Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/l282lfNbnqLCMV3BUBsN9dUlw3o.roa
File: l282lfNbnqLCMV3BUBsN9dUlw3o.roa (raw, json)
Hash identifier: RiclPJyk16VmGl74daO1hGlqqj00FNcUCyEEzHKxE/g=
Subject key identifier: 97:6F:36:95:F3:5B:9E:A2:C2:31:5D:C1:50:1B:0D:F5:D5:25:C3:7A
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 018CC56E16087E8A307374383472C19B9705
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/l282lfNbnqLCMV3BUBsN9dUlw3o.roa
Signing time: Mon 01 Jan 2024 14:29:35 +0000
ROA not before: Mon 01 Jan 2024 14:29:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212897
IP address blocks: 188.255.202.0/24 maxlen: 24
79.175.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 May 2024 03:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:16:08:7e:8a:30:73:74:38:34:72:c1:9b:97:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Jan 1 14:29:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=976f3695f35b9ea2c2315dc1501b0df5d525c37a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:0e:45:1d:49:a7:ec:d5:24:8e:bd:b6:a8:91:
b4:4f:e7:a8:94:f0:07:e1:ba:9f:45:2f:72:d9:1f:
3f:e1:f7:59:50:2c:41:9a:39:a5:72:a1:80:9a:68:
76:25:ec:e5:45:84:67:29:9f:ba:cd:e9:eb:6e:5b:
35:d0:c6:53:e5:60:6a:90:0d:31:0a:f3:4d:9d:21:
20:93:2a:92:93:65:fe:41:80:c7:ae:7a:28:4e:b3:
a5:f8:fc:63:e1:01:bb:6c:21:63:7e:9d:b3:80:7a:
ac:e1:c0:f1:c2:a0:ec:ef:91:87:b5:5b:42:f0:38:
8b:cb:ed:5b:7a:66:a3:80:fa:c5:10:a3:0f:23:4f:
01:fe:64:bf:5c:62:c0:3e:6e:f9:dc:10:1a:4c:1c:
b2:03:4d:59:03:86:a5:de:af:dc:1e:fe:3d:96:98:
3a:b9:a4:39:8b:79:15:76:60:a5:51:97:db:6d:40:
6d:80:4d:c7:72:61:ea:ca:18:77:7b:d4:41:dd:b7:
2b:44:65:2e:d4:60:e0:b7:f6:96:e7:b6:6d:9f:ed:
ac:23:d4:0b:29:77:66:7a:a2:04:f8:01:47:e7:7f:
d4:e2:df:18:cd:52:2c:81:8b:3a:aa:3f:15:0f:50:
37:00:55:9c:4c:28:11:34:61:71:6b:68:47:1d:0c:
72:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:6F:36:95:F3:5B:9E:A2:C2:31:5D:C1:50:1B:0D:F5:D5:25:C3:7A
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/l282lfNbnqLCMV3BUBsN9dUlw3o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.175.71.0/24
188.255.202.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:fa:12:6a:e0:0d:79:6a:68:84:d2:bb:0a:e1:70:00:a5:a5:
c6:ee:af:3e:e5:ea:93:0a:57:d6:91:b2:ad:5e:00:47:13:37:
73:62:23:8e:8f:dc:ec:6a:0c:ef:ea:34:b1:1a:d2:cc:12:4c:
d2:75:ff:7d:5b:bd:58:29:28:13:68:a6:be:94:ab:fe:7f:83:
8b:8b:55:5a:3c:f1:55:60:9c:15:88:78:32:26:22:e2:96:00:
51:36:49:65:b1:f6:1d:ee:ed:7b:23:fe:ae:7f:7c:d1:d5:1a:
74:16:35:56:5c:97:09:de:1a:7c:24:56:6e:90:fb:06:c2:8b:
6d:88:a3:cc:6f:7c:16:d6:13:63:33:be:bf:72:4c:02:f4:3b:
9e:5c:12:5f:bd:a4:e9:ae:30:2b:95:46:a3:8d:5d:f2:20:7b:
1d:d7:44:d8:f5:c5:5e:5e:39:0a:3e:3f:05:3d:70:0f:8e:14:
d3:4b:75:e9:ba:88:fb:e4:16:33:da:87:1a:65:62:54:8a:34:
72:88:0f:21:ae:73:dc:84:f4:99:01:a7:05:9e:5a:59:2a:3c:
34:00:59:0d:ba:7f:f6:b9:9b:77:0f:c3:16:5f:e2:be:4a:7f:
bd:d1:2f:70:93:37:9f:cc:fd:51:56:31:45:a2:a0:8b:f6:ec:
22:ef:26:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 25 07:43:51 2024 by rpki-client on console-ams.rpki-client.org