Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/b4f818-5e2d-49a5-8072-d842d19a3133/1/6kYrYhsmqyi2Y4JwN1kKiGaJNnM.roa
File: 6kYrYhsmqyi2Y4JwN1kKiGaJNnM.roa (raw, json)
Hash identifier: 46GeQ5l112efEHx9ACC5+ENh6u3+ctgdsNxS21arnT8=
Subject key identifier: EA:46:2B:62:1B:26:AB:28:B6:63:82:70:37:59:0A:88:66:89:36:73
Certificate issuer: /CN=31f8a60c78386c9211d3ca921f1437d1d1ec1d0c
Certificate serial: 018CC3490880635C0488950896CCA3B47DB0
Authority key identifier: 31:F8:A6:0C:78:38:6C:92:11:D3:CA:92:1F:14:37:D1:D1:EC:1D:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MfimDHg4bJIR08qSHxQ30dHsHQw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/b4f818-5e2d-49a5-8072-d842d19a3133/1/6kYrYhsmqyi2Y4JwN1kKiGaJNnM.roa
Signing time: Mon 01 Jan 2024 04:29:52 +0000
ROA not before: Mon 01 Jan 2024 04:29:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49726
IP address blocks: 193.36.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/b4f818-5e2d-49a5-8072-d842d19a3133/1/MfimDHg4bJIR08qSHxQ30dHsHQw.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/b4f818-5e2d-49a5-8072-d842d19a3133/1/MfimDHg4bJIR08qSHxQ30dHsHQw.mft
rsync://rpki.ripe.net/repository/DEFAULT/MfimDHg4bJIR08qSHxQ30dHsHQw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:08:80:63:5c:04:88:95:08:96:cc:a3:b4:7d:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31f8a60c78386c9211d3ca921f1437d1d1ec1d0c
Validity
Not Before: Jan 1 04:29:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ea462b621b26ab28b663827037590a8866893673
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:d3:32:30:ae:f0:e9:14:10:6e:fe:92:d5:c2:
56:f1:32:fa:cf:36:40:1d:8c:95:b7:d9:e5:dc:a1:
96:2e:ac:b3:e4:98:02:74:bd:28:27:47:42:be:07:
3e:3b:d4:bb:2c:11:0c:de:8c:d4:61:73:e0:fe:9c:
a5:ed:71:36:e3:5f:f5:6c:95:ea:78:29:60:57:6c:
de:91:53:6c:f2:1f:1a:66:ab:08:81:8f:a1:de:82:
4b:fb:83:35:53:45:14:81:0c:c7:90:ba:87:20:75:
b9:32:7b:cb:f1:9e:62:4e:e4:fe:1a:81:62:8b:0d:
90:ca:d3:da:12:61:d3:7e:02:50:01:e9:b5:b4:08:
94:4d:4b:21:56:8b:3d:08:06:f6:cf:6e:52:06:dc:
4c:ed:38:de:ed:91:c3:70:65:6f:32:01:0a:78:35:
3a:c8:89:1c:8c:b6:a0:95:85:bb:99:fa:e6:a1:2c:
02:e0:b0:02:da:53:0e:97:71:a0:3e:d0:67:97:8b:
e6:a3:67:44:58:a5:7c:fc:0c:6f:8e:fd:6f:19:cf:
bf:eb:51:ad:a7:21:48:31:f1:d2:29:e4:40:e6:94:
73:d3:dd:80:ae:a9:10:b0:64:84:74:7d:0d:e3:91:
3d:6e:8d:9f:4c:d6:bd:cd:2d:4a:0d:14:6f:d3:6a:
4b:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:46:2B:62:1B:26:AB:28:B6:63:82:70:37:59:0A:88:66:89:36:73
X509v3 Authority Key Identifier:
keyid:31:F8:A6:0C:78:38:6C:92:11:D3:CA:92:1F:14:37:D1:D1:EC:1D:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MfimDHg4bJIR08qSHxQ30dHsHQw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/b4f818-5e2d-49a5-8072-d842d19a3133/1/6kYrYhsmqyi2Y4JwN1kKiGaJNnM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/b4f818-5e2d-49a5-8072-d842d19a3133/1/MfimDHg4bJIR08qSHxQ30dHsHQw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.36.34.0/24
Signature Algorithm: sha256WithRSAEncryption
92:c9:a0:13:b6:c3:d5:42:44:45:2f:b3:12:b6:ae:a4:ba:33:
a1:a4:3e:23:5a:38:5a:95:eb:ea:06:4d:88:36:de:06:ee:1e:
80:1c:37:dc:ba:68:94:5a:d4:8c:89:22:f1:86:0f:fb:0d:45:
40:4a:b5:72:88:05:cf:79:d5:55:f7:56:0f:10:c5:ea:66:0d:
bb:ce:54:67:79:01:1e:4e:ef:d8:71:cd:a5:df:75:de:8e:0d:
3d:c7:1c:07:d7:93:0b:eb:35:12:e8:de:33:d9:77:fa:5d:a0:
cd:e8:57:87:2e:2e:1c:b0:9b:f0:b6:23:91:b4:f6:77:52:40:
04:f3:70:7d:84:b1:9e:26:df:51:ca:34:fc:6d:41:d0:f7:54:
05:8e:c0:54:10:d3:b4:6d:9e:4b:3a:33:e9:4f:83:a8:56:13:
cd:cf:b6:0d:9c:bc:d8:bc:6f:f7:ff:77:66:42:b3:c3:fd:fd:
94:78:5e:b3:34:7e:be:00:ec:b4:9e:ad:a5:09:57:a2:d4:a6:
d3:14:ae:b7:69:6c:4a:48:cc:71:49:56:c1:24:f7:a9:9f:fd:
9a:d7:25:6f:dd:4d:d8:e9:99:d0:f8:28:8e:9c:7d:af:f5:55:
9b:03:bb:c7:6c:e0:ab:21:a0:15:a7:3c:12:f9:43:49:48:8e:
68:8a:86:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 12:34:42 2024 by rpki-client on console-ams.rpki-client.org