Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/fdd9ed-717c-460d-81a3-4cd99cd5fb1a/1/rq39Cxcjv22zN8qaanrTd64xr4o.roa
File: rq39Cxcjv22zN8qaanrTd64xr4o.roa (raw, json)
Hash identifier: NTXCeYvqcRQumTAQPPOUf3vxEbPuLjQPCRtTzhXnJ3M=
Subject key identifier: AE:AD:FD:0B:17:23:BF:6D:B3:37:CA:9A:6A:7A:D3:77:AE:31:AF:8A
Certificate issuer: /CN=dc84756dc772c06483249a987a3b1bc6e605e835
Certificate serial: 018CC56EA921F8ECFFE921208D6922C5C61C
Authority key identifier: DC:84:75:6D:C7:72:C0:64:83:24:9A:98:7A:3B:1B:C6:E6:05:E8:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3IR1bcdywGSDJJqYejsbxuYF6DU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/fdd9ed-717c-460d-81a3-4cd99cd5fb1a/1/rq39Cxcjv22zN8qaanrTd64xr4o.roa
Signing time: Mon 01 Jan 2024 14:30:12 +0000
ROA not before: Mon 01 Jan 2024 14:30:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6079
IP address blocks: 193.160.80.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/fdd9ed-717c-460d-81a3-4cd99cd5fb1a/1/3IR1bcdywGSDJJqYejsbxuYF6DU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/fdd9ed-717c-460d-81a3-4cd99cd5fb1a/1/3IR1bcdywGSDJJqYejsbxuYF6DU.mft
rsync://rpki.ripe.net/repository/DEFAULT/3IR1bcdywGSDJJqYejsbxuYF6DU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 May 2024 08:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:a9:21:f8:ec:ff:e9:21:20:8d:69:22:c5:c6:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc84756dc772c06483249a987a3b1bc6e605e835
Validity
Not Before: Jan 1 14:30:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=aeadfd0b1723bf6db337ca9a6a7ad377ae31af8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:4f:32:7f:3f:23:09:da:6d:a8:67:74:9b:51:
4f:0a:c1:32:a3:89:5f:f5:61:c3:8a:e6:6a:b2:69:
f2:30:b1:c5:7e:cb:ff:4b:9c:ef:7d:34:a7:fb:db:
9b:c6:75:56:4f:51:36:3a:0b:4f:33:6d:68:99:09:
d3:b7:c1:c2:69:30:5b:78:2a:28:0f:9d:2d:35:39:
68:bc:14:b1:c8:b0:1f:e5:ed:dc:8d:d3:06:30:fb:
a5:c4:9a:b8:f2:b3:98:7f:23:c8:9c:02:b7:44:45:
cb:32:2c:e8:01:8e:81:c6:e9:01:90:d6:f0:a1:d7:
b1:e1:5d:77:83:b6:88:af:ba:f4:cd:77:6b:92:57:
06:df:99:50:b1:a2:e1:a3:fc:15:e1:68:08:83:60:
57:56:d9:1a:11:b8:5e:11:d1:c0:6d:c3:ad:0e:d4:
28:52:5b:43:4c:f1:85:2f:25:3d:7f:01:62:b7:43:
29:07:90:3b:ed:43:a4:41:71:ea:38:4b:62:dd:2a:
ad:94:14:d8:58:76:41:ca:7f:3f:6a:56:20:ea:10:
69:5b:8e:e4:26:f2:1d:6c:0b:ff:d2:c9:32:90:e5:
6a:37:d2:91:f7:6f:dd:d6:cc:09:99:c0:a2:45:89:
92:58:20:4d:11:18:19:08:90:a2:10:ef:99:f8:5f:
c2:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:AD:FD:0B:17:23:BF:6D:B3:37:CA:9A:6A:7A:D3:77:AE:31:AF:8A
X509v3 Authority Key Identifier:
keyid:DC:84:75:6D:C7:72:C0:64:83:24:9A:98:7A:3B:1B:C6:E6:05:E8:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3IR1bcdywGSDJJqYejsbxuYF6DU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/fdd9ed-717c-460d-81a3-4cd99cd5fb1a/1/rq39Cxcjv22zN8qaanrTd64xr4o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/fdd9ed-717c-460d-81a3-4cd99cd5fb1a/1/3IR1bcdywGSDJJqYejsbxuYF6DU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.160.80.0/22
Signature Algorithm: sha256WithRSAEncryption
7e:74:78:15:be:9f:58:8f:2b:e7:a7:b9:4c:1d:82:9a:77:c5:
56:23:c9:15:bd:94:38:4c:39:0f:6e:6e:11:71:4d:95:e8:2f:
b7:bd:01:b8:e0:dc:0a:9f:ba:87:4c:80:73:ff:6d:81:bd:3f:
a8:ea:7d:1f:a1:fe:16:9e:4f:3a:13:da:ed:dc:22:9c:6d:bb:
b5:19:f9:99:74:51:0f:4e:61:7e:ef:53:3d:5e:11:3a:1e:2d:
6c:6a:f5:82:c0:74:23:0a:93:a0:36:a6:72:f4:ea:9b:e1:04:
4e:45:32:aa:1b:c1:84:90:9d:6a:ea:a1:d9:ea:f8:b7:6b:c6:
1b:aa:ca:3c:19:92:29:3d:8d:eb:31:43:ce:36:db:0f:d7:8a:
4c:e4:8c:db:dd:b3:34:43:6a:17:af:c6:2f:33:f2:0f:7c:c3:
40:2c:cc:9d:e0:07:f1:2b:50:b2:04:1d:56:24:7c:a8:b3:c0:
99:a4:4c:a4:1b:b4:26:20:1b:1a:df:b3:16:85:1c:52:60:a7:
e2:b2:2a:34:f5:28:47:6e:d2:29:ec:83:f7:cd:6a:fe:9d:fc:
1a:ed:64:c0:3f:84:b1:70:7f:ed:13:90:32:db:f4:ba:a4:e1:
47:a7:94:43:44:1e:f8:a6:df:79:ca:2d:db:66:86:6d:da:46:
5c:14:42:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 28 16:33:07 2024 by rpki-client on console-ams.rpki-client.org