Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/fd2294-cf37-4fc9-9edd-a4f7b088bc1a/1/s3T6C3P5rKm-sPt4VChYKMSCfco.roa
File: s3T6C3P5rKm-sPt4VChYKMSCfco.roa (raw, json)
Hash identifier: xX6pQgwBTuf0puRL7ON4Cd/87Ind/FnKAzWlx79u7bA=
Subject key identifier: B3:74:FA:0B:73:F9:AC:A9:BE:B0:FB:78:54:28:58:28:C4:82:7D:CA
Certificate issuer: /CN=32d44919fdd08afb9a4d0a8778923011251dd7f0
Certificate serial: 018CC6499C2AEC5A8C25EB8B1A175FD0A17B
Authority key identifier: 32:D4:49:19:FD:D0:8A:FB:9A:4D:0A:87:78:92:30:11:25:1D:D7:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MtRJGf3QivuaTQqHeJIwESUd1_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/fd2294-cf37-4fc9-9edd-a4f7b088bc1a/1/s3T6C3P5rKm-sPt4VChYKMSCfco.roa
Signing time: Mon 01 Jan 2024 18:29:22 +0000
ROA not before: Mon 01 Jan 2024 18:29:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203020
IP address blocks: 185.5.146.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/fd2294-cf37-4fc9-9edd-a4f7b088bc1a/1/MtRJGf3QivuaTQqHeJIwESUd1_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/fd2294-cf37-4fc9-9edd-a4f7b088bc1a/1/MtRJGf3QivuaTQqHeJIwESUd1_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/MtRJGf3QivuaTQqHeJIwESUd1_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Jun 2024 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:49:9c:2a:ec:5a:8c:25:eb:8b:1a:17:5f:d0:a1:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32d44919fdd08afb9a4d0a8778923011251dd7f0
Validity
Not Before: Jan 1 18:29:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b374fa0b73f9aca9beb0fb7854285828c4827dca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:fc:22:18:67:f7:95:5d:4f:97:d8:8a:a2:b5:
d9:90:97:8c:67:b7:40:6a:4c:bd:63:e4:bd:b9:cf:
65:d5:f8:09:8a:98:24:22:14:78:78:4f:af:e7:59:
2d:c6:8c:76:af:19:2c:d4:2c:3a:e9:8c:0e:c3:a8:
7a:56:be:3d:89:78:26:66:75:33:1a:e2:04:b7:bd:
44:2e:0e:11:bb:5b:cf:38:e5:13:24:06:35:87:ef:
47:dd:a5:3b:8d:8d:e0:a0:6c:66:f8:97:a4:d5:49:
38:1b:9f:e4:5b:53:48:80:6e:86:ac:9a:6e:cf:b2:
a6:db:52:bb:e1:e0:80:18:0b:f4:63:33:46:41:9d:
d7:f1:50:4a:a6:66:1e:bc:b2:ce:2a:ab:06:8f:41:
33:15:a3:11:db:93:ff:97:3e:89:10:a4:f5:5b:6d:
fd:db:25:b9:9c:c8:6e:a8:db:a1:fa:dc:13:12:82:
9f:de:1e:68:b9:b7:dd:7d:ac:b1:8e:24:32:a7:32:
6e:de:54:8e:4d:7a:be:17:46:da:df:39:b0:ca:16:
0e:4b:12:8d:20:4e:29:29:1b:f2:db:1b:c5:db:ea:
13:0e:ee:79:e9:b4:52:28:81:66:9d:a9:f8:65:55:
45:15:24:d1:42:64:ff:2f:2b:32:ce:e8:e9:7b:34:
40:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:74:FA:0B:73:F9:AC:A9:BE:B0:FB:78:54:28:58:28:C4:82:7D:CA
X509v3 Authority Key Identifier:
keyid:32:D4:49:19:FD:D0:8A:FB:9A:4D:0A:87:78:92:30:11:25:1D:D7:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MtRJGf3QivuaTQqHeJIwESUd1_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/fd2294-cf37-4fc9-9edd-a4f7b088bc1a/1/s3T6C3P5rKm-sPt4VChYKMSCfco.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/fd2294-cf37-4fc9-9edd-a4f7b088bc1a/1/MtRJGf3QivuaTQqHeJIwESUd1_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.5.146.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:ec:f5:38:de:31:0f:6d:32:33:09:5d:76:88:08:b3:e9:fa:
b1:2c:c2:60:24:9b:6d:0f:a9:4e:10:9a:e7:1e:4f:76:8d:d7:
f3:a7:13:9e:8d:2d:ca:51:a6:de:e4:0c:df:b2:3f:b1:69:da:
cc:ac:a8:95:c9:3b:f0:49:02:6f:54:6f:d1:90:ce:49:e0:87:
44:86:77:7e:53:9c:22:cf:8f:9e:25:d7:73:b0:42:35:7d:b2:
de:85:09:b9:ac:25:7d:37:1c:03:c1:18:1a:a2:e0:a7:d6:82:
da:a3:98:4f:cc:01:e9:75:aa:ba:05:66:eb:eb:4c:45:d7:56:
fe:5c:c5:d1:7c:ea:b0:76:15:73:13:a6:23:fa:7a:5a:f4:14:
eb:4a:c6:10:c5:8c:29:dd:48:07:24:ac:28:cf:2c:57:33:89:
61:78:a9:29:23:a7:a0:6d:4c:94:ad:a5:7c:c3:dd:c8:7a:d1:
6b:00:d7:1d:55:cb:dd:be:33:f4:19:1e:3f:f7:da:d8:ba:54:
ab:dc:82:1f:56:16:fc:c6:68:09:f5:15:42:32:f6:fe:91:93:
1f:de:2b:27:a2:df:97:2c:12:27:d0:fb:af:9a:4b:b9:bd:6e:
03:35:a6:16:d3:06:49:d8:8d:b3:77:1b:f7:71:0e:b2:06:ee:
7a:e6:7a:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 11:44:55 2024 by rpki-client on console-fra.rpki-client.org