Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/aXtZNKdJojYRh6R5U-l_E9BrwZo.roa
File: aXtZNKdJojYRh6R5U-l_E9BrwZo.roa (raw, json)
Hash identifier: jTsJLi8GrgZlhNYq4ncuuY17xGfrG4FlETQsiuXctX4=
Subject key identifier: 69:7B:59:34:A7:49:A2:36:11:87:A4:79:53:E9:7F:13:D0:6B:C1:9A
Certificate issuer: /CN=f4b9ea4d9d83a728dd41029e86af8a130d389ed4
Certificate serial: 018CC64A098DB1F97F1298269A057568FC1B
Authority key identifier: F4:B9:EA:4D:9D:83:A7:28:DD:41:02:9E:86:AF:8A:13:0D:38:9E:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9LnqTZ2DpyjdQQKehq-KEw04ntQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/aXtZNKdJojYRh6R5U-l_E9BrwZo.roa
Signing time: Mon 01 Jan 2024 18:29:49 +0000
ROA not before: Mon 01 Jan 2024 18:29:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 196957
IP address blocks: 193.107.172.0/22 maxlen: 22
91.234.40.0/22 maxlen: 22
2001:67c:13b8::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/9LnqTZ2DpyjdQQKehq-KEw04ntQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/9LnqTZ2DpyjdQQKehq-KEw04ntQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/9LnqTZ2DpyjdQQKehq-KEw04ntQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:09:8d:b1:f9:7f:12:98:26:9a:05:75:68:fc:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4b9ea4d9d83a728dd41029e86af8a130d389ed4
Validity
Not Before: Jan 1 18:29:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=697b5934a749a2361187a47953e97f13d06bc19a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c8:2a:77:19:18:0d:9c:2f:bb:2e:80:a0:fd:
aa:73:83:90:8c:47:ce:80:75:4d:ad:d8:0e:7b:b8:
3e:e9:ae:13:b1:95:b3:f6:ab:b4:ce:6e:c9:62:34:
b5:1f:40:b5:f4:3d:a4:e6:11:5d:ee:4d:98:c4:0a:
35:53:47:a5:fa:9c:b4:c3:75:fa:cf:30:74:f7:2d:
61:d6:a3:13:ee:ca:b9:3d:20:9e:e6:2c:9c:cc:04:
ae:8f:5e:30:83:4f:03:44:7b:83:e3:4c:3f:ff:19:
17:05:35:08:99:ec:18:15:b5:47:e7:0b:92:72:00:
f5:d5:79:4b:0f:bf:9e:f9:4b:b5:7b:2e:54:02:f6:
a3:7c:26:7c:60:28:e7:b6:d2:80:ad:32:4d:3e:ae:
fa:a5:f0:99:fb:3a:71:88:c8:58:d0:f6:61:57:c3:
05:8c:a7:e2:26:d9:25:34:53:ae:cb:ff:03:7c:5b:
20:02:3c:66:1b:d0:50:47:e9:4d:fd:08:57:43:77:
ea:98:b7:ba:8d:ff:5d:b6:70:5f:f3:79:38:30:29:
68:65:4a:1b:dc:b7:d0:a4:66:3e:60:f7:83:59:08:
d3:30:26:db:b9:a2:d8:39:9c:13:97:49:66:27:f5:
45:9a:f8:62:d3:ac:b5:3c:1a:59:54:7f:21:67:94:
7e:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:7B:59:34:A7:49:A2:36:11:87:A4:79:53:E9:7F:13:D0:6B:C1:9A
X509v3 Authority Key Identifier:
keyid:F4:B9:EA:4D:9D:83:A7:28:DD:41:02:9E:86:AF:8A:13:0D:38:9E:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LnqTZ2DpyjdQQKehq-KEw04ntQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/aXtZNKdJojYRh6R5U-l_E9BrwZo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/9LnqTZ2DpyjdQQKehq-KEw04ntQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.234.40.0/22
193.107.172.0/22
IPv6:
2001:67c:13b8::/48
Signature Algorithm: sha256WithRSAEncryption
5c:bd:d5:8c:50:58:08:38:e9:55:c0:17:e1:2f:e1:ef:db:f3:
9f:2f:cd:4e:83:ad:79:39:69:a2:7c:85:72:9c:f8:17:6e:f7:
5f:63:8d:6e:e3:41:bf:8b:25:14:26:25:1b:10:9b:18:f9:23:
54:fd:20:82:0e:c7:90:64:d6:f8:c6:a9:34:13:9f:5c:90:1f:
a3:f4:f2:db:a3:17:a9:d4:66:8a:18:38:4e:ae:52:28:f7:63:
36:c0:c2:62:04:86:ee:68:e6:6b:57:7f:87:9d:cf:2a:e5:68:
45:53:a2:6c:48:41:21:d9:91:16:0f:a9:21:b3:28:6a:65:9a:
8d:91:22:d1:ca:d3:06:bb:43:b5:e5:81:3a:99:c8:c6:b0:3a:
cf:38:32:9d:b5:00:86:79:2b:95:55:17:56:1c:ad:a4:cd:44:
5f:d1:85:46:19:0e:11:36:fb:e8:f0:f3:8f:13:a8:0a:c5:4b:
bb:f0:c1:9f:db:3e:92:65:1d:38:d4:94:d7:1a:c8:53:5c:4b:
0d:d6:c4:21:1e:1c:41:42:9b:e3:fa:b9:86:26:55:98:bf:77:
05:e4:bc:3d:67:8f:b4:0f:18:07:46:f5:bd:fa:81:5f:2c:ba:
d6:c3:b8:18:aa:ba:2b:58:45:7a:fd:19:20:5a:d1:5e:a0:b3:
97:63:0c:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 15:03:29 2024 by rpki-client on console-ams.rpki-client.org