Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/5d7cda-0a98-43ac-9136-712b1a7968e6/1/T6bOGduFaWHivSUZrRvyjC-sq8k.roa
File: T6bOGduFaWHivSUZrRvyjC-sq8k.roa (raw, json)
Hash identifier: +aDBdh5M3K4Vw50lntZ8iLhhWuX05yoh351NXDVkNEI=
Subject key identifier: 4F:A6:CE:19:DB:85:69:61:E2:BD:25:19:AD:1B:F2:8C:2F:AC:AB:C9
Certificate issuer: /CN=da024b9c63db5c1a1cf4c5581dbe5b381cb95087
Certificate serial: 018CC56DFBD505A4B634EBD8ECEF9E6A696D
Authority key identifier: DA:02:4B:9C:63:DB:5C:1A:1C:F4:C5:58:1D:BE:5B:38:1C:B9:50:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gJLnGPbXBoc9MVYHb5bOBy5UIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/5d7cda-0a98-43ac-9136-712b1a7968e6/1/T6bOGduFaWHivSUZrRvyjC-sq8k.roa
Signing time: Mon 01 Jan 2024 14:29:28 +0000
ROA not before: Mon 01 Jan 2024 14:29:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35703
IP address blocks: 193.227.204.0/23 maxlen: 23
77.75.208.0/21 maxlen: 21
193.160.156.0/23 maxlen: 23
2a00:e48::/33 maxlen: 33
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/5d7cda-0a98-43ac-9136-712b1a7968e6/1/2gJLnGPbXBoc9MVYHb5bOBy5UIc.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/5d7cda-0a98-43ac-9136-712b1a7968e6/1/2gJLnGPbXBoc9MVYHb5bOBy5UIc.mft
rsync://rpki.ripe.net/repository/DEFAULT/2gJLnGPbXBoc9MVYHb5bOBy5UIc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Jun 2024 20:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6d:fb:d5:05:a4:b6:34:eb:d8:ec:ef:9e:6a:69:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da024b9c63db5c1a1cf4c5581dbe5b381cb95087
Validity
Not Before: Jan 1 14:29:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4fa6ce19db856961e2bd2519ad1bf28c2facabc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:7d:cf:b1:ec:d3:d0:f8:69:b2:ce:f2:29:8d:
c8:5f:c5:67:73:39:bf:1b:0d:17:73:49:8a:41:6e:
7e:80:18:ea:78:84:a0:f2:6e:da:0a:b1:15:1c:ae:
62:5e:ae:c9:39:56:12:0c:d0:73:66:7d:25:14:a5:
c2:b7:b3:1b:d0:85:ba:8c:48:ab:75:ad:52:f6:ca:
f8:c4:11:2b:dd:23:11:3d:b8:58:c0:91:42:62:11:
45:2b:85:53:9a:3f:d1:85:d2:1c:46:aa:34:c4:20:
ce:67:f3:87:fc:9e:2a:9e:4f:f2:b4:23:7b:9a:26:
ec:41:ca:73:14:26:59:97:bc:03:f4:5a:dd:8e:67:
bb:a0:d0:0a:e9:32:50:0f:e1:a2:88:b0:4b:06:1b:
b6:8c:1a:40:d3:53:09:b4:6a:91:0f:b3:67:a6:18:
1f:c7:68:e8:0b:ee:80:c0:06:77:91:c5:f4:c4:76:
5a:55:0e:69:90:d7:bb:6f:96:75:5d:2f:bc:40:91:
e2:d0:03:1c:18:ee:b6:16:7f:51:91:56:fe:96:b6:
58:b0:0c:cd:2c:b9:65:26:99:dc:54:eb:b5:93:d9:
9f:31:d6:d3:3b:4b:18:20:78:3c:0c:48:75:6d:75:
8c:48:50:94:65:c9:a7:ff:46:c6:5c:7b:35:d1:00:
95:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:A6:CE:19:DB:85:69:61:E2:BD:25:19:AD:1B:F2:8C:2F:AC:AB:C9
X509v3 Authority Key Identifier:
keyid:DA:02:4B:9C:63:DB:5C:1A:1C:F4:C5:58:1D:BE:5B:38:1C:B9:50:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gJLnGPbXBoc9MVYHb5bOBy5UIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/5d7cda-0a98-43ac-9136-712b1a7968e6/1/T6bOGduFaWHivSUZrRvyjC-sq8k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/5d7cda-0a98-43ac-9136-712b1a7968e6/1/2gJLnGPbXBoc9MVYHb5bOBy5UIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.75.208.0/21
193.160.156.0/23
193.227.204.0/23
IPv6:
2a00:e48::/33
Signature Algorithm: sha256WithRSAEncryption
48:a3:4d:95:a3:d9:30:8c:8e:05:df:d3:b6:d9:84:ea:39:fc:
ad:3d:93:c4:d8:1a:11:11:b5:2d:98:80:6b:0a:b8:90:c7:78:
f0:14:a6:f0:0f:77:bd:b0:db:50:dc:2a:cc:fe:e3:46:08:ac:
a8:d3:52:3d:0e:32:b0:0b:bd:42:83:29:52:91:02:b0:04:91:
4b:c3:f4:85:05:99:6f:ad:56:fe:e9:24:48:0c:4d:b7:ba:02:
a2:4d:2a:a5:14:2c:e2:9f:8b:91:72:c6:21:1e:9c:ec:3a:51:
2e:87:60:e1:a3:75:e0:66:73:ed:f1:38:44:f4:dc:1e:6b:90:
0f:b7:9d:54:9d:a1:2d:c5:bb:ad:82:5a:45:69:32:f6:2c:63:
48:2e:7c:d7:54:96:6e:20:48:c7:aa:7c:eb:2a:de:e6:c8:dd:
66:d6:ed:14:2e:80:27:c8:f4:11:71:37:b3:69:23:ab:c6:24:
18:99:7c:52:f6:f2:0e:8f:e9:c8:61:4a:dd:f8:f7:76:90:18:
80:08:4a:a8:fb:e0:92:da:32:b7:67:bb:cf:b8:b6:67:fd:8b:
8d:a7:47:0a:28:7f:f8:19:84:0e:ef:ba:1e:ae:93:ab:0b:49:
4b:48:67:66:e5:73:44:c1:bd:b7:36:15:42:98:ff:c0:a0:78:
fc:b8:40:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 14 03:10:06 2024 by rpki-client on console-ams.rpki-client.org