Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/69a09f-5809-4656-b355-146f254ac131/1/4IAFkdS0mfnTO5CxQCDuD5xr3rM.roa
File: 4IAFkdS0mfnTO5CxQCDuD5xr3rM.roa (raw, json)
Hash identifier: fFqGs9K3gzwb2cdyg5tG0hV2s4rrFvUP7usdv265E0w=
Subject key identifier: E0:80:05:91:D4:B4:99:F9:D3:3B:90:B1:40:20:EE:0F:9C:6B:DE:B3
Certificate issuer: /CN=7f439d942426fc673b279cc98ab35fdbd7ea97f5
Certificate serial: 018CC3B68887A6024A06AE4C6BA26BD24E91
Authority key identifier: 7F:43:9D:94:24:26:FC:67:3B:27:9C:C9:8A:B3:5F:DB:D7:EA:97:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f0OdlCQm_Gc7J5zJirNf29fql_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/69a09f-5809-4656-b355-146f254ac131/1/4IAFkdS0mfnTO5CxQCDuD5xr3rM.roa
Signing time: Mon 01 Jan 2024 06:29:28 +0000
ROA not before: Mon 01 Jan 2024 06:29:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48483
IP address blocks: 94.247.112.0/21 maxlen: 24
2a01:7a40::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/69a09f-5809-4656-b355-146f254ac131/1/f0OdlCQm_Gc7J5zJirNf29fql_U.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/69a09f-5809-4656-b355-146f254ac131/1/f0OdlCQm_Gc7J5zJirNf29fql_U.mft
rsync://rpki.ripe.net/repository/DEFAULT/f0OdlCQm_Gc7J5zJirNf29fql_U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 03:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:88:87:a6:02:4a:06:ae:4c:6b:a2:6b:d2:4e:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f439d942426fc673b279cc98ab35fdbd7ea97f5
Validity
Not Before: Jan 1 06:29:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e0800591d4b499f9d33b90b14020ee0f9c6bdeb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:f8:39:d5:a8:6e:72:94:55:af:4e:ed:9f:82:
43:05:3e:a5:a7:d9:e6:c7:fc:11:e6:4d:08:29:35:
34:bb:d5:1b:b6:d1:55:76:6d:28:8c:9b:82:9d:aa:
5a:b4:d8:38:93:b6:09:42:de:c1:3c:9d:d0:4e:cd:
12:45:3d:09:18:c7:cf:3a:15:c9:f1:4d:42:c4:bd:
de:6e:37:be:b7:81:b2:c1:f3:28:90:22:4f:a2:ec:
bd:83:c7:87:1c:2f:80:d2:40:08:20:d6:c3:af:32:
66:db:8f:65:08:b8:f5:a7:3f:cf:5b:10:5e:fb:96:
fc:3a:eb:bd:90:cb:bd:09:b0:dd:6a:1b:d2:f8:13:
6e:5f:90:6f:d9:65:8c:92:ac:b2:da:cc:27:ea:d3:
c7:4b:59:3c:f5:e5:e2:d8:e3:c0:e5:c5:9c:d2:8b:
a1:17:67:bd:77:f5:e8:44:1f:97:45:4b:22:82:5b:
3b:e8:e5:87:48:d0:50:8b:ad:9a:57:c0:02:70:6b:
d7:f1:39:1e:2c:7a:8c:25:ed:41:f8:4a:04:14:b7:
8d:68:21:2e:f7:dd:01:dc:df:d3:6d:29:56:3a:29:
5f:ec:4a:a4:50:89:56:d0:cf:d2:e2:41:48:6a:04:
f1:95:6b:21:e9:7d:42:ca:4a:fe:95:2f:70:96:e3:
d2:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:80:05:91:D4:B4:99:F9:D3:3B:90:B1:40:20:EE:0F:9C:6B:DE:B3
X509v3 Authority Key Identifier:
keyid:7F:43:9D:94:24:26:FC:67:3B:27:9C:C9:8A:B3:5F:DB:D7:EA:97:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0OdlCQm_Gc7J5zJirNf29fql_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/69a09f-5809-4656-b355-146f254ac131/1/4IAFkdS0mfnTO5CxQCDuD5xr3rM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/69a09f-5809-4656-b355-146f254ac131/1/f0OdlCQm_Gc7J5zJirNf29fql_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.247.112.0/21
IPv6:
2a01:7a40::/32
Signature Algorithm: sha256WithRSAEncryption
4c:13:c9:9d:f1:02:01:f9:8c:a4:75:3e:b6:14:b7:43:52:6a:
f1:2f:4c:f3:3a:58:48:27:c0:8d:6e:2d:05:7b:2b:4d:ad:8c:
a2:b4:bf:d5:0b:e8:8f:7b:ab:88:9a:f8:6a:4a:af:fa:9e:fe:
5d:46:94:60:7a:bd:71:3a:c8:a1:2c:90:33:ff:13:6a:ea:8a:
7d:f1:4c:f0:97:f3:f1:96:a4:8f:df:a9:83:09:62:a1:46:74:
79:bf:01:29:3c:5b:dd:18:df:86:c0:90:9e:c7:2d:a3:c0:a0:
05:b5:1c:cf:ad:2d:64:a0:ee:38:73:4e:d9:5c:bd:18:25:be:
4a:56:f3:95:89:07:ec:1f:a3:ca:16:5b:49:f5:a9:d7:24:66:
fe:73:0a:ab:37:67:3f:df:ec:c3:50:ef:b5:c8:16:0a:8f:b1:
7e:7f:2c:cf:86:31:b5:de:9d:85:5b:78:4a:37:5e:60:e6:44:
ce:bd:fb:bd:13:b9:a6:0a:07:73:3d:be:03:7e:75:78:f8:31:
fc:44:c6:80:04:da:18:cf:35:a9:74:3e:8b:19:a1:36:9b:62:
93:22:6b:eb:c9:c4:7a:64:31:6e:55:10:87:10:ac:ac:ee:4e:
02:0e:94:63:d6:7f:b6:12:c5:a1:57:6a:f9:a0:58:9f:49:1e:
cd:89:30:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 12:38:13 2024 by rpki-client on console-ams.rpki-client.org