Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/6ogwrwNJrkqjuIafO-iZiuxQKy4.roa
File: 6ogwrwNJrkqjuIafO-iZiuxQKy4.roa (raw, json)
Hash identifier: jRbXd3hhqanERuhyFJeD8fOlmmmCJzJvo9if3qfkJEQ=
Subject key identifier: EA:88:30:AF:03:49:AE:4A:A3:B8:86:9F:3B:E8:99:8A:EC:50:2B:2E
Certificate issuer: /CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Certificate serial: 018CC9BCA81548ED8548F9A9D0B37D47A3A2
Authority key identifier: F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/6ogwrwNJrkqjuIafO-iZiuxQKy4.roa
Signing time: Tue 02 Jan 2024 10:33:53 +0000
ROA not before: Tue 02 Jan 2024 10:33:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61272
IP address blocks: 213.252.244.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:a8:15:48:ed:85:48:f9:a9:d0:b3:7d:47:a3:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Validity
Not Before: Jan 2 10:33:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ea8830af0349ae4aa3b8869f3be8998aec502b2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ba:76:7a:6a:ae:c0:b8:25:bb:9e:6b:25:0b:
df:51:47:98:d5:0c:83:a9:14:66:47:b0:0e:95:06:
92:80:8f:1b:33:a4:30:c4:af:ca:30:71:ef:dc:11:
e9:8b:81:9b:8d:c6:8f:bc:81:fd:bc:1c:44:87:f9:
b9:ab:84:65:ef:b9:3c:fc:10:bb:08:17:05:92:bc:
e7:b3:f0:e7:6b:3c:b1:13:cb:03:74:69:e0:98:87:
e1:1c:e2:68:97:e1:a8:45:f6:0b:ac:44:03:1b:6f:
6b:56:db:00:9e:cb:8e:10:90:35:4c:14:36:3f:fc:
2d:11:20:b4:2e:bd:ba:10:7b:8f:ac:03:e4:01:22:
cf:ec:18:18:b7:cb:3a:a1:80:3a:15:28:f1:bf:99:
44:0d:20:cd:fa:05:52:5d:96:98:83:74:28:a3:e3:
db:a5:c7:7c:16:36:e3:c8:4c:08:3c:ef:c4:cf:67:
b0:be:a5:3e:61:be:b8:4a:2f:3e:e1:8f:79:fb:b5:
39:92:0d:85:1c:13:e1:c2:f7:d7:be:7f:21:be:57:
2f:5d:2c:15:6a:b4:e0:62:36:9c:55:c7:3f:b8:16:
3f:14:03:fd:d6:a0:6c:d8:5c:3b:ce:65:88:13:41:
db:8c:13:b2:c8:2c:bb:db:4d:26:f1:3f:79:42:63:
e6:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:88:30:AF:03:49:AE:4A:A3:B8:86:9F:3B:E8:99:8A:EC:50:2B:2E
X509v3 Authority Key Identifier:
keyid:F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/6ogwrwNJrkqjuIafO-iZiuxQKy4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.252.244.0/22
Signature Algorithm: sha256WithRSAEncryption
8c:bf:9d:fc:7c:d9:ef:d8:01:aa:f7:42:18:39:ff:2c:4a:56:
aa:76:fc:50:d2:a5:9c:79:0e:21:4e:54:82:fb:3b:45:6b:e2:
e2:b7:17:30:5b:7e:8c:c3:1c:e6:02:8e:ab:95:ed:5d:21:cc:
6f:8e:46:df:a6:d8:e9:de:81:c6:2e:9c:4e:25:36:41:cb:41:
fb:64:2b:88:7c:a7:8f:97:9a:96:d0:5c:a1:1a:16:ec:cb:30:
e0:8d:dc:a1:b6:72:43:c0:4f:e6:e3:90:76:12:87:e2:5e:3f:
e2:c1:36:a7:2e:d3:6f:84:a0:98:93:8b:89:83:99:06:a4:8b:
9f:50:a0:bf:e8:60:6d:32:3c:79:25:b4:1a:66:2b:cb:41:f9:
34:d0:a2:f5:1e:9c:5e:3d:76:f8:72:76:5d:dd:7b:a5:7e:e7:
9f:ec:6d:2e:92:dc:5b:4d:d1:79:f9:62:df:f0:0d:2b:6c:a9:
fb:26:a1:d6:39:66:a3:d3:8c:52:38:e0:b8:1f:32:7a:02:5e:
81:b5:03:ba:86:41:14:14:cd:25:9b:c6:68:71:11:f3:c9:d3:
c9:eb:15:9b:8a:1d:c9:c4:c5:b7:b0:3d:17:d4:91:a1:3b:a5:
23:a1:64:63:21:e4:9a:75:66:bb:eb:86:7d:e8:6c:10:48:3e:
26:e1:a3:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:44:35 2024 by rpki-client on console-fra.rpki-client.org