Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/813cbc-4fa4-4646-a8db-1d28a60e0e30/1/Tx0-fHK4wfbqVdMqsnour8GjaWo.roa
File: Tx0-fHK4wfbqVdMqsnour8GjaWo.roa (raw, json)
Hash identifier: NSqNrowZEGVYEyzwiHPFEXaOpzgkzNQnyILR2AYZ8/g=
Subject key identifier: 4F:1D:3E:7C:72:B8:C1:F6:EA:55:D3:2A:B2:7A:2E:AF:C1:A3:69:6A
Certificate issuer: /CN=07d44a52778aa65f736e72436003f6654f268318
Certificate serial: 018CC3B67CE33F1B4CB08240EDDCF4ED2542
Authority key identifier: 07:D4:4A:52:77:8A:A6:5F:73:6E:72:43:60:03:F6:65:4F:26:83:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B9RKUneKpl9zbnJDYAP2ZU8mgxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/813cbc-4fa4-4646-a8db-1d28a60e0e30/1/Tx0-fHK4wfbqVdMqsnour8GjaWo.roa
Signing time: Mon 01 Jan 2024 06:29:25 +0000
ROA not before: Mon 01 Jan 2024 06:29:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20523
IP address blocks: 193.224.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/813cbc-4fa4-4646-a8db-1d28a60e0e30/1/B9RKUneKpl9zbnJDYAP2ZU8mgxg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/813cbc-4fa4-4646-a8db-1d28a60e0e30/1/B9RKUneKpl9zbnJDYAP2ZU8mgxg.mft
rsync://rpki.ripe.net/repository/DEFAULT/B9RKUneKpl9zbnJDYAP2ZU8mgxg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Sep 2024 19:54:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:7c:e3:3f:1b:4c:b0:82:40:ed:dc:f4:ed:25:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07d44a52778aa65f736e72436003f6654f268318
Validity
Not Before: Jan 1 06:29:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4f1d3e7c72b8c1f6ea55d32ab27a2eafc1a3696a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:a8:e2:78:5a:dd:4b:37:e7:44:f5:3a:b3:54:
77:8a:e8:7a:9c:6e:21:cc:24:1a:47:ca:0b:84:26:
72:34:f5:ef:26:05:1e:c0:2e:85:52:45:5a:ae:66:
bd:26:cb:48:9a:61:52:f4:c6:66:f5:4a:07:c1:df:
ac:12:f1:29:23:19:c5:6f:9c:4f:e0:b9:7d:7b:94:
27:18:f0:71:b1:e8:06:e1:5e:b1:ce:d3:81:6f:21:
ba:b1:a9:fa:20:25:e8:c1:1a:b5:47:0f:0d:ab:07:
fe:d1:8a:4e:b0:5f:1a:e2:41:50:95:25:38:d5:ed:
6e:9c:3e:35:87:bd:aa:76:1a:f7:ed:03:37:39:f0:
47:f3:73:7e:18:91:21:8a:77:ff:dd:56:f9:3f:4f:
7d:0a:c1:d6:8c:5a:54:f8:01:ec:bd:fe:c7:9b:8e:
49:ee:e4:0b:ff:65:56:2b:06:cf:dd:0a:c0:b1:4c:
38:f1:5d:58:e4:20:20:7c:f3:48:49:d4:81:36:b5:
eb:17:ef:14:72:6d:6f:11:61:ed:4d:dc:69:04:d5:
e5:24:23:fe:7c:20:ce:b9:b7:11:d2:55:18:e3:63:
48:38:8f:c0:2e:e4:f7:27:cb:45:33:7d:4c:90:06:
2b:c7:6f:f6:cb:45:d0:29:09:de:ac:f8:d1:71:2d:
b6:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:1D:3E:7C:72:B8:C1:F6:EA:55:D3:2A:B2:7A:2E:AF:C1:A3:69:6A
X509v3 Authority Key Identifier:
keyid:07:D4:4A:52:77:8A:A6:5F:73:6E:72:43:60:03:F6:65:4F:26:83:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9RKUneKpl9zbnJDYAP2ZU8mgxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/813cbc-4fa4-4646-a8db-1d28a60e0e30/1/Tx0-fHK4wfbqVdMqsnour8GjaWo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/813cbc-4fa4-4646-a8db-1d28a60e0e30/1/B9RKUneKpl9zbnJDYAP2ZU8mgxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.224.239.0/24
Signature Algorithm: sha256WithRSAEncryption
70:e6:ae:53:12:23:d9:86:e4:bf:29:37:eb:20:33:36:9f:50:
f1:b0:93:f1:a1:05:a8:f1:da:7b:9d:85:1f:42:ba:fa:0c:c1:
89:68:4f:5d:b7:0d:fb:26:97:79:1e:3b:1d:35:01:ea:2b:64:
fe:a9:21:3c:40:b4:66:0f:15:8b:8d:17:71:2f:1b:d3:2b:e3:
1e:60:14:7a:83:f2:7a:1e:a6:05:e2:00:51:1a:7d:ba:df:5b:
ae:ab:a4:14:48:1d:85:c8:0e:a5:b3:e2:dc:a0:ba:42:bb:8b:
e3:e4:e9:6f:91:bf:d8:a3:b4:dd:33:db:ef:0e:ed:12:90:07:
be:87:25:1e:d2:28:20:c0:f3:1f:41:bf:9e:68:b2:86:23:0b:
6f:5c:1d:cf:71:2b:56:74:a7:9c:23:c0:b0:56:5c:5f:65:9f:
31:95:bf:5b:49:4a:1b:f2:67:ab:1c:f7:70:a3:b7:e7:5c:72:
a2:d3:d1:98:46:05:4f:c6:6d:00:96:5e:45:e0:49:40:3e:28:
c1:34:6b:34:46:a2:73:7a:19:5a:dc:91:35:43:0a:ac:c8:3d:
55:b1:8d:ee:cb:68:40:4f:8b:22:17:a6:70:05:fc:08:dd:e0:
7a:e0:ad:8f:01:4b:03:5e:81:60:17:a7:0e:69:93:51:2a:3a:
51:29:cd:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 01:52:03 2024 by rpki-client on console-ams.rpki-client.org