Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/3b2c00-94b6-434d-b362-96a34b022f89/1/aT307VA7pU73bds3aZebE_kp6fk.roa
File: aT307VA7pU73bds3aZebE_kp6fk.roa (raw, json)
Hash identifier: kQMWc9bleTmhLLxVAl3zLoSVtyLQOh0pvRDRxndWv6I=
Subject key identifier: 69:3D:F4:ED:50:3B:A5:4E:F7:6D:DB:37:69:97:9B:13:F9:29:E9:F9
Certificate issuer: /CN=d79f925e1738bc352bc6b5cf5ff951b3d813ae39
Certificate serial: 0190650C3A8930D45A83DDBF3F7B6303B784
Authority key identifier: D7:9F:92:5E:17:38:BC:35:2B:C6:B5:CF:5F:F9:51:B3:D8:13:AE:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/15-SXhc4vDUrxrXPX_lRs9gTrjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/3b2c00-94b6-434d-b362-96a34b022f89/1/aT307VA7pU73bds3aZebE_kp6fk.roa
Signing time: Sat 29 Jun 2024 17:30:18 +0000
ROA not before: Sat 29 Jun 2024 17:30:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35372
IP address blocks: 194.50.169.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/3b2c00-94b6-434d-b362-96a34b022f89/1/15-SXhc4vDUrxrXPX_lRs9gTrjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/3b2c00-94b6-434d-b362-96a34b022f89/1/15-SXhc4vDUrxrXPX_lRs9gTrjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/15-SXhc4vDUrxrXPX_lRs9gTrjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:65:0c:3a:89:30:d4:5a:83:dd:bf:3f:7b:63:03:b7:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d79f925e1738bc352bc6b5cf5ff951b3d813ae39
Validity
Not Before: Jun 29 17:30:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=693df4ed503ba54ef76ddb3769979b13f929e9f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:03:75:ad:a9:e5:5c:e0:eb:a5:db:99:87:bc:
a3:17:25:02:d7:b1:88:d6:e2:1e:cb:fe:5e:78:64:
b8:2b:b2:cd:0c:51:9f:66:5d:3b:b4:96:75:b0:0b:
57:f5:10:2d:bf:94:fa:ed:64:25:52:4e:66:49:83:
7c:17:d0:4a:a2:7b:63:7d:aa:bf:24:5f:53:7e:89:
57:9a:01:ae:00:69:92:28:ad:9f:be:d6:26:af:11:
ab:96:f4:e6:d5:2b:ea:ed:01:39:9f:67:49:d5:d4:
47:d7:f8:c1:49:1b:d6:78:15:0c:bf:5e:38:7d:c3:
0f:ab:3b:a9:f0:72:c6:d2:c9:5b:48:03:e3:06:28:
35:af:a0:ae:c5:92:e6:2e:45:07:cf:f4:bb:d7:0c:
89:a0:f0:a5:e9:8b:7c:63:a7:0b:99:37:99:ad:a5:
04:58:82:d0:e8:4c:12:eb:bf:f7:a7:dc:3b:4a:f4:
6c:b8:61:d8:d3:46:a3:6d:ae:47:0e:4b:9a:c3:1e:
43:ec:24:3d:b8:49:44:38:41:dd:b7:d3:4d:c3:77:
69:83:27:f1:e4:f3:2b:c9:dc:4a:07:75:1a:64:b7:
f9:e8:67:53:db:d3:e7:b6:5e:0b:8d:6f:ee:f2:c8:
e3:d6:5d:86:0d:5a:cb:15:89:6a:58:2a:2d:40:ed:
c5:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:3D:F4:ED:50:3B:A5:4E:F7:6D:DB:37:69:97:9B:13:F9:29:E9:F9
X509v3 Authority Key Identifier:
keyid:D7:9F:92:5E:17:38:BC:35:2B:C6:B5:CF:5F:F9:51:B3:D8:13:AE:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/15-SXhc4vDUrxrXPX_lRs9gTrjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/3b2c00-94b6-434d-b362-96a34b022f89/1/aT307VA7pU73bds3aZebE_kp6fk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/3b2c00-94b6-434d-b362-96a34b022f89/1/15-SXhc4vDUrxrXPX_lRs9gTrjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.169.0/24
Signature Algorithm: sha256WithRSAEncryption
c7:73:68:4a:62:af:c6:09:39:bd:7e:98:a5:44:a6:ae:2d:38:
2b:33:e4:2e:ca:00:6e:bb:7a:a1:d6:1e:42:64:0e:83:bf:a5:
0a:ac:c9:c4:d6:d6:a2:dd:4b:31:21:f9:de:bb:34:be:f8:8c:
7b:6f:ca:62:65:da:58:74:c4:27:af:48:25:c8:3c:4a:2b:66:
61:32:84:35:2c:2c:92:ea:0a:d1:d9:a4:04:dd:b5:d2:ca:10:
66:16:81:04:a3:88:4b:ba:83:67:8f:6e:75:68:ac:76:64:dc:
d8:80:0c:be:1d:e5:68:d8:9b:a9:3c:ac:61:91:83:22:2b:28:
7c:8d:00:7f:07:67:49:5a:11:c9:07:03:be:11:ff:0b:3b:28:
40:df:f3:bd:8d:e3:11:7a:72:b0:d3:10:12:84:c0:0b:15:29:
d6:34:ea:0c:71:4a:83:44:f2:c1:05:4a:d1:9d:01:85:49:03:
75:d9:48:30:d4:05:23:5f:a0:9c:4b:90:fd:44:4f:01:bb:5e:
a8:e3:d1:a0:87:9b:f5:7c:8f:28:f6:80:44:68:30:3f:3e:ef:
67:fe:08:fc:56:92:d9:6f:ef:e3:5b:1e:65:85:a0:11:93:07:
db:24:2d:48:8e:b1:a6:6d:30:88:fb:e1:af:e0:22:9d:ab:97:
28:2e:62:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:41:28 2024 by rpki-client on console-fra.rpki-client.org