Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/8c1544-7cf2-4871-a1df-0253d04fb8ff/1/4piEbtp5w2e3LNr_ullUnTg5PZY.roa
File: 4piEbtp5w2e3LNr_ullUnTg5PZY.roa (raw, json)
Hash identifier: LtXVG3ActQxP643mqM3hPNnrnp8JUHPfGXPLFtJ/VHI=
Subject key identifier: E2:98:84:6E:DA:79:C3:67:B7:2C:DA:FF:BA:59:54:9D:38:39:3D:96
Certificate issuer: /CN=943e3f4856dac2a005c3a52347114dec453934b8
Certificate serial: 018CC348922FA7C495A955406DBD2877A8D8
Authority key identifier: 94:3E:3F:48:56:DA:C2:A0:05:C3:A5:23:47:11:4D:EC:45:39:34:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lD4_SFbawqAFw6UjRxFN7EU5NLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/8c1544-7cf2-4871-a1df-0253d04fb8ff/1/4piEbtp5w2e3LNr_ullUnTg5PZY.roa
Signing time: Mon 01 Jan 2024 04:29:22 +0000
ROA not before: Mon 01 Jan 2024 04:29:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3320
IP address blocks: 176.127.0.0/17 maxlen: 17
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/8c1544-7cf2-4871-a1df-0253d04fb8ff/1/lD4_SFbawqAFw6UjRxFN7EU5NLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/8c1544-7cf2-4871-a1df-0253d04fb8ff/1/lD4_SFbawqAFw6UjRxFN7EU5NLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/lD4_SFbawqAFw6UjRxFN7EU5NLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 13 May 2024 04:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:92:2f:a7:c4:95:a9:55:40:6d:bd:28:77:a8:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=943e3f4856dac2a005c3a52347114dec453934b8
Validity
Not Before: Jan 1 04:29:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e298846eda79c367b72cdaffba59549d38393d96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:bc:e8:68:07:a2:90:bc:48:18:aa:f9:e0:a5:
e8:00:b0:aa:ea:cb:2b:65:55:a4:68:4b:0f:4d:d6:
60:54:95:10:b9:b7:6a:a9:a6:ca:0a:ac:e3:c5:89:
11:f5:ee:56:d3:22:88:9e:21:c9:92:9a:d4:98:d6:
a2:af:e2:bf:0b:46:47:5f:b8:86:47:ee:26:4a:f0:
cb:55:dc:a0:6a:86:e8:d1:5f:85:ca:96:d4:4d:d7:
57:5f:3f:f2:e9:bb:08:f1:ca:db:b1:55:f2:11:fd:
87:7c:89:14:27:77:b7:59:45:5e:4a:c3:bc:99:c8:
bd:4c:88:21:c3:ea:2b:07:ff:35:44:d5:e4:a0:02:
48:fe:0a:d2:b9:d1:ea:a4:b6:17:d9:d0:d9:ac:24:
c8:b7:fb:f3:ee:8a:68:f7:d2:d1:12:cc:58:63:ef:
43:d7:96:71:1d:27:ac:ce:85:e8:17:36:05:f7:ec:
bd:6c:ed:72:c5:2c:60:c4:f8:01:89:25:2f:ab:5e:
59:68:d9:a2:0b:a0:65:72:bf:b2:38:5e:c4:e4:b4:
c5:3b:5a:d5:1c:73:9b:86:f7:73:d5:c5:34:fd:d9:
ae:c4:34:84:5b:c0:38:ec:ce:84:c9:d8:82:73:d8:
c6:09:1b:3a:29:50:9e:9f:d5:40:cc:85:6c:4a:05:
7d:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:98:84:6E:DA:79:C3:67:B7:2C:DA:FF:BA:59:54:9D:38:39:3D:96
X509v3 Authority Key Identifier:
keyid:94:3E:3F:48:56:DA:C2:A0:05:C3:A5:23:47:11:4D:EC:45:39:34:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lD4_SFbawqAFw6UjRxFN7EU5NLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/8c1544-7cf2-4871-a1df-0253d04fb8ff/1/4piEbtp5w2e3LNr_ullUnTg5PZY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/8c1544-7cf2-4871-a1df-0253d04fb8ff/1/lD4_SFbawqAFw6UjRxFN7EU5NLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.127.0.0/17
Signature Algorithm: sha256WithRSAEncryption
72:d6:28:69:c1:24:32:8d:65:35:bd:fe:ce:cc:e8:2f:5e:b7:
89:95:9b:14:bb:93:af:18:0f:08:cb:22:08:71:3f:c7:ca:e9:
65:10:15:96:18:89:be:cb:51:73:a2:60:ff:86:64:29:4a:6a:
38:ca:a6:c7:50:a8:87:45:bc:a9:5d:4d:ea:56:e3:71:1e:18:
19:b5:62:71:8f:72:07:32:57:23:30:b1:8e:d5:22:2d:7d:f1:
86:ff:fe:23:1e:aa:c0:0c:fe:02:3e:27:e4:74:ad:9c:e8:66:
d6:5c:69:4c:f0:47:09:5a:2b:83:2d:6e:04:95:99:f4:d6:ac:
63:f1:a2:5d:fc:4b:d4:8c:64:dd:74:12:c4:0c:3d:54:06:4e:
6b:4b:b7:38:70:6e:7a:1b:27:77:9d:24:aa:6c:7b:b7:07:39:
35:d7:8d:ff:16:7f:51:cc:9f:d9:0e:6f:a0:68:4a:54:b2:2d:
b6:dc:2a:be:fe:f7:28:87:27:b4:a9:65:bd:48:b6:13:f4:01:
ce:82:3c:b8:96:84:fa:b5:8b:70:8d:f9:1f:ad:e3:55:b2:64:
03:01:60:05:b1:19:b6:fe:0d:a6:7b:3a:ff:c5:c7:6e:a8:14:
07:52:bf:7a:a0:a5:cb:c1:f7:05:d1:3d:4a:65:00:35:42:80:
cf:71:46:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 13:14:07 2024 by rpki-client on console-ams.rpki-client.org