Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/pFxc6G7PqDeh6kFJwaYzrV_pm4s.roa
File: pFxc6G7PqDeh6kFJwaYzrV_pm4s.roa (raw, json)
Hash identifier: Ls0T7f4kV4VCD7Epv4ZQ4PbqTyl/RDQT7Bj9vhX27UY=
Subject key identifier: A4:5C:5C:E8:6E:CF:A8:37:A1:EA:41:49:C1:A6:33:AD:5F:E9:9B:8B
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 018F61BA18B0833B296936A6721502E498AA
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/pFxc6G7PqDeh6kFJwaYzrV_pm4s.roa
Signing time: Fri 10 May 2024 08:58:56 +0000
ROA not before: Fri 10 May 2024 08:58:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47479
IP address blocks: 194.28.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Jun 2024 21:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:61:ba:18:b0:83:3b:29:69:36:a6:72:15:02:e4:98:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: May 10 08:58:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a45c5ce86ecfa837a1ea4149c1a633ad5fe99b8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f4:00:f9:1e:a9:35:c8:05:8e:cf:f1:1e:19:
89:c0:5b:32:bf:fa:71:94:7d:ee:6b:15:7a:99:c7:
9c:bc:c6:9c:5c:e8:32:a9:6f:14:be:ec:9e:37:9b:
52:7f:59:77:28:2d:9c:e6:7e:53:38:07:6b:ce:f5:
e9:7c:4d:be:16:fa:c3:2d:f3:51:8d:1a:de:e4:b4:
e2:0c:a7:72:31:bf:cf:33:35:5d:25:38:bf:e0:8a:
51:f8:8b:1c:0e:d1:f4:e3:86:19:49:fe:e4:54:a7:
c1:5b:81:60:4e:ef:d8:74:19:b8:a9:a0:70:63:37:
b1:62:f2:0d:17:b7:8b:ac:6c:f0:89:a7:59:dd:99:
fb:89:85:19:b5:4a:6a:e8:4a:29:52:ec:c8:f6:e1:
25:d0:df:4c:3f:6a:ea:31:a7:ee:b4:86:ae:43:df:
9e:9a:da:cc:cb:b9:1e:b2:e4:1f:43:8e:a3:5a:a7:
8c:a9:30:66:6c:7d:fc:67:d9:b8:6a:bf:15:ad:89:
af:28:40:98:99:a3:93:e6:f1:28:b4:b4:4f:7c:a5:
e0:a1:8d:35:39:5f:7a:10:0d:7b:8a:2e:26:8b:37:
5e:03:7e:46:a4:54:1a:7a:76:48:43:32:b4:18:58:
40:17:f6:6a:1a:ad:52:11:8b:8b:f2:fb:42:29:74:
af:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:5C:5C:E8:6E:CF:A8:37:A1:EA:41:49:C1:A6:33:AD:5F:E9:9B:8B
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/pFxc6G7PqDeh6kFJwaYzrV_pm4s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.28.128.0/24
Signature Algorithm: sha256WithRSAEncryption
38:13:8a:f0:95:5e:71:6a:26:19:86:f4:87:eb:f4:96:94:7f:
d9:5a:ee:1b:7a:0a:60:09:ee:ec:ac:9d:0b:50:ab:66:ee:f8:
c9:5c:6c:48:50:9c:ac:11:b3:7b:fe:47:89:43:fa:a5:85:1b:
c5:35:c2:ab:65:e8:a6:6e:fc:24:6c:87:f6:8a:7b:18:14:ee:
08:22:ce:11:21:ba:89:98:05:21:66:55:eb:1b:48:54:cd:e9:
4a:18:78:5c:20:ae:b1:64:1e:49:e3:d6:41:eb:ea:cd:d0:f6:
c9:1f:b8:2b:e7:3b:94:67:82:1b:82:80:85:cc:08:f3:95:91:
42:84:6c:c7:3b:23:1c:b4:58:e6:2c:42:70:ba:65:68:95:9e:
74:50:b6:5b:7c:dd:29:94:fc:f5:b7:96:34:e6:29:b9:50:ba:
20:72:72:b5:60:d5:59:41:e8:86:5b:25:ae:97:66:12:52:cd:
3e:21:9d:7a:5f:da:eb:c6:da:c1:3f:e7:d1:fd:d3:e3:12:8c:
bf:3b:26:ce:25:bc:27:3b:31:13:46:3d:f6:6c:25:81:f8:3f:
96:ec:0b:4a:51:50:69:81:d8:9b:eb:a8:d8:b9:ca:f0:57:34:
f2:ae:dd:3e:3b:ea:51:16:f0:e3:0f:87:96:a1:74:00:fd:b4:
af:ce:ae:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 03:29:40 2024 by rpki-client on console-fra.rpki-client.org