Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/3202ad-7b46-422d-a4d2-eca53a7f7762/1/tw3aHWVYqcIRF4cq1IQgnBPjQXs.roa
File: tw3aHWVYqcIRF4cq1IQgnBPjQXs.roa (raw, json)
Hash identifier: W66oO6pASFlitq2jae9ijejKG4sLeC6bXx75fntlH2U=
Subject key identifier: B7:0D:DA:1D:65:58:A9:C2:11:17:87:2A:D4:84:20:9C:13:E3:41:7B
Certificate issuer: /CN=a0afe1fed1f2b7db24a0c2d1f61010684e93cbd5
Certificate serial: 018CC94D7716D8B7556F82E2C81D31E1DF4E
Authority key identifier: A0:AF:E1:FE:D1:F2:B7:DB:24:A0:C2:D1:F6:10:10:68:4E:93:CB:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oK_h_tHyt9skoMLR9hAQaE6Ty9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/3202ad-7b46-422d-a4d2-eca53a7f7762/1/tw3aHWVYqcIRF4cq1IQgnBPjQXs.roa
Signing time: Tue 02 Jan 2024 08:32:26 +0000
ROA not before: Tue 02 Jan 2024 08:32:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48613
IP address blocks: 188.214.101.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/3202ad-7b46-422d-a4d2-eca53a7f7762/1/oK_h_tHyt9skoMLR9hAQaE6Ty9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/3202ad-7b46-422d-a4d2-eca53a7f7762/1/oK_h_tHyt9skoMLR9hAQaE6Ty9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/oK_h_tHyt9skoMLR9hAQaE6Ty9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 02:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:77:16:d8:b7:55:6f:82:e2:c8:1d:31:e1:df:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0afe1fed1f2b7db24a0c2d1f61010684e93cbd5
Validity
Not Before: Jan 2 08:32:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b70dda1d6558a9c21117872ad484209c13e3417b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:b9:c4:f6:51:1d:78:66:4d:56:99:2d:f4:27:
c6:34:21:3e:0d:7c:c7:66:85:b3:3c:79:e7:56:ee:
a6:06:65:86:09:1e:75:41:5f:cc:68:c4:06:16:0d:
40:f3:b4:8f:3b:46:8d:31:c3:18:04:fb:62:5f:5b:
f2:7c:3b:d4:fd:4f:f6:6c:10:91:f3:ef:bd:e7:86:
fb:78:95:96:38:c2:de:92:d0:f8:93:e2:7e:f5:d7:
d3:ab:9d:74:89:62:93:cd:9e:67:85:48:cb:23:99:
fc:55:b9:fb:b0:fe:f8:1a:20:1a:b8:f0:b2:f2:19:
a1:e3:27:64:5c:0e:56:2a:95:f7:3e:6b:94:89:59:
e4:f7:17:9c:60:6e:63:2f:c6:86:8b:7b:f5:eb:f9:
07:11:f2:4a:4b:b4:e8:b9:71:78:51:68:43:56:25:
44:74:ec:ef:14:6a:02:29:4c:e7:76:a5:a1:44:5b:
45:bf:43:6a:c9:11:8b:cb:0d:da:92:2a:ef:d2:33:
68:9c:ff:74:e7:3b:9d:eb:9e:d0:d0:5d:44:80:cd:
53:37:1e:83:ee:bd:3c:b2:c4:00:60:8c:a3:37:9a:
c8:de:34:50:1a:a1:ec:6a:1b:c5:8b:46:9e:3c:5a:
88:36:c0:27:54:b4:37:0f:cc:6c:6e:b8:95:04:e7:
7d:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:0D:DA:1D:65:58:A9:C2:11:17:87:2A:D4:84:20:9C:13:E3:41:7B
X509v3 Authority Key Identifier:
keyid:A0:AF:E1:FE:D1:F2:B7:DB:24:A0:C2:D1:F6:10:10:68:4E:93:CB:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oK_h_tHyt9skoMLR9hAQaE6Ty9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/3202ad-7b46-422d-a4d2-eca53a7f7762/1/tw3aHWVYqcIRF4cq1IQgnBPjQXs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/3202ad-7b46-422d-a4d2-eca53a7f7762/1/oK_h_tHyt9skoMLR9hAQaE6Ty9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.214.101.0/24
Signature Algorithm: sha256WithRSAEncryption
98:2a:f5:1f:de:41:56:8c:c5:3b:54:10:dc:0b:0a:0f:91:77:
85:b0:db:f6:91:c2:e0:37:b7:88:02:c0:d4:f3:43:52:39:6d:
61:a1:eb:55:93:77:c7:93:cf:7f:c3:b4:1d:19:cb:5f:0d:ea:
65:af:59:d2:b1:22:99:62:d7:72:a3:20:32:be:66:8e:23:cd:
ff:5f:12:a7:0b:34:e7:8c:bd:ad:5d:c6:c0:31:5e:9e:60:fa:
cc:44:65:d0:a2:0e:d5:da:82:ef:8a:29:6d:c2:3d:29:fd:5a:
ea:e9:24:65:73:55:eb:65:e1:cb:3e:c2:43:0b:6f:2d:fc:2d:
45:10:f5:39:91:d8:86:04:ed:f8:47:33:d4:b4:a7:24:d6:69:
2d:69:b7:53:29:71:c0:7b:7b:3a:f1:f3:98:76:a5:c6:58:74:
04:11:00:44:27:5a:07:9b:74:b5:e9:f2:9a:16:c0:7f:83:ff:
14:52:83:60:36:a5:c8:5b:59:d3:97:68:b8:f0:e3:e1:00:0f:
fd:4a:cd:d7:61:97:f7:fe:4e:8c:d9:f0:7f:80:b9:62:d8:27:
56:c5:8f:fa:80:a4:9e:3f:38:15:bc:6e:6e:99:8b:43:a4:54:
b6:1b:a6:02:3d:36:aa:11:1e:06:63:06:9b:4b:aa:a2:d0:69:
fd:5f:4c:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 12:44:52 2024 by rpki-client on console-ams.rpki-client.org