Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/dcdae6-d695-4266-ba9b-93b3a3696d96/1/aNAmKU6b_nS3QCpIBzAo_KHHvRg.roa
File: aNAmKU6b_nS3QCpIBzAo_KHHvRg.roa (raw, json)
Hash identifier: aG8Zm1Ax0xs9Ana0v+IseqwS481SfzBBmlIHPEL6wsg=
Subject key identifier: 68:D0:26:29:4E:9B:FE:74:B7:40:2A:48:07:30:28:FC:A1:C7:BD:18
Certificate issuer: /CN=e631b080d4ea6fd0616a6e701c7c815d6ff87c00
Certificate serial: 018E1DF10FCA1300CAA9586B53961E539B75
Authority key identifier: E6:31:B0:80:D4:EA:6F:D0:61:6A:6E:70:1C:7C:81:5D:6F:F8:7C:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5jGwgNTqb9Bham5wHHyBXW_4fAA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/dcdae6-d695-4266-ba9b-93b3a3696d96/1/aNAmKU6b_nS3QCpIBzAo_KHHvRg.roa
Signing time: Fri 08 Mar 2024 12:02:01 +0000
ROA not before: Fri 08 Mar 2024 12:02:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 28788
IP address blocks: 91.206.246.0/23 maxlen: 23
194.88.236.0/23 maxlen: 23
2a03:71e0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/dcdae6-d695-4266-ba9b-93b3a3696d96/1/5jGwgNTqb9Bham5wHHyBXW_4fAA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/dcdae6-d695-4266-ba9b-93b3a3696d96/1/5jGwgNTqb9Bham5wHHyBXW_4fAA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5jGwgNTqb9Bham5wHHyBXW_4fAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:1d:f1:0f:ca:13:00:ca:a9:58:6b:53:96:1e:53:9b:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e631b080d4ea6fd0616a6e701c7c815d6ff87c00
Validity
Not Before: Mar 8 12:02:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=68d026294e9bfe74b7402a48073028fca1c7bd18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:f3:25:10:65:0a:ff:98:d4:97:6a:42:cf:3b:
0c:51:f7:8e:09:94:29:42:9f:0f:db:54:91:18:db:
8f:eb:40:c5:21:a4:2f:81:23:db:16:73:16:17:62:
fd:fe:86:c5:9a:9d:d2:d8:e9:9c:c2:82:75:5a:45:
b9:f0:1f:57:b2:0e:eb:a2:d0:91:ad:b2:77:d3:83:
63:cc:f0:5a:16:1e:0c:2c:0b:0f:08:ba:70:5d:de:
d5:b5:35:04:c7:be:ee:9d:56:b7:18:e6:9d:df:d9:
75:f1:99:a2:cb:eb:da:58:a7:63:aa:96:98:fd:46:
f4:18:fa:92:73:2a:ff:bf:c1:63:61:3e:72:3a:31:
03:24:9a:1b:25:a2:4e:e8:18:a8:3b:77:42:56:b1:
7d:ef:96:e9:58:d2:36:e9:65:6f:f9:fb:a1:5b:c4:
8b:11:95:b5:04:36:31:88:a8:8b:bb:43:c7:b3:2b:
67:48:20:1a:52:90:0b:50:2e:72:32:84:b6:11:58:
09:f6:6e:61:98:27:c9:c3:dc:2a:9f:0e:82:9d:52:
bb:21:95:12:64:b8:0d:e3:4e:4b:28:03:13:b9:a0:
f4:aa:eb:e5:26:f4:ca:6d:5c:cd:43:df:85:47:4e:
9a:db:82:b3:8a:a1:c0:58:ff:57:ab:d8:80:66:cd:
3e:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:D0:26:29:4E:9B:FE:74:B7:40:2A:48:07:30:28:FC:A1:C7:BD:18
X509v3 Authority Key Identifier:
keyid:E6:31:B0:80:D4:EA:6F:D0:61:6A:6E:70:1C:7C:81:5D:6F:F8:7C:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5jGwgNTqb9Bham5wHHyBXW_4fAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/dcdae6-d695-4266-ba9b-93b3a3696d96/1/aNAmKU6b_nS3QCpIBzAo_KHHvRg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/dcdae6-d695-4266-ba9b-93b3a3696d96/1/5jGwgNTqb9Bham5wHHyBXW_4fAA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.206.246.0/23
194.88.236.0/23
IPv6:
2a03:71e0::/32
Signature Algorithm: sha256WithRSAEncryption
4c:12:85:00:2f:32:79:d6:73:7e:6c:72:4f:6b:86:2d:a3:59:
76:6b:98:64:52:08:d9:26:5d:90:66:b5:42:43:81:fd:5a:3c:
be:3a:85:ea:9e:b6:85:d4:33:37:d0:ff:ed:aa:09:38:61:c0:
db:9f:1d:a0:cd:2c:cc:c4:2f:70:3a:98:a6:32:4c:d7:61:ac:
f4:09:1c:05:d0:70:e9:35:c3:19:39:90:85:ea:86:0e:25:f7:
c9:47:0e:08:ad:c6:8d:73:a5:13:b3:a9:c2:66:7d:c9:4f:f3:
a3:25:c6:02:7d:54:d9:e6:6c:05:38:27:63:a2:9a:bf:d8:20:
d7:a0:6e:e2:37:ea:00:1d:47:7a:3b:5b:83:bc:47:61:88:bd:
1c:21:34:ca:bd:b0:0d:f8:fe:42:98:ef:70:80:48:36:01:50:
d6:b4:6c:51:28:9a:a9:75:9d:f1:d0:68:9c:fe:3a:97:d5:40:
2a:10:c6:c1:a7:5f:52:55:6d:69:b7:ba:af:74:fe:89:2d:71:
5e:12:4d:bc:0a:37:6b:2a:97:ef:f2:37:8d:26:cf:8a:ef:d7:
92:87:e2:14:1c:8c:8d:55:22:c4:3a:3f:7b:5b:52:a5:19:7b:
56:bf:a4:27:27:bd:c3:16:df:4d:04:d4:e2:d2:34:5b:2c:51:
63:e2:4c:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 23:20:53 2024 by rpki-client on console-ams.rpki-client.org