Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/1-yU0WWovOc6viPUzmhLX2fw7GUo.roa
File: 1-yU0WWovOc6viPUzmhLX2fw7GUo.roa (raw, json)
Hash identifier: stjenqmX0LeY9MCpcMmz348bXqXFyMV/qNzJSvD/LJQ=
Subject key identifier: FB:25:34:59:6A:2F:39:CE:AF:88:F5:33:9A:12:D7:D9:FC:3B:19:4A
Certificate issuer: /CN=380099a81b346f9abcaf26056f5b77094d1cf113
Certificate serial: 018CCA96E952393FFF126E01FF0CF06F3CAC
Authority key identifier: 38:00:99:A8:1B:34:6F:9A:BC:AF:26:05:6F:5B:77:09:4D:1C:F1:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OACZqBs0b5q8ryYFb1t3CU0c8RM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/1-yU0WWovOc6viPUzmhLX2fw7GUo.roa
Signing time: Tue 02 Jan 2024 14:32:16 +0000
ROA not before: Tue 02 Jan 2024 14:32:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44270
IP address blocks: 79.173.112.0/20 maxlen: 21
94.243.240.0/20 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/OACZqBs0b5q8ryYFb1t3CU0c8RM.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/OACZqBs0b5q8ryYFb1t3CU0c8RM.mft
rsync://rpki.ripe.net/repository/DEFAULT/OACZqBs0b5q8ryYFb1t3CU0c8RM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 19 Jun 2024 13:02:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:96:e9:52:39:3f:ff:12:6e:01:ff:0c:f0:6f:3c:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=380099a81b346f9abcaf26056f5b77094d1cf113
Validity
Not Before: Jan 2 14:32:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fb2534596a2f39ceaf88f5339a12d7d9fc3b194a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:97:c8:7c:b6:e7:fa:2e:7a:e9:9b:df:39:0c:
96:14:ef:14:59:1b:70:73:ee:87:35:79:7d:61:45:
db:d6:cc:a4:6b:4c:0f:3c:35:c2:7b:79:fa:ae:6c:
53:1f:3a:55:2c:74:4f:3a:a9:5e:a3:4b:aa:6e:eb:
9b:d7:65:c3:29:88:31:1a:e8:92:66:17:83:63:df:
3b:38:90:81:67:b7:15:31:78:36:e9:b3:b5:8e:67:
2d:af:ea:08:77:c1:48:15:bc:fc:d2:b1:62:2e:44:
0e:3f:98:ab:4d:c0:29:fc:58:28:6e:3f:b9:62:a3:
36:4a:19:39:00:c1:4b:c6:b0:78:13:52:bf:66:59:
15:95:2a:78:f4:e3:85:35:bf:33:6b:b8:7d:46:96:
62:07:9a:9a:f2:c6:9e:3a:da:c3:84:d7:12:9f:83:
f6:d7:78:59:a9:73:97:cf:ca:40:db:a0:cb:ba:0d:
0e:43:88:fe:0e:0c:36:9e:bd:cd:19:0b:00:2d:40:
e2:49:97:7d:a2:05:7f:32:41:44:76:ee:df:0b:f3:
88:9f:ce:c8:1c:c6:d1:a4:22:b7:0b:95:91:10:8d:
40:d8:a2:16:a6:95:1d:da:ef:98:46:9d:9e:d2:30:
d5:5b:b6:c7:cd:c7:9e:0c:da:03:63:47:2a:38:52:
67:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:25:34:59:6A:2F:39:CE:AF:88:F5:33:9A:12:D7:D9:FC:3B:19:4A
X509v3 Authority Key Identifier:
keyid:38:00:99:A8:1B:34:6F:9A:BC:AF:26:05:6F:5B:77:09:4D:1C:F1:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OACZqBs0b5q8ryYFb1t3CU0c8RM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/1-yU0WWovOc6viPUzmhLX2fw7GUo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/OACZqBs0b5q8ryYFb1t3CU0c8RM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.173.112.0/20
94.243.240.0/20
Signature Algorithm: sha256WithRSAEncryption
16:5b:a8:37:88:6c:fb:41:d5:89:e3:cc:28:50:44:81:24:8e:
28:85:c4:f3:fb:3f:4e:c1:77:4e:d0:51:17:05:ee:79:49:7b:
0b:45:e2:64:6e:3d:72:b3:5f:eb:23:55:b1:37:b0:ab:9f:25:
85:55:b6:fb:24:f4:08:b5:4c:ce:46:0b:1f:6e:10:c9:1c:42:
43:c5:08:f8:7d:f5:c6:85:e1:cd:93:1b:34:7e:cc:00:a8:46:
65:99:3f:c1:0d:cc:d2:99:cc:a6:18:9c:a0:e6:17:41:8c:22:
36:45:55:99:52:dd:7c:b2:f7:61:77:6e:d3:77:b3:44:ff:f6:
d3:a7:15:40:f2:57:8f:b6:35:f5:3e:90:d5:aa:60:67:2e:3a:
2c:97:e3:36:89:c9:23:fc:48:4f:cf:b6:c8:a8:82:db:78:dc:
1a:67:f3:76:fe:8f:27:8e:97:7b:80:cd:f2:e7:d9:24:6d:88:
01:a0:1f:f5:7f:8f:1e:23:e7:b3:4e:8e:eb:aa:07:bd:05:bd:
11:54:ac:ed:ec:37:0f:a7:e1:44:74:46:b5:e7:3b:45:36:1a:
cb:e4:7b:11:fa:9f:06:16:d3:bb:d1:42:2b:f7:e7:e6:5a:ce:
06:ec:f3:0a:8a:90:c9:df:65:3c:af:3d:3f:69:a3:95:ad:a0:
3e:1a:15:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 18 19:04:16 2024 by rpki-client on console-fra.rpki-client.org