Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/523b95-3ddc-4818-9265-daaf29211949/1/RJu6rNfKPvDaaYn7NXBreygPomA.roa
File: RJu6rNfKPvDaaYn7NXBreygPomA.roa (raw, json)
Hash identifier: uUYl32YM5yqbE2eE8VRsR8ImnRvgvv5y20tfil5nFxY=
Subject key identifier: 44:9B:BA:AC:D7:CA:3E:F0:DA:69:89:FB:35:70:6B:7B:28:0F:A2:60
Certificate issuer: /CN=0f3f1332cff05b22a3a66a6d4c348fbc01de115c
Certificate serial: 018CC9BC941FAE2B33971152DCF9B4DB90D8
Authority key identifier: 0F:3F:13:32:CF:F0:5B:22:A3:A6:6A:6D:4C:34:8F:BC:01:DE:11:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dz8TMs_wWyKjpmptTDSPvAHeEVw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/523b95-3ddc-4818-9265-daaf29211949/1/RJu6rNfKPvDaaYn7NXBreygPomA.roa
Signing time: Tue 02 Jan 2024 10:33:48 +0000
ROA not before: Tue 02 Jan 2024 10:33:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25540
IP address blocks: 185.247.32.0/24 maxlen: 24
185.247.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/523b95-3ddc-4818-9265-daaf29211949/1/Dz8TMs_wWyKjpmptTDSPvAHeEVw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/523b95-3ddc-4818-9265-daaf29211949/1/Dz8TMs_wWyKjpmptTDSPvAHeEVw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dz8TMs_wWyKjpmptTDSPvAHeEVw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 04:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:94:1f:ae:2b:33:97:11:52:dc:f9:b4:db:90:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f3f1332cff05b22a3a66a6d4c348fbc01de115c
Validity
Not Before: Jan 2 10:33:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=449bbaacd7ca3ef0da6989fb35706b7b280fa260
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:62:bb:51:26:99:1b:26:e2:15:f9:01:2a:e8:
17:11:d3:d1:1c:bb:a2:bc:58:8c:c2:9d:67:b9:3f:
e3:98:8b:2b:19:3a:84:ad:4f:84:04:61:01:51:f9:
76:11:49:33:07:f0:e0:af:49:02:42:df:4a:b4:86:
f5:18:05:2f:6b:35:4d:5d:55:06:b9:06:e3:05:be:
5a:4a:27:60:8f:73:d7:82:3d:0b:1f:68:25:42:c3:
c5:2f:65:a4:d6:eb:39:00:ea:7d:44:fe:ef:d9:30:
c0:82:e0:33:ad:66:98:0e:81:3a:18:5b:1a:dd:e9:
d9:42:65:05:f1:ee:b2:98:7d:37:03:71:07:4a:2b:
94:75:aa:cf:9b:ad:bd:b2:65:dc:3d:ea:c6:d9:ba:
74:d9:0d:3d:ec:08:fb:06:0e:bc:b2:a4:2a:80:d6:
0a:5e:76:fa:81:74:6c:5d:c7:3d:9e:92:6f:e0:94:
93:b3:8d:ca:a0:88:7d:03:3f:ed:96:39:56:d0:6e:
ab:d4:80:f6:fc:1e:93:36:0b:93:ae:7a:98:c2:9b:
c1:d4:2e:9a:24:ab:9d:53:3a:05:f5:4a:a7:0f:db:
23:c1:f8:6c:05:17:49:76:33:3b:e5:d0:bc:7a:2c:
f0:d3:87:78:5e:69:54:88:60:23:83:36:fd:87:86:
50:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:9B:BA:AC:D7:CA:3E:F0:DA:69:89:FB:35:70:6B:7B:28:0F:A2:60
X509v3 Authority Key Identifier:
keyid:0F:3F:13:32:CF:F0:5B:22:A3:A6:6A:6D:4C:34:8F:BC:01:DE:11:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dz8TMs_wWyKjpmptTDSPvAHeEVw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/523b95-3ddc-4818-9265-daaf29211949/1/RJu6rNfKPvDaaYn7NXBreygPomA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/523b95-3ddc-4818-9265-daaf29211949/1/Dz8TMs_wWyKjpmptTDSPvAHeEVw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.247.32.0/23
Signature Algorithm: sha256WithRSAEncryption
67:93:9a:a1:d8:2f:72:aa:bf:3d:7b:f2:3d:1b:d3:37:aa:f5:
91:24:9f:3d:2d:95:a2:d0:77:1a:53:68:af:01:51:19:02:90:
8e:10:08:b0:a4:c5:c1:c3:90:0c:c5:04:87:1f:83:f2:2a:3e:
72:53:81:98:d5:34:c8:91:89:aa:e5:89:3d:a5:53:f1:1f:63:
43:27:a0:a7:f2:5a:a6:f4:db:9c:59:eb:97:46:78:67:5c:40:
ce:a2:98:d9:ff:78:f0:5a:4a:57:10:27:f5:0c:b1:0b:91:f0:
b5:a9:9e:ae:1a:a8:f8:b4:7c:54:9e:be:5b:88:59:c1:05:d8:
92:67:0d:08:e7:9b:8d:84:a0:2f:0d:20:22:94:de:d3:f1:cc:
d1:c1:d2:89:70:79:a0:d4:49:f2:33:a7:b4:2f:a5:05:59:98:
78:68:05:70:2f:fd:28:ed:7d:a0:91:d2:b4:a9:d8:c0:27:e0:
ef:03:3a:80:96:0a:f0:72:1e:fb:98:0a:54:55:ea:08:d1:19:
f4:bf:44:02:38:d2:b6:bf:dd:5d:62:62:cf:c3:1c:b4:04:c0:
54:76:8e:9c:fd:6d:3e:ef:a5:db:68:4d:42:b8:fb:2a:69:70:
73:68:03:11:ad:16:9e:0e:23:18:82:dd:ab:7c:03:c1:74:07:
a2:e2:14:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 10:25:40 2024 by rpki-client on console-fra.rpki-client.org