Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/N6irSj2KSiMOq3Aj0wFVlesZRj0.roa
File: N6irSj2KSiMOq3Aj0wFVlesZRj0.roa (raw, json)
Hash identifier: 6aqibA54OV5s5CaXhbUq4mCXtKDmfTQaq1rp1H1gbVY=
Subject key identifier: 37:A8:AB:4A:3D:8A:4A:23:0E:AB:70:23:D3:01:55:95:EB:19:46:3D
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 018E183662FF174C215B5827240278A95D75
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/N6irSj2KSiMOq3Aj0wFVlesZRj0.roa
Signing time: Thu 07 Mar 2024 09:20:01 +0000
ROA not before: Thu 07 Mar 2024 09:20:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210542
IP address blocks: 84.32.21.0/24 maxlen: 24
88.216.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.mft
rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 May 2024 02:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:18:36:62:ff:17:4c:21:5b:58:27:24:02:78:a9:5d:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Mar 7 09:20:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=37a8ab4a3d8a4a230eab7023d3015595eb19463d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:b6:d2:83:f5:f2:bf:91:b5:be:8a:4c:fc:96:
f1:1d:71:c5:1e:29:6a:8c:4b:c6:8c:4d:f8:56:5b:
f8:b8:c2:f6:a9:ee:be:7f:3c:65:00:27:a1:d2:98:
65:38:14:97:d1:0a:69:1c:a4:06:ee:0c:e6:e0:12:
ae:11:f9:e2:c8:a0:16:3a:90:a5:d4:f8:06:7c:41:
1a:b8:da:25:d1:f3:5f:77:2a:e6:54:2d:9e:4b:37:
e3:45:3f:12:ef:60:2b:72:66:1e:39:12:b6:5b:e3:
f8:28:26:49:08:90:09:42:5f:12:bb:09:0f:ee:98:
c1:a1:44:46:38:fe:35:39:58:59:5e:8c:ac:ee:3a:
3d:e5:9e:35:5f:e0:55:88:f0:c4:c9:78:ad:05:d2:
24:7c:b8:8d:e3:fa:a6:78:13:a8:6d:3a:99:fa:eb:
1e:31:f5:ce:ff:4c:0a:a6:5e:42:7e:49:3f:42:c8:
34:fa:5b:66:37:54:96:87:df:aa:08:aa:7b:e3:7a:
f2:f1:53:ce:86:c5:4d:e2:11:69:95:50:5e:9e:49:
f9:e6:16:11:e1:75:ff:4c:3c:a1:50:a7:81:20:b5:
80:70:25:84:0e:34:88:b5:bc:f6:6e:65:52:09:71:
9b:d5:a8:72:e0:66:90:70:cd:6f:7d:5a:52:cd:26:
00:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:A8:AB:4A:3D:8A:4A:23:0E:AB:70:23:D3:01:55:95:EB:19:46:3D
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/N6irSj2KSiMOq3Aj0wFVlesZRj0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.21.0/24
88.216.211.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:d3:d4:11:33:5f:bf:3b:32:fd:9d:66:a8:8b:20:6d:d1:20:
b1:94:38:3a:18:c3:4e:64:b5:95:88:56:53:dc:dd:8d:b6:2b:
66:6a:32:e9:fa:46:e6:8c:0f:f7:c7:5c:06:84:3f:88:82:6e:
1c:46:77:5a:55:34:02:34:0c:c1:a5:4e:1f:f4:eb:b4:c8:0d:
12:8e:9f:df:60:27:25:d5:7b:62:01:a6:03:19:41:47:df:22:
07:64:52:0e:85:f4:73:d9:2a:00:db:41:cc:8e:01:ca:da:61:
ec:35:08:be:f0:f8:c0:38:e1:82:a5:f0:a1:ce:fb:ef:9d:aa:
d2:b0:24:be:98:7c:36:41:dd:98:9a:6e:0b:38:33:03:91:0f:
ae:39:f8:22:dc:71:79:37:f1:03:2f:b8:b8:c7:53:b9:7a:a7:
bb:b8:c2:f4:9e:24:ea:8c:e5:84:d2:f0:ec:04:f9:ca:c9:72:
ec:c0:22:e0:9c:d6:11:6f:9a:4c:f0:ab:fa:c5:ab:74:9c:62:
76:49:0b:03:bb:3d:86:90:34:53:83:b3:1c:67:c2:91:04:a3:
ea:2c:2e:d4:13:78:c5:9a:2e:6e:c6:5b:89:86:b7:de:27:de:
da:10:22:db:a4:34:e0:8a:a7:4d:98:f2:0e:62:60:0a:a1:b8:
90:38:00:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 07:29:16 2024 by rpki-client on console-ams.rpki-client.org