Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/si6ZcdJ-vO-8yrHvX1OWKL2bRRs.roa
File: si6ZcdJ-vO-8yrHvX1OWKL2bRRs.roa (raw, json)
Hash identifier: zmcxhLRYbvgQYcCuOBPIsmwr1vrrJVN+S6L5jI4cgdw=
Subject key identifier: B2:2E:99:71:D2:7E:BC:EF:BC:CA:B1:EF:5F:53:96:28:BD:9B:45:1B
Certificate issuer: /CN=570fb0f1d8b8c198b0dc86158afbcbc529cf16be
Certificate serial: 018EA45480B7D164977B0AE1FE70B1D617DD
Authority key identifier: 57:0F:B0:F1:D8:B8:C1:98:B0:DC:86:15:8A:FB:CB:C5:29:CF:16:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/si6ZcdJ-vO-8yrHvX1OWKL2bRRs.roa
Signing time: Wed 03 Apr 2024 14:19:45 +0000
ROA not before: Wed 03 Apr 2024 14:19:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212384
IP address blocks: 194.4.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 20:58:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:a4:54:80:b7:d1:64:97:7b:0a:e1:fe:70:b1:d6:17:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=570fb0f1d8b8c198b0dc86158afbcbc529cf16be
Validity
Not Before: Apr 3 14:19:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b22e9971d27ebcefbccab1ef5f539628bd9b451b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c7:c1:21:63:a6:15:d7:79:65:bf:fc:81:9c:
f2:c8:0a:08:13:7a:3e:49:be:72:ef:76:2b:f9:bd:
92:b7:df:b5:94:0f:cf:04:3d:c9:e7:75:c5:a1:fe:
76:48:08:ad:19:e0:03:4e:37:3d:40:e4:41:68:dc:
0a:98:12:65:89:44:20:13:c6:a4:31:e1:24:fb:1f:
cc:d0:33:e3:34:a1:56:0b:df:57:e8:fc:9a:65:64:
ed:bc:1a:0f:96:e9:fa:92:28:38:9a:af:79:1e:4b:
ad:2f:5f:01:be:b0:4e:02:fe:8c:dd:b9:80:6c:d9:
b0:98:36:d7:84:2b:94:bf:78:0c:fc:57:d2:c5:97:
6c:a3:21:f7:c1:84:bb:ce:bd:e3:5f:bd:50:af:be:
f7:d9:bf:a6:3c:c1:89:87:21:3b:b7:69:1d:4f:92:
b1:ba:e0:5b:2d:71:e8:61:2a:0b:ac:02:d5:c9:89:
8e:dd:ce:0f:d8:a6:3a:00:ca:f9:c8:8a:fb:a8:a7:
ea:ed:d2:a3:a1:ab:19:40:8f:69:12:ec:1c:45:08:
3e:20:cd:4b:10:d7:c1:d4:94:7b:99:1f:8c:22:8f:
d4:8c:e7:77:b2:26:50:e6:c7:41:97:77:d2:c4:da:
c4:3b:25:6b:62:4c:31:4f:fc:05:43:ab:4f:ec:e7:
92:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:2E:99:71:D2:7E:BC:EF:BC:CA:B1:EF:5F:53:96:28:BD:9B:45:1B
X509v3 Authority Key Identifier:
keyid:57:0F:B0:F1:D8:B8:C1:98:B0:DC:86:15:8A:FB:CB:C5:29:CF:16:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/si6ZcdJ-vO-8yrHvX1OWKL2bRRs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.4.54.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:ba:86:d9:46:9f:54:de:8b:a6:c7:1e:74:6d:63:d0:f0:04:
8d:c9:b2:84:b9:63:41:7b:c2:36:ba:5d:d7:f7:f3:e0:a2:3f:
1d:9f:5a:2b:5c:01:d2:ee:27:ff:10:81:ab:50:81:9a:11:fa:
33:9e:7d:b2:c1:58:30:4c:90:ca:e7:0e:63:b4:b4:2b:73:b8:
b4:bf:66:a4:bd:5d:cd:1b:4a:c2:4f:35:41:19:48:cb:66:f2:
6d:23:a6:bf:00:9b:bc:05:3b:15:5a:28:e9:7b:3b:37:5b:35:
85:d3:f6:1a:c4:89:1b:82:f7:da:04:66:0d:cb:5a:f5:9c:a9:
15:5d:b4:94:fe:fa:99:94:16:51:78:e2:12:dd:0d:16:19:6f:
0b:73:3d:54:9f:2f:2e:e1:99:80:a8:92:f1:33:c8:32:e3:91:
cb:ae:c7:be:bd:66:74:41:54:0b:73:ef:46:40:9a:79:63:e0:
64:5e:69:7b:ae:e4:e6:b8:f1:35:46:79:a6:45:ed:a0:f9:75:
0d:0d:37:ce:4e:37:78:80:5e:3c:bc:19:fd:f2:ab:b4:d0:ca:
ab:d4:56:6d:c1:3c:f0:c9:51:be:a0:ed:03:02:57:fa:0a:bb:
22:9b:ac:24:b5:f9:12:e2:b2:aa:a9:8d:56:a3:8d:6c:58:a1:
24:3a:5b:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 02:59:16 2024 by rpki-client on console-fra.rpki-client.org