Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/3wpLoTzyyZEqMkoxAgHx3F1tqyc.roa
File: 3wpLoTzyyZEqMkoxAgHx3F1tqyc.roa (raw, json)
Hash identifier: xTUiFIXlI/+gGuFoNodlnp1zU6s4k7DHDIq4BQNCQqk=
Subject key identifier: DF:0A:4B:A1:3C:F2:C9:91:2A:32:4A:31:02:01:F1:DC:5D:6D:AB:27
Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d
Certificate serial: 018CC348D794610B389F66677B457138BA8D
Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/3wpLoTzyyZEqMkoxAgHx3F1tqyc.roa
Signing time: Mon 01 Jan 2024 04:29:40 +0000
ROA not before: Mon 01 Jan 2024 04:29:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35276
IP address blocks: 194.6.179.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 07:02:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:d7:94:61:0b:38:9f:66:67:7b:45:71:38:ba:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d
Validity
Not Before: Jan 1 04:29:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=df0a4ba13cf2c9912a324a310201f1dc5d6dab27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:da:77:f6:dd:ed:05:d5:e1:ee:7c:06:fa:ba:
f5:d7:a6:82:bd:cf:af:ef:bf:c5:1c:b6:ff:96:c4:
02:af:38:74:e3:f6:13:52:e8:ad:b8:c6:94:d6:d9:
a0:24:7f:24:37:04:76:46:d0:fc:df:fa:2f:2d:a3:
21:99:28:cb:94:4f:7f:f1:eb:99:8c:96:11:a9:35:
de:92:94:d3:16:00:37:46:ba:a4:af:62:60:d7:98:
27:d7:16:8e:1f:5f:b4:91:09:8d:b5:56:46:e7:fb:
4d:74:45:9a:96:16:95:92:73:e9:a5:88:5b:75:68:
f6:15:06:b1:61:0a:9f:d3:95:a4:f5:d3:09:8a:09:
91:54:7c:c0:30:f4:51:50:61:92:a5:d4:02:7d:60:
49:88:1c:c7:8f:5f:99:a6:7b:bc:eb:7d:f3:b5:0b:
da:00:18:21:da:fd:eb:59:0e:d3:02:00:a5:58:f7:
d9:29:2e:a3:ca:15:7d:46:23:2f:17:09:5b:0c:a0:
28:95:42:17:16:be:00:f6:c7:aa:e2:33:84:66:ad:
e8:2d:7a:12:9f:b0:51:83:e5:dd:88:33:58:3b:8b:
6a:52:30:ab:32:a3:69:08:30:b7:74:52:a6:13:7b:
1f:34:86:3a:cd:c6:5f:a6:2d:50:36:96:f1:4b:43:
79:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:0A:4B:A1:3C:F2:C9:91:2A:32:4A:31:02:01:F1:DC:5D:6D:AB:27
X509v3 Authority Key Identifier:
keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/3wpLoTzyyZEqMkoxAgHx3F1tqyc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.6.179.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:f1:5f:95:01:cf:1e:6d:14:ac:46:69:9e:ea:66:3a:79:76:
8f:3a:27:e9:84:56:fd:80:0e:0e:44:c4:c3:99:64:af:e1:a5:
fe:55:88:59:f1:cf:89:42:d2:1f:fc:59:b9:24:83:d6:41:a3:
a4:80:1e:03:0a:3f:65:35:af:74:79:58:f0:0d:df:00:c8:e3:
bc:04:6d:81:2d:ab:b9:d7:cd:07:2a:69:d3:d3:ea:25:e0:d7:
5c:86:57:22:ea:c9:1f:6e:41:42:77:31:a5:57:0e:cb:64:38:
60:6c:ff:14:e0:ad:23:d1:f0:6a:60:94:39:52:cc:e4:e7:77:
df:b9:67:a1:b1:f3:63:dc:88:4d:7d:8f:1e:f0:8c:f2:fe:25:
30:a5:9d:49:6c:84:4d:1b:82:b8:13:c3:9d:00:56:68:c4:63:
ae:d2:9a:21:f6:85:62:f1:7f:ef:23:37:33:5c:ae:b7:27:8f:
26:26:12:b5:a8:8f:b5:0e:1b:43:4d:0b:8a:5a:02:b1:4e:8b:
58:19:d1:f8:53:41:49:13:7e:ac:84:8d:68:b7:39:0c:2f:8d:
2b:3d:26:cf:01:c0:f5:04:fe:4e:6a:88:26:59:77:41:23:47:
22:5d:db:b6:6d:39:8d:04:c7:b4:76:a3:d4:b1:53:8c:71:ff:
0d:d5:0f:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 11:45:51 2024 by rpki-client on console-fra.rpki-client.org