Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/a4YsGT-AwRqEZqUc_gFJdMQqb1M.roa
File: a4YsGT-AwRqEZqUc_gFJdMQqb1M.roa (raw, json)
Hash identifier: U3agAORIA0H2LAsf5q7/o3vqT0lHAYKjazdYqGzW2pY=
Subject key identifier: 6B:86:2C:19:3F:80:C1:1A:84:66:A5:1C:FE:01:49:74:C4:2A:6F:53
Certificate issuer: /CN=3919f2ad91584baff0467447bac8fb978d1f9dd3
Certificate serial: 018CC34904EC8C3EFF21ED7CC76E6FCA8B66
Authority key identifier: 39:19:F2:AD:91:58:4B:AF:F0:46:74:47:BA:C8:FB:97:8D:1F:9D:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ORnyrZFYS6_wRnRHusj7l40fndM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/a4YsGT-AwRqEZqUc_gFJdMQqb1M.roa
Signing time: Mon 01 Jan 2024 04:29:51 +0000
ROA not before: Mon 01 Jan 2024 04:29:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20864
IP address blocks: 213.143.224.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/ORnyrZFYS6_wRnRHusj7l40fndM.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/ORnyrZFYS6_wRnRHusj7l40fndM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ORnyrZFYS6_wRnRHusj7l40fndM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 09 Jun 2024 05:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:04:ec:8c:3e:ff:21:ed:7c:c7:6e:6f:ca:8b:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3919f2ad91584baff0467447bac8fb978d1f9dd3
Validity
Not Before: Jan 1 04:29:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6b862c193f80c11a8466a51cfe014974c42a6f53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:70:03:0f:2f:41:56:91:0b:9b:5f:fd:b6:68:
0f:4c:04:6d:b2:16:c6:9a:d5:75:c6:90:22:03:50:
20:12:92:7f:0c:1b:44:53:32:22:c2:8f:2b:83:f6:
67:3b:4c:57:3b:cc:a0:a6:ad:0d:37:3d:58:af:94:
af:01:99:59:04:5c:12:17:06:ba:21:38:54:2d:7b:
e9:d8:12:1f:e8:bb:40:8b:3f:03:f9:e3:58:d3:9f:
26:60:03:56:0b:c2:81:d2:21:2e:60:13:41:6e:0c:
aa:32:07:75:9b:e9:b0:25:e5:a6:42:51:da:9d:c9:
0b:7c:9f:83:ce:34:21:7a:22:f6:09:dc:17:5b:03:
69:c1:d7:64:5f:52:c4:ff:60:8d:0e:0c:a4:a6:ec:
85:a1:bc:31:a9:26:e3:02:e3:e8:f3:21:c7:fe:53:
e9:a1:da:6a:30:5d:3f:1f:2b:9c:54:3b:ab:3f:55:
cc:c4:9c:a6:44:ad:02:a5:8b:7f:f3:2e:f8:9e:54:
5f:e9:d4:9e:af:b6:c5:56:e6:a7:75:60:5d:42:77:
8e:59:a9:2f:d9:6a:9b:cd:a4:16:88:ac:ec:7b:63:
3c:a7:a9:4c:70:8c:30:78:a3:d0:f9:61:da:75:30:
15:24:4d:51:16:a3:c4:af:39:46:67:79:7e:1a:f5:
7d:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:86:2C:19:3F:80:C1:1A:84:66:A5:1C:FE:01:49:74:C4:2A:6F:53
X509v3 Authority Key Identifier:
keyid:39:19:F2:AD:91:58:4B:AF:F0:46:74:47:BA:C8:FB:97:8D:1F:9D:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORnyrZFYS6_wRnRHusj7l40fndM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/a4YsGT-AwRqEZqUc_gFJdMQqb1M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/ORnyrZFYS6_wRnRHusj7l40fndM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.143.224.0/24
Signature Algorithm: sha256WithRSAEncryption
41:5b:8d:27:ac:b9:0f:02:dd:3d:04:bb:a6:11:bf:33:a4:b5:
a0:b9:1b:3f:ef:83:74:65:4e:78:5a:35:5d:cd:27:7e:2f:2d:
bf:b4:3c:a5:60:2c:7b:1c:cb:e1:a7:5a:b9:ec:75:0a:75:06:
21:f4:6e:fe:90:27:9c:3e:64:ad:59:c6:fe:38:43:52:25:a8:
1d:c8:0f:58:04:c4:4e:77:43:12:e6:4f:6c:77:f5:de:50:19:
ff:d4:8f:03:c0:d7:bc:1d:d5:aa:bf:9b:de:cc:67:55:f7:c4:
e3:de:8e:6f:7c:c1:cd:44:22:3f:ae:34:05:f5:6e:fc:fa:fb:
08:1f:ef:4e:ce:c1:b7:c3:d9:e1:b1:08:08:9d:46:0f:ed:59:
18:9c:8f:05:91:e1:3b:16:df:f9:49:37:9c:37:a1:cc:3a:23:
c0:b2:1a:9f:ac:ca:c0:7a:af:fd:8b:47:2e:21:ee:c8:33:ce:
98:3d:34:1d:c2:6d:46:c6:2a:a5:65:14:eb:6e:56:d4:22:a7:
4f:3d:6f:7b:6b:51:a4:b2:e6:c6:9d:74:f0:39:d8:2a:36:29:
e0:9c:c8:47:9d:69:6c:36:fd:6b:52:cb:2a:38:5b:49:2c:ac:
21:e7:4a:02:73:82:8d:14:28:b8:92:b2:e3:3f:ab:23:17:b2:
c5:84:76:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 09:40:18 2024 by rpki-client on console-fra.rpki-client.org