Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/4UMzvzpGva_ysqlPcgPlriTBCtY.roa
File: 4UMzvzpGva_ysqlPcgPlriTBCtY.roa (raw, json)
Hash identifier: ylXSDUGJYNNbqT1Uff1CCDjFUAe8YyYEdQn9eyVASGM=
Subject key identifier: E1:43:33:BF:3A:46:BD:AF:F2:B2:A9:4F:72:03:E5:AE:24:C1:0A:D6
Certificate issuer: /CN=3af09ba33b5ae581b0d29323249314f76aa10511
Certificate serial: 018CC3B7369AB854160F11DC09F4786B4921
Authority key identifier: 3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/4UMzvzpGva_ysqlPcgPlriTBCtY.roa
Signing time: Mon 01 Jan 2024 06:30:13 +0000
ROA not before: Mon 01 Jan 2024 06:30:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35169
IP address blocks: 83.206.66.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 31 May 2024 10:36:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:36:9a:b8:54:16:0f:11:dc:09:f4:78:6b:49:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3af09ba33b5ae581b0d29323249314f76aa10511
Validity
Not Before: Jan 1 06:30:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e14333bf3a46bdaff2b2a94f7203e5ae24c10ad6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:09:c5:ae:27:61:b9:5b:0d:6e:7a:1d:d4:81:
0f:0e:d1:76:0c:e1:24:5f:89:87:97:da:46:7e:2d:
99:ba:c4:e3:35:db:8d:7e:31:36:9d:de:2d:6d:bc:
1e:4c:20:10:f3:15:5d:5e:7b:01:0c:eb:c0:db:cc:
51:5e:ab:be:74:cc:75:8e:df:83:ac:1f:87:fe:f3:
46:1a:2e:9a:1f:77:52:10:18:9e:d7:a4:b8:b5:80:
81:e8:a2:00:f1:08:61:94:38:1e:38:2a:90:d2:de:
8f:0a:5a:c8:49:9e:2a:ec:4c:c3:88:81:8e:b1:a2:
7a:c9:50:cb:a9:65:9e:70:bd:bb:79:ec:a1:f1:b9:
bd:6e:95:96:5b:82:eb:3d:5d:56:f5:60:b5:ee:bb:
ae:d4:8b:3a:78:8a:9c:9a:52:25:2d:bf:bf:5a:4b:
77:68:51:62:84:90:df:75:dd:3f:71:b9:84:1a:9f:
aa:98:7e:e3:39:7e:e9:12:f2:c3:57:c2:a8:04:f3:
d4:0f:b7:93:4a:1e:6a:65:b6:d3:8b:55:f1:2e:08:
de:f4:2d:64:b1:cd:e1:9b:08:45:43:1a:62:bd:fa:
cd:c5:c2:3d:bf:0b:99:b1:76:e1:74:b1:f4:f9:4e:
31:c6:39:6a:1d:89:c4:9f:b8:2c:ac:94:41:c8:16:
5c:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:43:33:BF:3A:46:BD:AF:F2:B2:A9:4F:72:03:E5:AE:24:C1:0A:D6
X509v3 Authority Key Identifier:
keyid:3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/4UMzvzpGva_ysqlPcgPlriTBCtY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.206.66.0/24
Signature Algorithm: sha256WithRSAEncryption
37:65:f7:e4:92:9c:0a:f2:c6:b8:06:fd:76:92:2f:5e:2e:fb:
ae:f6:85:fe:81:5c:5f:1f:77:13:ab:5c:3d:7f:47:f0:3d:ed:
9c:60:95:16:31:07:ad:72:25:62:41:6b:39:70:f0:a9:f8:e0:
6b:cd:09:19:39:b2:4d:30:33:42:3b:b9:31:ec:3a:9f:6a:f5:
5d:bc:56:31:7b:dc:b6:5a:43:7f:6c:a4:d4:37:6d:96:e4:79:
ba:21:6a:fb:f3:4f:4f:f5:ab:ed:3a:4e:d1:c9:af:23:d2:bd:
e9:9e:5f:ef:0e:99:fc:aa:68:45:6f:2f:53:ea:5b:e6:0a:1f:
ec:7a:80:d9:d6:e1:13:a1:85:d0:59:6a:35:3b:6a:c4:cc:09:
31:ba:e0:62:12:aa:04:e7:c1:2a:c2:b8:8f:0d:a3:95:7d:70:
2f:1a:5d:89:ff:f0:9c:48:f6:df:13:16:f2:23:21:02:4c:43:
e0:94:0c:49:3f:f0:82:c2:f6:da:c9:b4:50:0d:9a:ed:6b:69:
55:d4:11:85:76:05:b7:a8:10:26:7f:d4:da:0a:0f:49:5f:fc:
93:6b:c8:d0:64:ca:32:51:ae:3d:db:2d:57:c5:b9:f2:20:a7:
15:a5:b1:ab:fa:83:2c:0b:64:dc:d8:bc:53:07:c6:41:71:7d:
d1:4e:bc:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 30 16:22:53 2024 by rpki-client on console-ams.rpki-client.org