Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/c4a45f-4213-4f01-98f6-98eb53b9502a/1/L3AKj8cgCd6j99Te8zVDVJePhZk.roa
File: L3AKj8cgCd6j99Te8zVDVJePhZk.roa (raw, json)
Hash identifier: R3xKN2+LkOCvveJwg1A/tP0hJhi8NyPQ5O3vJdiBXvE=
Subject key identifier: 2F:70:0A:8F:C7:20:09:DE:A3:F7:D4:DE:F3:35:43:54:97:8F:85:99
Certificate issuer: /CN=6cda1500f5c963ed234fd94859f23b32f4885dfc
Certificate serial: 018CC94E6C64B7E16D28F6FF8F9F5CBE565D
Authority key identifier: 6C:DA:15:00:F5:C9:63:ED:23:4F:D9:48:59:F2:3B:32:F4:88:5D:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bNoVAPXJY-0jT9lIWfI7MvSIXfw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/c4a45f-4213-4f01-98f6-98eb53b9502a/1/L3AKj8cgCd6j99Te8zVDVJePhZk.roa
Signing time: Tue 02 Jan 2024 08:33:29 +0000
ROA not before: Tue 02 Jan 2024 08:33:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44879
IP address blocks: 193.47.168.0/21 maxlen: 24
193.47.176.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/c4a45f-4213-4f01-98f6-98eb53b9502a/1/bNoVAPXJY-0jT9lIWfI7MvSIXfw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/c4a45f-4213-4f01-98f6-98eb53b9502a/1/bNoVAPXJY-0jT9lIWfI7MvSIXfw.mft
rsync://rpki.ripe.net/repository/DEFAULT/bNoVAPXJY-0jT9lIWfI7MvSIXfw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:6c:64:b7:e1:6d:28:f6:ff:8f:9f:5c:be:56:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cda1500f5c963ed234fd94859f23b32f4885dfc
Validity
Not Before: Jan 2 08:33:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2f700a8fc72009dea3f7d4def3354354978f8599
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a0:03:de:07:1a:cf:db:d7:12:68:3b:f1:2e:
21:b7:d0:4a:98:87:ed:be:37:f5:f4:1b:7f:bc:8d:
47:ff:89:e7:d6:21:4a:c1:c9:73:0a:c5:44:86:e4:
b9:b7:28:a2:2b:2b:31:07:e8:27:b0:74:81:71:1f:
e1:d0:80:b0:fa:07:bb:dd:98:5e:b1:37:b6:9d:61:
6c:1e:dd:c6:52:fb:10:2b:5b:05:a7:5f:c4:c2:90:
58:f0:d4:52:df:5d:86:d3:20:63:35:7f:95:2c:30:
da:44:0a:18:3b:f0:dc:cc:d4:8d:6a:db:97:4f:2e:
d3:10:ae:39:9a:9f:32:c4:9d:8b:7a:1d:9c:bd:f2:
f0:17:14:31:e9:14:b7:13:3b:7f:47:b7:50:7d:77:
4b:05:c2:9d:9a:1c:12:bb:e0:f2:66:74:39:b3:4c:
d7:7b:24:5b:b2:8f:a0:df:2c:b5:ea:bd:be:1a:cf:
4f:70:18:2b:6e:eb:db:ce:2f:c2:f4:a1:c9:93:7d:
0a:a6:e8:8e:af:42:d9:1c:5b:d0:b9:47:26:2e:fb:
e9:dc:b6:2b:65:3b:fd:2c:82:53:0a:9f:70:69:6c:
0b:0a:67:2a:89:7e:26:7b:1a:6b:08:cd:8b:b6:cd:
23:8f:d2:b5:ca:d7:22:5b:22:3f:d3:00:24:05:1b:
97:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:70:0A:8F:C7:20:09:DE:A3:F7:D4:DE:F3:35:43:54:97:8F:85:99
X509v3 Authority Key Identifier:
keyid:6C:DA:15:00:F5:C9:63:ED:23:4F:D9:48:59:F2:3B:32:F4:88:5D:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bNoVAPXJY-0jT9lIWfI7MvSIXfw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c4a45f-4213-4f01-98f6-98eb53b9502a/1/L3AKj8cgCd6j99Te8zVDVJePhZk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c4a45f-4213-4f01-98f6-98eb53b9502a/1/bNoVAPXJY-0jT9lIWfI7MvSIXfw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.47.168.0-193.47.183.255
Signature Algorithm: sha256WithRSAEncryption
54:81:d1:8c:77:60:c3:13:7c:6a:46:8f:32:bd:60:2f:90:0b:
ea:a0:94:03:2a:d8:1d:88:9b:74:89:73:08:2b:66:c3:f2:e4:
cf:1b:c4:f6:b4:4f:1f:73:fb:32:3a:69:3e:d4:f8:d6:8b:9d:
26:8c:ad:3a:e3:25:b2:1a:cf:4e:1d:af:18:0e:df:f7:21:d4:
83:76:a9:20:0e:33:dc:9a:be:e6:09:47:0b:1e:89:7d:b2:c2:
8b:55:1a:ec:1e:e9:f4:7a:b6:df:9c:2a:29:38:38:3a:47:e5:
2e:3b:55:37:af:3b:01:c4:e8:3b:57:14:28:0a:44:3a:bb:30:
34:ad:77:20:14:e3:b9:95:17:ae:e9:b1:d6:ba:13:3b:ca:f6:
6b:37:7a:dd:f8:59:76:1d:6c:19:90:f0:63:92:1b:76:03:e3:
49:43:1c:53:c8:25:be:26:83:da:2d:9d:84:4b:a9:48:96:9d:
56:7a:68:c5:26:da:42:eb:7f:27:80:bb:39:c4:6f:10:88:f7:
c9:dc:ed:ed:b4:cb:9b:64:b2:e4:20:54:35:50:33:4a:0b:89:
10:0e:6a:bb:ef:82:51:7b:a9:a6:7b:19:5b:b0:01:d0:69:0b:
68:db:35:9b:4e:1d:85:34:e3:07:72:1a:aa:3f:c0:a3:c6:cb:
28:9a:ca:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 16:49:39 2024 by rpki-client on console-ams.rpki-client.org