Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/f81915-405e-4b54-9cb4-70a556ba8a11/1/1Tsd3RS3GQd91Ad2IWcJdZ66tok.roa
File: 1Tsd3RS3GQd91Ad2IWcJdZ66tok.roa (raw, json)
Hash identifier: Xfzo1LaAnwN+0XRw12j8KnUMLqo/4SXka3aBHYMeFk8=
Subject key identifier: D5:3B:1D:DD:14:B7:19:07:7D:D4:07:76:21:67:09:75:9E:BA:B6:89
Certificate issuer: /CN=b9762db1282ffd084761232038f81f5d29e640d5
Certificate serial: 018F1438F79026E8F8CF134982F33A42F37F
Authority key identifier: B9:76:2D:B1:28:2F:FD:08:47:61:23:20:38:F8:1F:5D:29:E6:40:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uXYtsSgv_QhHYSMgOPgfXSnmQNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/f81915-405e-4b54-9cb4-70a556ba8a11/1/1Tsd3RS3GQd91Ad2IWcJdZ66tok.roa
Signing time: Thu 25 Apr 2024 07:47:08 +0000
ROA not before: Thu 25 Apr 2024 07:47:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 185.139.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/f81915-405e-4b54-9cb4-70a556ba8a11/1/uXYtsSgv_QhHYSMgOPgfXSnmQNU.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/f81915-405e-4b54-9cb4-70a556ba8a11/1/uXYtsSgv_QhHYSMgOPgfXSnmQNU.mft
rsync://rpki.ripe.net/repository/DEFAULT/uXYtsSgv_QhHYSMgOPgfXSnmQNU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:14:38:f7:90:26:e8:f8:cf:13:49:82:f3:3a:42:f3:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9762db1282ffd084761232038f81f5d29e640d5
Validity
Not Before: Apr 25 07:47:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d53b1ddd14b719077dd40776216709759ebab689
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c0:be:8d:a1:da:40:a4:de:19:e1:f7:7c:ce:
8d:98:ef:37:29:69:ef:5e:b3:80:8a:23:59:4a:94:
79:a9:46:4e:7f:3f:b4:6c:f1:e3:58:5f:ac:d2:a3:
c3:75:58:84:43:89:66:a3:3f:87:0b:b6:b5:cb:c4:
2e:f1:e7:3b:b8:b1:13:44:fe:a2:59:65:b5:5c:02:
fc:ac:a1:0a:a7:3d:b8:f0:0e:7a:2a:26:ce:da:3f:
9f:f0:72:e7:5b:6d:74:ee:02:51:83:56:b4:a9:c8:
06:61:af:fe:06:8f:ec:f3:0f:42:c0:30:eb:9f:12:
1c:03:3b:de:66:f2:70:55:a5:1f:6c:eb:2e:29:43:
4d:b1:12:90:4f:b2:e1:f7:11:3c:b8:38:7e:3a:bd:
9a:3e:f8:29:e9:c7:cd:94:5d:06:09:4d:42:63:dd:
90:0e:af:1c:2d:7b:45:04:bf:21:57:d6:bd:b7:43:
e5:7c:47:36:c4:64:da:f0:f4:e4:0f:9f:20:b7:55:
50:86:64:3b:3f:d5:1e:92:9b:4d:ae:b3:b3:fc:0c:
d1:44:a5:7d:42:3b:cd:c9:8a:a5:eb:5e:b2:48:f1:
32:18:03:3d:80:69:1c:46:c7:c0:5b:c4:6d:ad:1d:
05:3d:1c:34:67:2f:3f:fe:6e:c9:80:fc:67:bb:6d:
4c:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:3B:1D:DD:14:B7:19:07:7D:D4:07:76:21:67:09:75:9E:BA:B6:89
X509v3 Authority Key Identifier:
keyid:B9:76:2D:B1:28:2F:FD:08:47:61:23:20:38:F8:1F:5D:29:E6:40:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uXYtsSgv_QhHYSMgOPgfXSnmQNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/f81915-405e-4b54-9cb4-70a556ba8a11/1/1Tsd3RS3GQd91Ad2IWcJdZ66tok.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/f81915-405e-4b54-9cb4-70a556ba8a11/1/uXYtsSgv_QhHYSMgOPgfXSnmQNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.139.35.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:a6:a6:4b:2a:9c:09:3c:9e:e0:f4:c8:18:a5:af:9b:28:e2:
e9:22:1d:a8:e2:f1:ba:09:e5:db:2d:30:41:2a:bb:44:2d:cb:
88:2d:53:a1:a1:f5:0e:62:25:4f:f5:64:58:31:de:b6:5f:ae:
9e:5c:6d:93:58:d6:d9:a5:76:b3:a9:2c:e9:32:bd:2c:f8:5e:
2d:c8:df:81:d9:42:7a:5b:45:c7:e7:20:77:f1:cf:f9:93:10:
19:aa:05:30:2d:26:9e:7c:c3:dc:b4:6c:77:ee:b8:e3:ba:9b:
e7:78:d0:e0:29:a7:7f:cf:6e:11:46:29:15:98:50:92:32:46:
1d:b4:f4:17:53:f1:70:0d:4d:db:eb:66:dc:bb:e7:57:1b:cd:
19:2b:44:9a:6e:52:54:36:ea:22:c7:de:12:36:a7:4d:35:9a:
b3:f1:7e:16:48:07:ef:d0:7f:61:0a:cd:32:13:e9:8d:b2:10:
a5:05:ed:4b:11:49:d1:51:ca:a9:e8:8a:31:6f:cc:f2:a4:af:
d8:a6:31:ef:c4:1e:05:dd:ab:32:0b:86:a2:fe:91:ef:ef:8d:
ab:2c:5f:89:d4:2b:f3:b3:2b:02:05:dc:88:e7:b2:22:0c:0b:
02:f9:6d:b6:28:bb:49:74:cb:8c:9f:16:2b:ea:62:e0:34:eb:
5a:7c:fb:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 15:46:22 2024 by rpki-client on console-fra.rpki-client.org