Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/r13nXqYGxv3GJIuskfcDZ2FCAUI.roa
File: r13nXqYGxv3GJIuskfcDZ2FCAUI.roa (raw, json)
Hash identifier: YgatbEfDbg5mxBwm+hYpz3FdzsO6d7HeYrM0/QLeotM=
Subject key identifier: AF:5D:E7:5E:A6:06:C6:FD:C6:24:8B:AC:91:F7:03:67:61:42:01:42
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 018CC50140C3E764AB6AE8839839F23AACFB
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/r13nXqYGxv3GJIuskfcDZ2FCAUI.roa
Signing time: Mon 01 Jan 2024 12:30:42 +0000
ROA not before: Mon 01 Jan 2024 12:30:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47583
IP address blocks: 84.32.84.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.mft
rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 May 2024 14:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:40:c3:e7:64:ab:6a:e8:83:98:39:f2:3a:ac:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jan 1 12:30:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=af5de75ea606c6fdc6248bac91f7036761420142
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e8:f0:e3:5b:06:36:82:68:4f:06:c2:4f:04:
57:d9:3e:db:84:97:d3:36:b9:3c:b8:49:11:ee:95:
c9:61:db:55:43:2f:ed:cf:a2:b9:a6:74:07:89:aa:
7b:2b:a0:48:fe:08:c3:82:99:b3:19:fd:01:14:96:
93:e7:2a:1c:c2:0b:ef:cb:25:92:65:db:c5:dd:bf:
43:4d:fb:fa:ca:7d:81:2d:2b:e7:df:d0:be:d2:15:
d4:88:ba:4a:b1:03:76:3a:a1:6f:54:0a:51:c0:d2:
5b:21:a9:b6:f6:27:cf:84:ab:63:83:52:51:94:47:
17:dd:07:db:ca:6c:86:17:20:13:39:a4:73:0b:9c:
c1:95:b3:7e:70:89:56:c7:b2:d4:0e:8a:4c:a7:1d:
89:0b:cc:31:88:51:9e:64:44:0d:5a:03:34:4c:eb:
e4:77:4a:50:6d:3c:80:28:0d:e8:88:cc:55:62:2b:
23:d9:b3:15:c9:02:07:f9:44:26:a8:07:b9:61:27:
2e:56:6e:ca:49:6d:8b:6d:11:62:c8:36:21:e0:20:
e6:59:54:92:df:50:71:a6:62:31:43:76:3d:8a:21:
10:ec:c8:98:91:db:02:3e:a0:e6:92:4d:d8:45:96:
2a:1f:b6:37:fc:4a:c2:9a:20:4f:fd:d1:d5:f2:24:
23:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:5D:E7:5E:A6:06:C6:FD:C6:24:8B:AC:91:F7:03:67:61:42:01:42
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/r13nXqYGxv3GJIuskfcDZ2FCAUI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.84.0/24
Signature Algorithm: sha256WithRSAEncryption
62:fa:75:d0:a3:64:bc:01:00:23:52:9d:29:27:d8:74:57:10:
b4:d1:90:18:3a:a6:fb:09:92:fa:f5:5a:01:20:93:58:6a:3f:
cc:64:90:7a:b9:4a:ee:4f:0a:a3:99:ab:8c:c7:1d:46:76:9f:
5d:12:fb:f4:ba:3a:eb:3f:99:0d:b1:6f:61:c0:f7:21:3e:75:
86:71:08:1b:60:f0:d6:2b:cb:93:62:b0:29:e8:62:bf:16:e8:
54:d7:a5:0b:c1:c8:bc:90:ac:d5:ba:79:e5:58:cd:53:a0:e9:
52:5c:0d:22:30:4e:c6:3e:85:7a:74:ab:c6:55:88:7e:3f:ec:
1a:0a:f2:46:c8:eb:17:96:e7:38:c8:af:9b:f2:cc:01:91:5c:
18:ef:2e:84:cc:97:00:1b:13:46:48:d7:32:0f:d8:42:80:12:
44:0e:00:18:89:00:9d:42:94:1f:bd:19:4a:1c:b7:32:8e:64:
30:6b:2e:71:54:3a:f2:fe:e9:a8:36:db:d7:ed:a2:62:97:9d:
7d:f5:b7:e4:b2:c8:06:d6:5a:62:1a:95:5e:0a:e6:aa:ba:1e:
65:ce:79:19:58:55:e7:6a:fa:f9:fa:70:99:33:ef:19:6b:42:
35:07:cd:cd:3e:a1:8b:53:3c:99:af:90:85:7c:9d:e7:14:6b:
37:13:ca:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 20:55:43 2024 by rpki-client on console-fra.rpki-client.org