Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/cTns1WmvVWhSx-20ZM0tE6TbCgc.roa
File: cTns1WmvVWhSx-20ZM0tE6TbCgc.roa (raw, json)
Hash identifier: Yl35mkdX8wKgC0mK0CBQ28iJw3Y43GrCuHSXaJTwI+c=
Subject key identifier: 71:39:EC:D5:69:AF:55:68:52:C7:ED:B4:64:CD:2D:13:A4:DB:0A:07
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018F2E9CDBD8F8E65BEBE2EBB35D4D29C155
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/cTns1WmvVWhSx-20ZM0tE6TbCgc.roa
Signing time: Tue 30 Apr 2024 10:46:22 +0000
ROA not before: Tue 30 Apr 2024 10:46:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43043
IP address blocks: 194.105.80.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Jun 2024 07:22:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:2e:9c:db:d8:f8:e6:5b:eb:e2:eb:b3:5d:4d:29:c1:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Apr 30 10:46:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7139ecd569af556852c7edb464cd2d13a4db0a07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:1b:b3:6b:4a:6b:58:99:42:75:2b:f6:2b:19:
93:f4:6e:c1:b6:60:31:4b:6b:f3:8b:0b:4d:c4:5c:
59:1b:89:29:23:2d:4c:d9:90:e6:8f:c1:f4:01:db:
85:ca:b2:91:ee:ef:35:da:46:27:c2:5f:cc:c1:96:
cc:b6:07:a9:be:e2:8b:94:d7:72:da:17:59:0c:76:
33:ff:d2:cc:f5:fd:16:5c:ff:e5:1f:59:77:48:99:
f0:f5:51:1b:80:bc:22:7f:c2:5d:4b:0e:ab:d2:c1:
36:90:58:b7:ab:12:fd:64:f1:a8:d1:7d:ea:09:8c:
b7:e4:bf:9c:fb:7e:60:ad:8c:a3:b1:e0:df:f5:76:
58:5c:61:63:11:cb:73:59:a0:6f:18:7e:3b:67:3c:
de:c9:7d:8e:3a:3e:4d:51:a2:ef:f7:b6:c5:38:2d:
d8:60:41:07:59:99:3f:dc:e3:27:dd:22:c2:9f:b2:
45:cb:6b:4a:90:48:90:18:85:9f:85:11:24:29:f7:
eb:9a:ce:00:22:c0:d3:f5:aa:a6:23:5b:ba:90:b9:
13:a1:06:24:02:49:12:fb:e8:eb:e3:b8:86:34:98:
40:61:c9:8f:5c:e4:7c:7d:e9:3f:66:1e:5f:c6:e4:
cc:8a:97:17:64:cc:09:a1:3d:a9:f1:43:60:1f:ce:
96:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:39:EC:D5:69:AF:55:68:52:C7:ED:B4:64:CD:2D:13:A4:DB:0A:07
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/cTns1WmvVWhSx-20ZM0tE6TbCgc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.105.80.0/24
Signature Algorithm: sha256WithRSAEncryption
87:d6:a6:f8:c6:17:08:a6:b0:36:f8:6b:59:02:c4:b4:05:4a:
ec:23:77:98:6a:80:cb:0e:53:2b:4e:b0:ee:d3:92:9e:e3:a3:
e3:1d:37:89:83:cc:55:ff:2c:b8:09:09:f5:78:c6:7f:8e:28:
0e:0b:53:b7:54:52:d5:06:4a:4a:03:07:7a:fe:28:71:36:f0:
8b:75:bf:22:57:3c:e2:1d:90:0c:fd:9e:47:af:94:02:3f:72:
c2:83:ff:33:a5:66:70:02:99:4f:1c:58:17:47:35:b6:19:a4:
56:03:7b:97:03:c6:6b:c6:9c:da:ac:42:ac:0a:1f:3d:35:02:
b4:c1:ce:cd:d8:98:1e:00:ae:17:16:e2:54:4b:8c:90:d5:27:
e8:5c:3a:64:05:81:d2:da:54:76:24:78:f2:07:12:c8:e8:71:
2a:45:46:a8:bd:30:e3:40:59:4b:85:69:60:55:36:83:6d:4f:
7a:35:28:2c:ce:ad:d0:b5:6e:e4:48:5a:0f:07:83:d6:42:c3:
4d:b6:e2:fe:fe:d0:9b:79:b5:13:74:41:0a:ac:5e:61:ac:79:
db:b6:a0:5d:94:b6:1c:43:db:de:e8:1a:a3:b7:c8:ad:aa:73:
ac:ad:67:00:49:c5:52:cd:fe:4f:ae:67:d8:46:7d:87:8e:21:
20:cd:a5:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 4 10:56:21 2024 by rpki-client on console-ams.rpki-client.org