Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/R_psg45p-bjDX7dcxnCnMolUcHg.roa
File: R_psg45p-bjDX7dcxnCnMolUcHg.roa (raw, json)
Hash identifier: Fr+J/Grvq09kqn6YvKApr7ZQlo7WhfxVGZb99+ZdEu4=
Subject key identifier: 47:FA:6C:83:8E:69:F9:B8:C3:5F:B7:5C:C6:70:A7:32:89:54:70:78
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 018E144A0FE9F8CB4DD18359BCEA11FC69A7
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/R_psg45p-bjDX7dcxnCnMolUcHg.roa
Signing time: Wed 06 Mar 2024 15:03:01 +0000
ROA not before: Wed 06 Mar 2024 15:03:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208312
IP address blocks: 213.109.202.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 02:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:14:4a:0f:e9:f8:cb:4d:d1:83:59:bc:ea:11:fc:69:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Mar 6 15:03:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=47fa6c838e69f9b8c35fb75cc670a73289547078
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:f6:45:af:b8:fb:03:0c:a0:0d:d6:42:45:3e:
9e:4e:90:ab:5c:ac:db:93:16:3f:6c:63:db:58:b4:
24:ac:e0:2a:4a:73:16:03:e9:3a:26:f9:35:8c:06:
a2:ed:49:c3:c9:55:4f:93:7b:33:c8:25:c5:90:9a:
62:cb:2e:90:78:dc:4c:e0:5e:c5:56:a9:61:b6:6e:
5a:ef:41:3a:d8:4c:bf:7a:3f:17:0c:d7:13:bc:ad:
52:46:0c:d9:3b:1d:0c:04:ff:e0:c8:52:7b:ce:6a:
02:0f:01:68:3a:f5:c2:c8:74:e5:8a:da:33:cd:b1:
b9:7b:25:28:16:6c:84:c6:ec:cc:1f:bb:c4:df:bd:
26:01:5a:c2:1b:0f:a6:0d:6a:ef:1a:26:2d:5e:3b:
be:7d:75:85:6f:cf:f4:4f:91:36:fc:fa:91:ff:42:
44:85:a5:f4:a8:17:5d:af:42:cb:90:13:71:6f:1a:
aa:85:a5:3d:85:81:ee:36:fd:2d:63:2f:9a:64:88:
d7:de:d5:7e:e4:6a:bb:92:b9:d4:45:69:c3:0f:16:
da:7f:7f:07:95:7b:d6:e3:55:3b:9b:78:85:9b:48:
7d:32:ed:66:a5:0a:fa:27:91:ff:9f:36:27:8b:8b:
e2:1e:8d:ff:f6:f5:2a:96:40:02:3d:79:bf:04:6c:
da:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:FA:6C:83:8E:69:F9:B8:C3:5F:B7:5C:C6:70:A7:32:89:54:70:78
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/R_psg45p-bjDX7dcxnCnMolUcHg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.109.202.0/24
Signature Algorithm: sha256WithRSAEncryption
55:90:58:35:82:12:6c:be:f7:1c:e4:09:35:d7:18:c4:43:d3:
54:10:c0:2d:41:5c:1f:72:75:50:7e:4c:c1:44:8b:5f:78:17:
0a:74:0a:81:78:7f:7b:21:6f:88:46:de:6a:1c:d9:71:e7:17:
b9:42:d0:f6:e5:75:67:a1:7a:34:a6:ab:b0:90:b8:ac:f6:60:
59:c9:02:31:aa:87:da:b2:d4:c4:a6:cc:43:f6:5a:a8:c8:e1:
e7:83:9d:2a:1c:97:76:48:9b:4e:48:d7:55:a2:15:eb:2d:91:
0e:69:4f:99:e9:e4:59:4b:5b:b0:68:10:91:90:2a:d0:f8:28:
04:6c:31:b6:a5:7b:f8:27:73:aa:87:10:52:d2:d7:a4:89:fb:
08:5c:bc:da:0f:ab:7d:38:07:64:61:18:8a:60:5f:96:f2:1f:
ae:2a:8c:40:a6:48:e0:df:04:f5:6c:3e:79:d4:f9:5d:15:6c:
e3:24:6b:71:86:77:e0:d7:43:80:be:56:d2:89:af:13:66:5e:
90:6d:1b:b9:09:0a:d9:ad:57:28:d5:f4:9a:a9:64:fc:00:cd:
bb:44:96:ca:3b:f8:04:37:da:a2:73:7b:0e:d4:c0:88:ff:ef:
b7:bf:e2:8b:47:a7:d9:5b:62:ba:bf:f7:00:2c:a4:37:de:b7:
2d:fa:5b:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 12:41:47 2024 by rpki-client on console-ams.rpki-client.org