Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/25b37f-3b68-484e-b29f-3ee6362ea37b/1/PDnz1KEtZONuh0qWxtZT4vHX7R4.roa
File: PDnz1KEtZONuh0qWxtZT4vHX7R4.roa (raw, json)
Hash identifier: U4RhzzIZJM+qmOwbpoxz7FyczozGiw1DSDtt8doKcb8=
Subject key identifier: 3C:39:F3:D4:A1:2D:64:E3:6E:87:4A:96:C6:D6:53:E2:F1:D7:ED:1E
Certificate issuer: /CN=498f55534e38eac2c327a941e1a26b9c4031be18
Certificate serial: 018CC4934F46CCF3ED7DD6BD65635C817E0A
Authority key identifier: 49:8F:55:53:4E:38:EA:C2:C3:27:A9:41:E1:A2:6B:9C:40:31:BE:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SY9VU0446sLDJ6lB4aJrnEAxvhg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/25b37f-3b68-484e-b29f-3ee6362ea37b/1/PDnz1KEtZONuh0qWxtZT4vHX7R4.roa
Signing time: Mon 01 Jan 2024 10:30:37 +0000
ROA not before: Mon 01 Jan 2024 10:30:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3303
IP address blocks: 193.247.84.0/24 maxlen: 24
193.247.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/25b37f-3b68-484e-b29f-3ee6362ea37b/1/SY9VU0446sLDJ6lB4aJrnEAxvhg.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/25b37f-3b68-484e-b29f-3ee6362ea37b/1/SY9VU0446sLDJ6lB4aJrnEAxvhg.mft
rsync://rpki.ripe.net/repository/DEFAULT/SY9VU0446sLDJ6lB4aJrnEAxvhg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 07:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:4f:46:cc:f3:ed:7d:d6:bd:65:63:5c:81:7e:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=498f55534e38eac2c327a941e1a26b9c4031be18
Validity
Not Before: Jan 1 10:30:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3c39f3d4a12d64e36e874a96c6d653e2f1d7ed1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:dc:1e:af:07:78:84:4c:f0:7b:9f:55:1f:46:
46:7d:da:d7:9b:7f:11:d8:3c:0f:bb:ab:3b:92:3c:
91:1a:43:49:72:06:5b:80:b5:59:15:bc:be:c9:a8:
55:ff:ad:72:f0:44:d0:41:09:d6:d7:c9:2a:d7:d6:
44:72:1d:8a:06:67:53:0e:29:d5:6c:03:6b:ff:e9:
65:aa:e2:cd:ea:1a:30:70:1f:1a:3e:60:45:c2:5b:
8f:39:c2:b4:cd:03:d3:0d:2f:02:f1:06:95:a0:5b:
7c:31:d6:63:1e:0b:d4:e0:0e:20:52:b6:e5:3b:d6:
45:32:f9:2e:ce:1e:35:a3:70:87:0e:5f:77:8d:0a:
a1:1f:bf:98:a1:71:42:b8:d3:fa:bc:66:ce:70:fb:
f4:51:7d:4a:30:49:69:ab:3e:43:8d:3f:81:1b:b5:
c6:38:43:b1:5a:c1:eb:0f:20:c2:41:72:67:c5:de:
63:db:85:a7:8a:d5:ec:79:22:ec:7f:6a:18:0e:62:
b7:d5:93:5f:a6:af:d9:2a:9d:b4:e6:99:59:fa:c1:
ff:7b:73:fc:0f:81:b0:8f:ac:36:e4:ed:8a:fa:82:
2d:dc:2c:9a:34:a2:99:f4:02:ad:3a:1c:ec:74:3c:
5d:54:8d:9b:11:c0:83:49:f4:bf:28:61:d7:ed:0c:
b7:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:39:F3:D4:A1:2D:64:E3:6E:87:4A:96:C6:D6:53:E2:F1:D7:ED:1E
X509v3 Authority Key Identifier:
keyid:49:8F:55:53:4E:38:EA:C2:C3:27:A9:41:E1:A2:6B:9C:40:31:BE:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SY9VU0446sLDJ6lB4aJrnEAxvhg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/25b37f-3b68-484e-b29f-3ee6362ea37b/1/PDnz1KEtZONuh0qWxtZT4vHX7R4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/25b37f-3b68-484e-b29f-3ee6362ea37b/1/SY9VU0446sLDJ6lB4aJrnEAxvhg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.247.83.0-193.247.84.255
Signature Algorithm: sha256WithRSAEncryption
5d:28:9f:4b:59:05:de:e1:69:a3:e8:3d:e0:40:a3:b2:d6:0e:
b2:a1:49:4e:37:66:d0:aa:99:3b:dc:d3:60:ac:38:60:be:1e:
b3:84:d8:af:ae:a4:75:a9:fd:4a:17:b9:01:f8:e6:0c:ef:1d:
e7:80:1d:a2:84:90:18:bb:37:84:e2:e5:85:93:18:51:a5:0d:
66:62:21:10:74:46:92:9e:32:24:51:fb:c5:7e:a7:75:42:49:
68:28:1c:05:7d:d9:62:03:65:72:ec:f2:46:ce:90:6c:7d:3a:
a9:d2:33:bd:4f:57:e1:96:a5:2e:5d:08:d0:52:f2:a2:1f:5e:
c9:d9:a0:63:26:68:92:19:3f:fe:5b:18:dc:b9:84:d6:0d:e9:
4c:0d:08:27:e9:17:45:bb:ba:fe:ed:c1:e6:de:1b:6b:4c:31:
bf:2c:81:e2:ac:17:db:33:e7:58:dd:25:51:10:81:1f:eb:00:
7a:33:77:69:b4:9d:91:73:fc:44:d7:68:f2:64:00:ab:48:5d:
d9:3d:c5:0d:aa:f6:9a:af:83:75:d3:15:68:fb:f5:1d:24:7c:
79:11:67:6f:d8:bf:34:75:fc:25:62:af:2d:ca:8b:65:ce:1c:
43:a9:d3:0b:27:f2:92:f5:14:20:99:e9:d5:f5:30:7f:fa:7a:
58:a4:3e:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 11:44:53 2024 by rpki-client on console-fra.rpki-client.org