
f7:22:17:b8:c5:d8:12:2f:aa:3d:81:23:08:b3:69:42:3a:8c:
92:ee:d4:7c:7c:d4:a1:32:01:c7:c6:04:1c:02:bc:89:28:c1:
3d:79:ff:ed:4f:1d:a7:93:f8:fa:33:37:4d:5d:6c:d3:08:55:
f5:cf:58:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 09:21:24 2024 by rpki-client on console-fra.rpki-client.org