Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/hd2m0u7j4h2l16tVgVqf_Bb5_yk.roa
File: hd2m0u7j4h2l16tVgVqf_Bb5_yk.roa (raw, json)
Hash identifier: plGx6vgePNJ8WZLMIS2qBFnIUYX5vxlb0x+uwleu7ng=
Subject key identifier: 85:DD:A6:D2:EE:E3:E2:1D:A5:D7:AB:55:81:5A:9F:FC:16:F9:FF:29
Certificate issuer: /CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Certificate serial: 018EF2779217E7027E5E8130AB1EE4890607
Authority key identifier: 4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/hd2m0u7j4h2l16tVgVqf_Bb5_yk.roa
Signing time: Thu 18 Apr 2024 18:28:26 +0000
ROA not before: Thu 18 Apr 2024 18:28:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215073
IP address blocks: 193.111.78.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.mft
rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Jun 2024 21:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:f2:77:92:17:e7:02:7e:5e:81:30:ab:1e:e4:89:06:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Validity
Not Before: Apr 18 18:28:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=85dda6d2eee3e21da5d7ab55815a9ffc16f9ff29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:fa:70:e4:2f:ea:e1:f3:f5:fd:c5:9f:4f:b0:
ba:08:9f:b7:16:79:2f:bb:4a:e7:b9:7a:1c:b9:b9:
8c:e8:3b:c8:f2:b9:5e:02:96:92:f3:0c:e4:ee:eb:
95:34:5d:1c:9d:c1:f2:67:32:04:76:21:f3:35:65:
8c:7a:95:97:41:57:01:fd:78:15:85:45:85:a1:e9:
a7:71:f5:c2:31:20:31:67:fe:e2:83:dd:f5:ed:f6:
a2:1e:ce:5c:93:ff:6c:4f:bf:ca:15:df:81:93:b4:
b7:5b:4c:67:f3:8c:c8:43:7f:60:f2:ae:e1:7d:43:
67:34:66:e3:66:b2:48:18:83:31:21:15:dc:50:2b:
ce:fe:82:0f:5c:80:bc:07:87:6b:8b:08:a7:23:b9:
93:66:2c:93:49:5d:e5:2a:13:b4:37:79:2c:eb:a4:
08:48:2e:a1:6a:37:64:f4:f2:99:7c:c5:3f:af:97:
b0:ad:84:f2:f6:fc:70:0d:fa:f5:88:1b:cc:7f:33:
b3:94:6b:be:ed:2e:0a:52:d7:d7:a3:98:ca:ba:14:
09:aa:b0:a4:e4:82:ad:b7:11:e1:16:a2:05:d4:c7:
54:0a:a3:82:8c:9f:f2:ad:38:14:51:a5:68:3d:8a:
0a:b0:4a:07:c0:68:26:79:ae:49:0c:0a:b4:40:fd:
5e:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:DD:A6:D2:EE:E3:E2:1D:A5:D7:AB:55:81:5A:9F:FC:16:F9:FF:29
X509v3 Authority Key Identifier:
keyid:4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/hd2m0u7j4h2l16tVgVqf_Bb5_yk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.111.78.0/24
Signature Algorithm: sha256WithRSAEncryption
49:96:a6:2f:13:f5:71:68:ce:ce:bf:94:62:52:bb:b4:f8:0a:
82:7f:99:e6:f9:0f:b7:54:89:64:ee:70:02:42:f0:0a:bd:ca:
87:6a:4c:02:21:1d:bd:4f:b6:a4:97:ac:65:f8:d1:9d:af:41:
11:c8:40:80:99:36:c6:9c:42:b3:ab:49:0c:be:af:35:98:38:
47:bc:44:89:d0:28:5b:97:a5:a4:a7:5b:43:e6:5b:53:6e:99:
02:e8:11:c5:9d:c6:7c:94:52:cc:47:bf:a7:f9:16:49:86:0f:
3f:0d:46:01:e1:19:69:96:4d:9f:40:84:01:47:be:df:5a:43:
31:8c:b0:c7:21:14:f3:a6:fb:4d:fe:a7:71:f7:54:46:02:da:
f4:70:bd:5c:c8:0e:39:36:8f:52:02:d5:ed:b6:d2:57:58:98:
ef:8d:42:a3:ca:ba:19:ba:c6:6b:39:d2:56:7c:a3:0c:1d:21:
10:9c:bc:69:93:97:a1:72:e6:4a:a8:1e:55:a7:68:e7:4e:90:
2d:49:1f:9b:9b:fc:7d:a0:82:15:bc:c4:15:0d:e9:2d:eb:c4:
85:60:37:58:6d:02:9b:79:11:14:7c:2f:2a:d2:62:39:fd:bf:
00:05:26:f6:5b:43:b1:8d:6d:0d:3e:17:93:b5:b6:35:33:ed:
0a:90:e9:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 03:04:54 2024 by rpki-client on console-fra.rpki-client.org