Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/b4GojdWCA5BaU8wbLa-IRlT4xDI.roa
File: b4GojdWCA5BaU8wbLa-IRlT4xDI.roa (raw, json)
Hash identifier: xE21DMe+AQqr7AdB3C4Zum3m2QPximajIaTBdoIPuKE=
Subject key identifier: 6F:81:A8:8D:D5:82:03:90:5A:53:CC:1B:2D:AF:88:46:54:F8:C4:32
Certificate issuer: /CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Certificate serial: 018EAE1BB1674E8208C22B35D34FF1AB996D
Authority key identifier: 4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/b4GojdWCA5BaU8wbLa-IRlT4xDI.roa
Signing time: Fri 05 Apr 2024 11:53:54 +0000
ROA not before: Fri 05 Apr 2024 11:53:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206150
IP address blocks: 193.32.184.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.mft
rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 08:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:ae:1b:b1:67:4e:82:08:c2:2b:35:d3:4f:f1:ab:99:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Validity
Not Before: Apr 5 11:53:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6f81a88dd58203905a53cc1b2daf884654f8c432
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:f7:f8:bb:69:4d:2f:c2:14:0f:00:74:6e:1b:
e3:f7:b2:cd:50:99:04:51:5d:d5:71:3f:16:bf:6a:
af:75:91:98:8f:3d:02:db:3f:6f:25:07:28:3b:f8:
0d:10:a1:5b:fe:13:97:41:77:c1:14:0f:14:30:40:
04:ce:8a:e1:ba:df:f9:66:4d:5b:8a:5b:84:8c:df:
58:92:c3:71:9f:a9:ae:fc:27:45:c6:ae:7b:bf:ca:
d9:6d:b2:be:23:f3:5b:24:9e:f1:c5:b6:e0:d0:b1:
38:9e:a8:4f:77:0f:b5:6e:88:2f:34:cf:d2:e9:ea:
8d:6c:85:97:71:4b:78:9b:06:b9:35:45:a6:c4:61:
00:13:fb:13:b5:8b:ae:8b:ce:fb:6d:0f:4a:a0:19:
0a:2f:48:eb:3e:61:dd:99:2b:d1:d8:85:a4:ab:ee:
90:d3:81:d3:42:d6:ac:b6:0b:39:eb:f5:67:6b:88:
b5:ba:22:de:38:5c:56:74:9e:32:1e:78:a7:2c:41:
3a:70:d9:50:7f:f6:42:83:01:b1:58:c9:fd:47:80:
33:8a:e4:3d:8b:55:bf:a9:0a:e2:c7:78:62:28:ac:
2f:55:77:86:15:67:3c:97:43:4d:75:96:64:59:d3:
67:e8:c1:cd:e7:61:cd:0c:ec:29:c0:14:8e:ed:f2:
4c:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:81:A8:8D:D5:82:03:90:5A:53:CC:1B:2D:AF:88:46:54:F8:C4:32
X509v3 Authority Key Identifier:
keyid:4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/b4GojdWCA5BaU8wbLa-IRlT4xDI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.32.184.0/23
Signature Algorithm: sha256WithRSAEncryption
2a:60:be:43:d9:dc:00:22:6f:3e:3d:9d:5b:0e:61:e0:32:9a:
ef:49:6a:90:c2:cb:42:0a:93:56:2b:ca:39:35:1a:b1:b3:6a:
91:c0:66:b3:a6:ff:68:d3:51:83:cf:7f:ad:a8:0a:d8:97:8d:
7d:e6:17:60:be:08:0a:9b:e3:e8:b1:bb:f2:b2:88:fc:a7:e2:
8b:0c:e9:40:be:64:47:90:12:84:5b:7d:76:e0:1d:bf:89:6b:
9b:42:a0:85:da:66:33:52:7f:34:1d:97:a3:12:0c:8c:75:10:
6a:6a:bc:8c:73:dc:da:b8:12:55:43:8d:87:a5:e4:22:38:eb:
ef:a3:99:2e:9c:68:01:d2:89:01:5c:9e:bf:31:15:02:a4:08:
45:22:d0:b3:ec:5e:4c:66:3e:b5:8e:d4:2e:49:83:03:00:04:
5e:12:da:b8:08:3b:4a:fb:7e:6a:10:b4:31:1d:c5:f9:ce:97:
b9:75:3e:29:57:66:dd:d4:d4:4b:3e:64:f8:a3:88:41:9f:2c:
08:0f:ba:bf:13:c7:52:a8:42:13:69:1f:68:e0:e2:d1:2a:ad:
c1:03:09:49:c7:0e:35:d3:9c:83:59:7c:92:57:02:5a:f1:7e:
11:c0:cd:da:62:93:03:9a:c2:02:06:92:53:2f:42:8f:8f:15:
f6:c8:5d:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 09:59:41 2024 by rpki-client on console-ams.rpki-client.org