Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/4cac6b-8e05-448a-83f7-6835852158d8/1/RuJOsA9B2jGQcCmOGcCT6SfLgY0.roa
File: RuJOsA9B2jGQcCmOGcCT6SfLgY0.roa (raw, json)
Hash identifier: 7EzuJsM6uuwc1hwP2klZTrCKeYh/VFJZZ8nqoeZQkp0=
Subject key identifier: 46:E2:4E:B0:0F:41:DA:31:90:70:29:8E:19:C0:93:E9:27:CB:81:8D
Certificate issuer: /CN=c6d11b64ffe18efa42f43a6c765639dee38d027e
Certificate serial: 018CC501032F4B40F9C0B1F9223BAEA7FAC1
Authority key identifier: C6:D1:1B:64:FF:E1:8E:FA:42:F4:3A:6C:76:56:39:DE:E3:8D:02:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xtEbZP_hjvpC9DpsdlY53uONAn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/4cac6b-8e05-448a-83f7-6835852158d8/1/RuJOsA9B2jGQcCmOGcCT6SfLgY0.roa
Signing time: Mon 01 Jan 2024 12:30:27 +0000
ROA not before: Mon 01 Jan 2024 12:30:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15404
IP address blocks: 193.135.254.0/24 maxlen: 24
193.73.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/4cac6b-8e05-448a-83f7-6835852158d8/1/xtEbZP_hjvpC9DpsdlY53uONAn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/4cac6b-8e05-448a-83f7-6835852158d8/1/xtEbZP_hjvpC9DpsdlY53uONAn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/xtEbZP_hjvpC9DpsdlY53uONAn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 09:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:03:2f:4b:40:f9:c0:b1:f9:22:3b:ae:a7:fa:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6d11b64ffe18efa42f43a6c765639dee38d027e
Validity
Not Before: Jan 1 12:30:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=46e24eb00f41da319070298e19c093e927cb818d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:aa:ea:2c:32:95:8c:ed:f4:4a:e3:46:6f:fc:
82:13:2c:8a:a3:a5:76:49:d9:bd:29:13:ff:0b:b6:
b9:dd:e4:59:6c:06:1c:58:a5:68:87:4c:c8:28:a7:
b3:d7:1d:05:12:de:41:46:44:d6:ea:c2:71:98:d7:
1a:71:3e:1f:77:84:af:95:a0:0f:f4:22:49:e9:57:
29:2a:7e:00:86:23:6f:57:d9:a7:a9:69:a7:78:8c:
93:05:02:32:1b:25:f7:08:e3:a8:b2:3f:3c:61:2e:
1a:8a:e7:6f:28:91:45:1a:85:e1:4a:07:75:9c:d9:
70:ae:ab:78:ab:83:47:e2:02:8d:6b:13:54:fa:3f:
fd:90:ca:27:7a:1b:9b:c4:7f:e4:f5:83:51:87:b5:
25:a7:d8:69:2e:74:eb:37:19:8e:a3:21:94:b6:03:
00:25:1b:06:be:86:b6:30:ff:16:fb:b7:f8:8f:18:
31:87:f9:e1:43:e6:c0:4b:93:fe:2d:4b:b7:ba:59:
ed:eb:c5:25:0c:cc:c2:00:cb:82:d1:6a:48:58:dc:
63:55:36:01:fa:02:ab:4c:7f:4b:79:65:2d:97:c3:
5b:9c:54:42:a1:10:1c:26:a6:f3:d5:9d:ff:f7:e6:
fe:69:43:b4:62:90:b1:4c:39:37:b6:2b:ad:89:03:
ce:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:E2:4E:B0:0F:41:DA:31:90:70:29:8E:19:C0:93:E9:27:CB:81:8D
X509v3 Authority Key Identifier:
keyid:C6:D1:1B:64:FF:E1:8E:FA:42:F4:3A:6C:76:56:39:DE:E3:8D:02:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xtEbZP_hjvpC9DpsdlY53uONAn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4cac6b-8e05-448a-83f7-6835852158d8/1/RuJOsA9B2jGQcCmOGcCT6SfLgY0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4cac6b-8e05-448a-83f7-6835852158d8/1/xtEbZP_hjvpC9DpsdlY53uONAn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.73.113.0/24
193.135.254.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:e3:29:07:26:30:64:52:7d:1f:ba:16:57:d0:a7:45:c3:1d:
26:21:e7:ae:8b:2e:b2:8f:ae:0d:67:13:85:52:a2:af:e8:38:
fc:96:d0:71:ec:d4:c8:47:aa:6e:32:1f:b1:4e:1e:db:1c:6a:
f3:f5:1a:1a:ec:a2:67:e4:03:cc:75:a5:ba:b8:69:9e:40:bc:
05:61:65:eb:8c:0d:ec:e7:d7:b8:bc:19:7f:13:ea:92:13:9a:
f0:5e:b0:8c:86:2b:71:d9:ce:73:e8:e3:f1:d7:8b:a5:b4:be:
6a:39:8e:af:81:39:87:6e:73:19:a8:fe:7a:60:90:b0:e2:b4:
66:be:98:b4:21:d3:c2:2e:41:d3:c4:9f:8c:20:7b:47:93:50:
15:5a:4f:25:88:3b:7b:6f:da:d7:62:1d:93:ce:73:0a:7a:6c:
8f:c2:73:3e:4a:c7:b0:c9:ef:de:88:fe:7d:f4:b4:53:8b:ac:
e2:f6:f5:c4:47:2e:33:85:7c:62:c0:36:62:ed:05:67:93:9e:
e0:0e:be:a6:0c:e9:38:bc:02:e9:65:1e:e0:13:5e:15:c6:b8:
50:b8:42:06:69:55:b7:88:6f:84:d4:1f:3b:bc:5a:2e:6c:50:
33:e4:03:b8:4b:71:7d:e6:1a:2a:77:21:a6:d4:cd:b2:5d:01:
93:87:28:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 12:27:22 2024 by rpki-client on console-fra.rpki-client.org