Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/0b4cdf-b486-4a58-800d-8ed5a79de835/1/f6XB5Ch2jADZVgESlSmgGS8dJTc.roa
File: f6XB5Ch2jADZVgESlSmgGS8dJTc.roa (raw, json)
Hash identifier: rTtT9BvV+RAH01aNnkTDs8kyIjj31Pd1YTHnEs6kqTo=
Subject key identifier: 7F:A5:C1:E4:28:76:8C:00:D9:56:01:12:95:29:A0:19:2F:1D:25:37
Certificate issuer: /CN=4e7cc8371ed24bacf67aca8b902cee706afc624b
Certificate serial: 018CC5DCA4A224756B2F7EC8CC1F665EEDC9
Authority key identifier: 4E:7C:C8:37:1E:D2:4B:AC:F6:7A:CA:8B:90:2C:EE:70:6A:FC:62:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TnzINx7SS6z2esqLkCzucGr8Yks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/0b4cdf-b486-4a58-800d-8ed5a79de835/1/f6XB5Ch2jADZVgESlSmgGS8dJTc.roa
Signing time: Mon 01 Jan 2024 16:30:20 +0000
ROA not before: Mon 01 Jan 2024 16:30:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200272
IP address blocks: 84.39.199.0/24 maxlen: 24
84.39.198.0/24 maxlen: 24
84.39.196.0/23 maxlen: 23
2a09:ee00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/0b4cdf-b486-4a58-800d-8ed5a79de835/1/TnzINx7SS6z2esqLkCzucGr8Yks.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/0b4cdf-b486-4a58-800d-8ed5a79de835/1/TnzINx7SS6z2esqLkCzucGr8Yks.mft
rsync://rpki.ripe.net/repository/DEFAULT/TnzINx7SS6z2esqLkCzucGr8Yks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 13:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:a4:a2:24:75:6b:2f:7e:c8:cc:1f:66:5e:ed:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e7cc8371ed24bacf67aca8b902cee706afc624b
Validity
Not Before: Jan 1 16:30:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7fa5c1e428768c00d95601129529a0192f1d2537
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:34:20:27:d5:6c:0f:ff:48:01:50:ae:c1:33:
a2:cc:f2:38:44:dc:b7:1d:c1:f3:a1:84:17:49:fc:
14:e6:f6:cf:9a:84:5e:fb:bd:e8:5d:2c:98:9b:e0:
46:d1:9b:8a:49:49:ab:df:da:66:4c:26:1a:bf:f0:
f2:49:ee:eb:4a:2f:25:4b:1d:73:15:ee:77:e8:32:
e5:7e:7f:0d:f0:2e:c9:f8:89:99:2b:b8:48:f4:7c:
e9:13:e9:ea:8f:1d:d5:21:1b:3d:6e:b0:48:7c:12:
a2:b2:83:20:7d:d0:75:73:a7:f9:b2:a5:78:cd:7c:
d4:b9:b7:c3:5a:3b:f9:53:1b:b8:d5:92:a1:58:dc:
8c:9d:93:5c:03:d5:ff:27:30:c9:9f:7c:81:73:bb:
06:fc:6f:d1:0f:f9:3f:62:08:d7:91:10:89:3c:d2:
35:6f:6c:6c:d2:32:a9:36:7d:c9:86:a6:ac:18:96:
a4:b6:20:3e:37:9a:ec:ac:bd:db:93:53:f2:1e:be:
19:c8:3b:b3:42:41:18:c4:39:49:77:36:fc:9b:12:
68:b5:20:0a:be:14:41:e3:ab:c0:77:d1:67:e0:1c:
4b:34:38:28:5c:6e:60:43:33:15:d5:36:0c:0f:6f:
56:16:a5:42:32:bf:20:a9:bc:db:44:54:ed:eb:a6:
b3:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:A5:C1:E4:28:76:8C:00:D9:56:01:12:95:29:A0:19:2F:1D:25:37
X509v3 Authority Key Identifier:
keyid:4E:7C:C8:37:1E:D2:4B:AC:F6:7A:CA:8B:90:2C:EE:70:6A:FC:62:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TnzINx7SS6z2esqLkCzucGr8Yks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/0b4cdf-b486-4a58-800d-8ed5a79de835/1/f6XB5Ch2jADZVgESlSmgGS8dJTc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/0b4cdf-b486-4a58-800d-8ed5a79de835/1/TnzINx7SS6z2esqLkCzucGr8Yks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.39.196.0/22
IPv6:
2a09:ee00::/29
Signature Algorithm: sha256WithRSAEncryption
7d:14:6d:75:22:d0:c9:e4:a3:6c:c6:59:78:d9:db:5e:29:84:
77:1d:f5:fb:56:74:0d:4d:56:92:65:e5:c9:6b:fe:c3:9c:e3:
16:36:95:81:ec:90:91:76:53:a1:c1:ca:7a:2d:13:46:e6:02:
45:40:e1:85:d5:a6:b1:00:54:78:cc:2d:4d:37:6c:bf:64:38:
65:bc:cf:7b:66:d5:26:8d:0f:e4:ff:7d:db:71:9e:ce:40:38:
52:1b:49:f4:0b:27:02:6a:38:0c:97:04:99:85:56:74:1d:55:
8c:46:33:16:8e:85:e4:9f:a3:ad:a7:80:43:45:d0:97:6b:96:
8d:df:a3:f4:2d:70:41:d8:46:7f:39:65:fb:b1:d9:1c:d6:3d:
f7:96:22:01:f7:6a:aa:3c:6c:23:18:3b:b0:e3:47:54:ac:67:
91:f7:8c:0e:ff:df:b7:60:cd:a8:5e:37:aa:a4:a4:61:4b:8e:
f0:e3:ad:fe:02:a7:f4:94:02:ba:f5:47:a5:2f:f0:0b:98:0f:
6c:e4:f4:e9:75:e8:7c:a3:a4:84:55:aa:4f:49:bb:ec:86:bd:
87:1c:e1:80:f1:db:1a:ce:9a:8f:ad:d3:e8:43:66:35:82:bf:
f3:c6:65:13:df:cf:bd:8b:20:bf:40:d8:70:67:d2:2f:ab:d4:
11:99:05:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 20:23:07 2024 by rpki-client on console-ams.rpki-client.org