Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/r4Eaj--rFMB9wD8kdGoigBut7Bw.roa
File: r4Eaj--rFMB9wD8kdGoigBut7Bw.roa (raw, json)
Hash identifier: KCqy8YkMTkhA91IbnEh3vbgp23oF7sxxnYRptoSOEAM=
Subject key identifier: AF:81:1A:8F:EF:AB:14:C0:7D:C0:3F:24:74:6A:22:80:1B:AD:EC:1C
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 018CCA2A666DAE2D9BAFAC3108CBF8172C25
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/r4Eaj--rFMB9wD8kdGoigBut7Bw.roa
Signing time: Tue 02 Jan 2024 12:33:45 +0000
ROA not before: Tue 02 Jan 2024 12:33:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9123
IP address blocks: 82.97.240.0/20 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:66:6d:ae:2d:9b:af:ac:31:08:cb:f8:17:2c:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Jan 2 12:33:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=af811a8fefab14c07dc03f24746a22801badec1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:ae:bc:ba:56:48:69:f7:79:17:16:71:49:76:
83:a9:88:79:fa:42:0e:12:82:2f:78:ab:eb:e7:ee:
7b:45:26:e4:55:e2:db:e1:00:78:e8:18:3a:0d:a3:
ef:77:a6:b6:0f:8c:07:4c:e6:54:17:e7:c0:cb:b0:
2d:ae:c8:89:18:60:d1:f1:7c:b9:e7:f3:0f:05:5c:
c9:6f:79:d2:9d:af:b8:f9:59:df:6d:38:44:ef:1c:
2d:be:02:5c:e4:76:54:b0:d2:c8:49:7e:7a:a7:34:
d4:4f:f2:71:02:71:05:7e:84:f1:b9:fe:83:ab:b6:
06:b3:ed:77:63:f0:1b:5c:ce:e2:c4:e1:bd:b8:c3:
81:20:db:30:99:65:11:48:d9:a3:5f:9e:3e:7b:0c:
cb:fd:60:0d:d3:6b:cd:dc:15:ff:99:17:86:73:91:
06:91:9f:4e:78:19:01:98:ac:ea:48:ad:b6:70:e3:
49:3b:9d:f7:90:d6:17:3a:a8:34:44:b4:5e:83:6a:
83:ca:89:50:28:67:30:40:5f:2f:5d:e1:02:2c:fd:
1a:56:3b:a6:9c:67:3f:96:29:9c:25:30:ae:f4:2e:
f2:82:6e:7e:ff:e4:2a:5a:8e:6d:6d:53:2a:00:47:
04:21:5b:05:29:ca:9f:41:34:84:d3:2b:73:ae:ac:
93:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:81:1A:8F:EF:AB:14:C0:7D:C0:3F:24:74:6A:22:80:1B:AD:EC:1C
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/r4Eaj--rFMB9wD8kdGoigBut7Bw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.97.240.0/20
Signature Algorithm: sha256WithRSAEncryption
22:2b:23:18:40:c1:85:07:42:fb:ab:c4:ec:4e:e4:1f:40:9f:
19:5d:46:6e:6f:57:9b:86:71:64:6b:25:c1:bd:c5:34:dd:4c:
ce:be:86:d1:ff:23:0f:2a:0c:66:b8:d3:6e:3d:37:26:aa:34:
b7:13:69:d3:f7:25:76:48:52:7b:bf:ad:66:30:41:2d:9d:f2:
34:66:59:e0:24:57:b8:3b:fb:ae:c2:45:1c:8d:0c:6f:e4:24:
96:b2:7b:29:9a:13:27:1e:6a:b2:79:c5:9f:10:48:da:06:0a:
63:6d:3c:13:85:fc:f7:ff:f1:46:a3:28:f2:df:c3:ca:f6:f8:
ca:f8:b4:ac:f5:3f:f5:b3:d2:3b:31:4f:a3:62:54:41:0d:c3:
83:d9:06:3e:8d:5e:78:b3:b6:a8:76:0e:72:f7:a8:b2:6d:4c:
e7:34:0d:ef:03:82:3b:dd:9f:dd:48:86:06:d5:8c:c9:b1:23:
47:e1:0f:a8:bc:b4:29:37:54:0a:7c:02:90:4a:4f:52:b9:21:
d3:5c:05:23:a0:55:e8:b9:b9:f6:a3:31:6f:74:69:b1:f7:a6:
af:96:89:33:41:f9:61:62:52:51:3e:34:e4:1c:24:36:f8:aa:
cf:6c:b2:2d:83:09:25:85:a4:81:fb:ad:ba:41:53:68:cb:ce:
43:1d:0d:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 21:02:09 2024 by rpki-client on console-fra.rpki-client.org