Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/_4KowH1UoSe85hBXp_kYN6uUo-E.roa
File: _4KowH1UoSe85hBXp_kYN6uUo-E.roa (raw, json)
Hash identifier: ZGkvl2r/gM/Cls8Lj37PGyripnp5F8FdBuocK2lFn20=
Subject key identifier: FF:82:A8:C0:7D:54:A1:27:BC:E6:10:57:A7:F9:18:37:AB:94:A3:E1
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0190C541FDB02EE25A70D57360D82DD5CD33
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/_4KowH1UoSe85hBXp_kYN6uUo-E.roa
Signing time: Thu 18 Jul 2024 09:52:34 +0000
ROA not before: Thu 18 Jul 2024 09:52:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 152179
IP address blocks: 84.32.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.mft
rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:c5:41:fd:b0:2e:e2:5a:70:d5:73:60:d8:2d:d5:cd:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jul 18 09:52:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ff82a8c07d54a127bce61057a7f91837ab94a3e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:03:8e:9f:3e:8f:ed:81:71:d1:b6:39:ff:23:
52:12:84:44:5a:5d:42:6d:a6:1c:a7:02:e3:30:0c:
f5:c9:2e:67:02:21:29:ad:93:63:60:b2:4d:04:a0:
1e:e3:f7:2e:98:23:66:c6:d4:61:da:1a:9d:38:a8:
1f:ee:de:b4:88:cc:13:b1:68:f5:d1:be:d0:3b:a8:
21:a7:1f:c0:d7:2c:8f:e0:20:61:f6:7d:25:49:c0:
cf:43:d1:6e:1f:2f:ea:01:7a:f5:ac:ea:31:27:71:
07:37:c2:42:17:3d:ea:23:45:74:48:92:75:56:72:
11:c4:f8:2c:5d:60:af:01:99:2a:89:8c:ee:f5:05:
b4:30:3f:a9:8d:12:5a:14:48:aa:c6:98:61:51:52:
ea:b7:53:2b:b6:2e:f3:78:d5:c5:84:08:79:56:9c:
6d:22:22:78:28:a5:90:97:7c:cb:c5:0e:94:05:31:
d1:ae:0d:c8:d5:e1:e3:e3:66:3a:f9:24:f2:aa:80:
c6:a8:50:ac:70:9b:83:2a:41:87:8e:41:a3:6d:40:
b3:fa:5f:70:f8:7d:20:25:ea:a0:fb:0f:39:5f:56:
1e:58:c6:18:0a:c0:d8:fb:7f:9e:9c:39:58:10:5d:
cd:a7:78:4c:68:5d:07:f6:09:26:16:80:e5:6b:e7:
f0:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:82:A8:C0:7D:54:A1:27:BC:E6:10:57:A7:F9:18:37:AB:94:A3:E1
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/_4KowH1UoSe85hBXp_kYN6uUo-E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.21.0/24
Signature Algorithm: sha256WithRSAEncryption
75:97:1c:ee:d7:0a:a5:8f:64:01:38:3b:b6:e0:6d:f0:bd:b9:
2e:af:50:ec:b1:56:a2:33:c1:3b:fe:54:7f:f5:b2:0b:2a:28:
a9:d1:98:a6:85:1f:ba:cd:45:b3:04:dc:1b:9c:ac:b4:ea:84:
bc:0e:6d:5b:7c:4b:d5:fd:ec:48:40:d2:7f:1a:15:ac:96:a1:
08:60:bd:53:32:a2:4b:e4:73:08:ac:4b:6b:d8:d4:28:83:3f:
2f:63:fa:07:38:51:03:4e:bd:f7:3a:03:19:90:a9:6f:4c:82:
a3:2c:0a:26:50:06:52:64:11:c9:8e:d3:5d:8c:60:0c:0f:7d:
af:44:31:62:f7:e1:39:6f:01:82:2c:e8:2d:3c:7b:90:db:c8:
41:f8:ca:43:8b:a7:2c:75:24:45:c8:09:bc:68:27:73:d2:e4:
76:e7:10:34:bd:1c:38:56:e6:bf:99:1e:f3:20:21:1a:6c:43:
2e:50:03:25:c3:97:36:ab:3d:ea:0c:e9:38:89:d7:63:ad:58:
90:5e:dc:c0:53:7d:a6:0a:d2:c8:fc:3e:14:57:56:18:84:d3:
d8:ff:27:06:1d:c2:3f:ba:58:72:c3:a3:5f:75:a2:d3:09:bb:
29:0c:8c:4a:f6:36:10:7b:3c:cd:71:4b:56:d6:bb:7b:9c:af:
c8:64:74:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 19:29:47 2024 by rpki-client on console-ams.rpki-client.org