Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/T94e7iGlcpj8tDyAqUkgSYaove4.roa
File: T94e7iGlcpj8tDyAqUkgSYaove4.roa (raw, json)
Hash identifier: MRmR+sD/m1bH6fQE7LpSZpKpuho/pq9kHyjaXG+5kq8=
Subject key identifier: 4F:DE:1E:EE:21:A5:72:98:FC:B4:3C:80:A9:49:20:49:86:A8:BD:EE
Certificate issuer: /CN=4776afb74fad5baf0a6180b49510d8b8497df8d3
Certificate serial: 018CC56E2546304A3B8F0B966F7F171EAB0C
Authority key identifier: 47:76:AF:B7:4F:AD:5B:AF:0A:61:80:B4:95:10:D8:B8:49:7D:F8:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R3avt0-tW68KYYC0lRDYuEl9-NM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/T94e7iGlcpj8tDyAqUkgSYaove4.roa
Signing time: Mon 01 Jan 2024 14:29:39 +0000
ROA not before: Mon 01 Jan 2024 14:29:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203961
IP address blocks: 185.24.67.0/24 maxlen: 24
2a04:2b00:14aa::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/R3avt0-tW68KYYC0lRDYuEl9-NM.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/R3avt0-tW68KYYC0lRDYuEl9-NM.mft
rsync://rpki.ripe.net/repository/DEFAULT/R3avt0-tW68KYYC0lRDYuEl9-NM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 11:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:25:46:30:4a:3b:8f:0b:96:6f:7f:17:1e:ab:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4776afb74fad5baf0a6180b49510d8b8497df8d3
Validity
Not Before: Jan 1 14:29:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4fde1eee21a57298fcb43c80a949204986a8bdee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:cf:96:3c:4f:4f:ce:90:5e:9e:5f:5e:4c:94:
ff:5d:ce:2b:f4:0f:53:29:9d:30:78:84:76:57:20:
6a:26:b6:66:a9:0d:86:63:82:9f:23:2f:3c:74:91:
f4:ac:f1:88:16:7f:46:78:44:09:96:0e:a3:2d:2e:
07:46:a0:75:4c:25:d2:aa:10:f7:bd:30:05:5a:97:
7f:2b:b9:50:e5:01:2f:1d:da:1a:34:3f:4c:6e:f6:
88:bb:50:5f:ff:fd:e7:1f:b2:d2:0d:53:06:42:ff:
3a:dd:5e:2e:22:d0:32:ff:0a:9c:a8:0f:56:e1:69:
cb:d5:75:48:d9:4f:59:39:6c:da:c8:71:36:c0:98:
bd:38:ca:69:a7:45:2c:6d:6a:a2:b6:f7:2e:21:ae:
13:02:37:2b:5d:91:c8:ee:61:11:e5:fa:2e:89:bb:
17:a2:8c:cc:56:69:b7:fc:4c:ee:d2:c5:ed:6c:48:
fc:1e:bc:48:ef:50:51:2a:28:c1:41:3e:2e:b6:71:
44:a1:d0:61:f3:5f:41:4f:fd:fe:f8:7b:75:aa:11:
58:de:b5:e9:64:a7:73:f2:bf:b4:06:b2:fd:0e:f8:
f3:e4:43:8a:b7:a9:97:b8:09:e1:01:57:b0:92:eb:
73:11:2f:5f:0e:9d:7d:fa:ad:1c:66:0a:78:66:7f:
89:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:DE:1E:EE:21:A5:72:98:FC:B4:3C:80:A9:49:20:49:86:A8:BD:EE
X509v3 Authority Key Identifier:
keyid:47:76:AF:B7:4F:AD:5B:AF:0A:61:80:B4:95:10:D8:B8:49:7D:F8:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R3avt0-tW68KYYC0lRDYuEl9-NM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/T94e7iGlcpj8tDyAqUkgSYaove4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/R3avt0-tW68KYYC0lRDYuEl9-NM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.24.67.0/24
IPv6:
2a04:2b00:14aa::/48
Signature Algorithm: sha256WithRSAEncryption
74:d1:ba:b5:c1:07:85:8a:e0:e6:a1:81:fa:04:c7:ab:4c:d1:
59:c1:39:ea:07:fa:4f:a0:17:11:d3:4a:ed:07:59:1a:61:ea:
c6:24:9f:42:b9:e5:2a:80:a0:f3:bb:7f:f0:55:f0:3d:62:f0:
7d:27:f9:47:74:22:e4:98:7b:51:7d:1b:b7:d9:fd:51:51:9b:
84:e1:be:0c:d6:eb:59:31:2b:03:2b:63:d8:7a:1d:2b:10:23:
17:41:fb:db:be:c5:3a:a9:67:b7:d9:bd:ac:2b:89:27:0d:b7:
47:a5:fd:aa:87:3c:72:09:9b:e3:c8:28:c7:00:47:5b:c1:47:
2e:ae:af:43:d1:b1:f9:1c:78:0f:9e:8b:e2:97:a5:32:66:64:
d8:76:f3:b7:bc:de:1d:45:57:eb:9b:63:7d:44:9b:3a:de:5c:
3e:20:99:b0:5a:92:5a:ec:52:6e:ad:11:13:03:c7:7d:7b:66:
06:68:f1:94:6b:09:5d:e1:ad:0d:7b:be:66:72:10:86:fc:89:
fe:01:ca:76:af:da:93:dc:44:2c:66:f3:63:cc:7e:23:16:70:
f3:2f:91:f7:33:d7:22:a8:24:40:86:94:cc:ad:0c:66:fd:b7:
63:58:6c:29:93:c4:62:09:79:c2:09:c4:11:b0:0c:e6:7a:2b:
6f:37:fe:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 18:18:20 2024 by rpki-client on console-fra.rpki-client.org