Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/6920d2-a7a6-41a5-96e0-314ef746d8a6/1/T82VKTLz3PAW5M0U-u-2DAB5Mt8.roa
File: T82VKTLz3PAW5M0U-u-2DAB5Mt8.roa (raw, json)
Hash identifier: 4AIB/qUCeMRHNuKC1cR9OduIG6PR1WdNsYvLIWvPs/c=
Subject key identifier: 4F:CD:95:29:32:F3:DC:F0:16:E4:CD:14:FA:EF:B6:0C:00:79:32:DF
Certificate issuer: /CN=b443914a48e5dae5a756b1e3b8fbe437ee0d8b0c
Certificate serial: 018CC649FC6E428B64D2C33CEB1C38C50CAE
Authority key identifier: B4:43:91:4A:48:E5:DA:E5:A7:56:B1:E3:B8:FB:E4:37:EE:0D:8B:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tEORSkjl2uWnVrHjuPvkN-4Niww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/6920d2-a7a6-41a5-96e0-314ef746d8a6/1/T82VKTLz3PAW5M0U-u-2DAB5Mt8.roa
Signing time: Mon 01 Jan 2024 18:29:46 +0000
ROA not before: Mon 01 Jan 2024 18:29:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199670
IP address blocks: 194.0.6.0/24 maxlen: 24
194.0.37.0/24 maxlen: 24
194.0.44.0/24 maxlen: 24
194.0.43.0/24 maxlen: 24
2001:678:68::/48 maxlen: 48
2001:678:9::/48 maxlen: 48
2001:678:6c::/48 maxlen: 48
2001:678:64::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/6920d2-a7a6-41a5-96e0-314ef746d8a6/1/tEORSkjl2uWnVrHjuPvkN-4Niww.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/6920d2-a7a6-41a5-96e0-314ef746d8a6/1/tEORSkjl2uWnVrHjuPvkN-4Niww.mft
rsync://rpki.ripe.net/repository/DEFAULT/tEORSkjl2uWnVrHjuPvkN-4Niww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 01:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:49:fc:6e:42:8b:64:d2:c3:3c:eb:1c:38:c5:0c:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b443914a48e5dae5a756b1e3b8fbe437ee0d8b0c
Validity
Not Before: Jan 1 18:29:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4fcd952932f3dcf016e4cd14faefb60c007932df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:19:68:4c:6e:6c:ac:86:6f:5e:3b:3c:f6:fb:
13:0e:eb:18:28:80:be:aa:11:61:90:e0:90:3e:18:
5c:ec:6a:ce:a4:0a:6f:f0:89:07:0c:7f:74:e9:d4:
8a:e3:79:20:ec:ce:cd:fd:c6:f8:21:04:09:5c:5c:
3a:38:4a:c8:6f:c8:c2:56:31:4a:77:a0:e8:53:a6:
ba:30:2c:7f:7d:95:0f:6b:bb:c7:4a:2a:a9:5f:ef:
78:2d:f5:9a:4c:ed:c8:23:8d:d6:19:11:b5:7a:d3:
b9:20:83:26:e6:72:07:d8:8a:8d:40:13:d2:96:8a:
ef:30:f7:ab:5f:42:eb:21:bb:11:31:3e:2b:c9:b0:
27:c1:66:74:09:69:e4:e9:05:a0:f7:2b:a8:66:21:
2b:92:13:a0:7c:68:ba:b9:49:e0:b8:e6:62:ee:2f:
00:30:19:41:f3:0e:65:3b:7c:9a:2f:70:e9:ff:ce:
a3:f5:06:f2:41:ef:b6:df:97:1d:37:2a:65:09:62:
5c:c1:21:78:fa:5d:1d:45:f4:c8:ee:a2:04:c7:84:
92:7a:0f:80:bb:6b:50:85:d6:76:10:3c:7d:d4:11:
25:12:18:d8:0b:b0:9e:23:49:f7:8b:5d:fb:e5:ce:
e8:c8:a6:03:94:27:9c:d3:12:bd:c5:fb:83:d5:91:
75:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:CD:95:29:32:F3:DC:F0:16:E4:CD:14:FA:EF:B6:0C:00:79:32:DF
X509v3 Authority Key Identifier:
keyid:B4:43:91:4A:48:E5:DA:E5:A7:56:B1:E3:B8:FB:E4:37:EE:0D:8B:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tEORSkjl2uWnVrHjuPvkN-4Niww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/6920d2-a7a6-41a5-96e0-314ef746d8a6/1/T82VKTLz3PAW5M0U-u-2DAB5Mt8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/6920d2-a7a6-41a5-96e0-314ef746d8a6/1/tEORSkjl2uWnVrHjuPvkN-4Niww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.0.6.0/24
194.0.37.0/24
194.0.43.0-194.0.44.255
IPv6:
2001:678:9::/48
2001:678:64::/48
2001:678:68::/48
2001:678:6c::/48
Signature Algorithm: sha256WithRSAEncryption
9f:88:60:dc:e7:41:9b:0b:c9:ff:51:57:5b:df:33:91:17:d6:
c2:7d:93:29:75:e7:c5:aa:8f:3b:6b:bb:29:4a:64:f1:80:ef:
f3:b0:15:e8:ba:de:37:c0:f5:32:c8:e6:22:80:01:7a:33:69:
a6:b3:de:af:fc:a3:b1:68:89:35:88:e0:e0:5a:1c:af:ff:53:
8a:7a:17:cd:17:36:91:98:b9:9f:4e:7c:21:81:15:5f:c0:ad:
fd:7f:2c:1c:29:25:57:3e:b7:37:0c:60:6c:f4:f9:02:9f:3e:
57:7a:d2:a7:a2:3f:29:5d:ca:02:9e:ef:a9:4c:1e:0d:82:e3:
58:95:73:9c:44:98:9c:3e:a9:74:5e:29:a2:e3:a4:ce:55:d7:
8e:a1:92:0a:26:6b:18:05:e2:d5:78:fe:8f:d3:fc:7f:e5:57:
35:95:10:90:a9:39:b8:7c:39:1f:76:bb:ca:b8:7f:2a:14:ee:
6b:b3:e1:e7:ce:5d:1d:5e:ce:dc:30:0e:86:ae:b2:3d:a4:76:
37:cd:af:6e:2f:aa:c7:71:c1:eb:af:4d:d3:24:f5:92:de:0b:
ca:0c:cb:13:f6:59:e5:4b:f1:64:22:d2:32:39:b0:ec:44:ae:
65:2f:27:16:f2:81:7a:8d:ec:08:76:27:81:4f:d1:5e:64:49:
f0:6d:72:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 07:17:37 2024 by rpki-client on console-ams.rpki-client.org