Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/b35797-8134-4bb7-90dd-287d36dbf5ee/1/T6lm3HT0jj8CR6wFHnF7TC4rEDQ.roa
File: T6lm3HT0jj8CR6wFHnF7TC4rEDQ.roa (raw, json)
Hash identifier: lnCFcUp96PdfSHADsZ2LTAXkRveTB6oaLrUow0Dha6U=
Subject key identifier: 4F:A9:66:DC:74:F4:8E:3F:02:47:AC:05:1E:71:7B:4C:2E:2B:10:34
Certificate issuer: /CN=3d9aae8443cca1feed797d9a892f83321038c0f7
Certificate serial: 018CC500C16457A09DB0E5AE15EB6DFA5812
Authority key identifier: 3D:9A:AE:84:43:CC:A1:FE:ED:79:7D:9A:89:2F:83:32:10:38:C0:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PZquhEPMof7teX2aiS-DMhA4wPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/b35797-8134-4bb7-90dd-287d36dbf5ee/1/T6lm3HT0jj8CR6wFHnF7TC4rEDQ.roa
Signing time: Mon 01 Jan 2024 12:30:10 +0000
ROA not before: Mon 01 Jan 2024 12:30:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 559
IP address blocks: 193.247.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/b35797-8134-4bb7-90dd-287d36dbf5ee/1/PZquhEPMof7teX2aiS-DMhA4wPc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/b35797-8134-4bb7-90dd-287d36dbf5ee/1/PZquhEPMof7teX2aiS-DMhA4wPc.mft
rsync://rpki.ripe.net/repository/DEFAULT/PZquhEPMof7teX2aiS-DMhA4wPc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 18:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:c1:64:57:a0:9d:b0:e5:ae:15:eb:6d:fa:58:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d9aae8443cca1feed797d9a892f83321038c0f7
Validity
Not Before: Jan 1 12:30:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4fa966dc74f48e3f0247ac051e717b4c2e2b1034
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:f2:5d:82:d3:ba:bd:ea:f5:66:a3:4d:9b:a1:
d4:00:8d:4d:15:52:08:2e:ac:9b:b3:c3:ad:be:55:
42:35:9e:8c:43:6e:d0:e7:98:bc:ae:7f:5a:97:ba:
e6:10:82:d3:a0:4f:74:7f:95:7f:53:1f:6b:6b:b4:
9e:72:27:e8:c4:77:31:4f:04:75:70:eb:0c:56:47:
a6:44:e7:12:92:05:ce:f6:6e:f9:9f:78:4e:91:76:
df:df:68:13:54:e3:26:ea:cc:9d:d7:eb:e0:f3:59:
65:48:4f:42:69:42:83:ac:4b:3b:2f:a3:c8:35:99:
bb:6b:21:db:fc:dd:72:56:d6:68:26:d8:12:4d:d5:
04:95:0d:16:8a:7b:e4:fc:3c:3f:7a:bf:b2:d5:10:
70:cf:3e:e9:3d:ef:7d:43:b6:f2:e4:b2:76:0c:c7:
1f:28:07:c0:0d:a0:9b:72:26:ed:c1:e6:25:2e:fb:
ed:f6:9b:33:09:c7:1e:4a:9d:d4:9c:b7:4f:3a:14:
9b:85:a9:2b:60:33:04:e7:41:1b:da:0c:b7:a5:b0:
6a:7d:fc:d6:c1:94:f2:75:e9:27:02:af:1e:9b:4d:
07:6c:35:9b:9f:f9:7f:4b:7f:bc:f8:81:8e:45:ab:
4d:73:55:25:fe:bb:c1:ec:22:b6:19:72:ac:13:cb:
1b:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:A9:66:DC:74:F4:8E:3F:02:47:AC:05:1E:71:7B:4C:2E:2B:10:34
X509v3 Authority Key Identifier:
keyid:3D:9A:AE:84:43:CC:A1:FE:ED:79:7D:9A:89:2F:83:32:10:38:C0:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PZquhEPMof7teX2aiS-DMhA4wPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b35797-8134-4bb7-90dd-287d36dbf5ee/1/T6lm3HT0jj8CR6wFHnF7TC4rEDQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b35797-8134-4bb7-90dd-287d36dbf5ee/1/PZquhEPMof7teX2aiS-DMhA4wPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.247.254.0/24
Signature Algorithm: sha256WithRSAEncryption
62:7d:c1:c6:dc:19:4d:c3:c1:38:c0:99:df:b3:d2:d7:3f:b9:
ab:12:b7:da:91:c4:4d:a7:b2:a6:d6:1a:8a:54:70:11:55:38:
4c:a3:ed:1d:c6:dc:09:b9:c8:84:42:a0:e7:d4:c7:73:44:a7:
cf:a0:a4:3c:6d:25:8e:17:92:71:0d:04:76:06:f2:69:6c:8e:
f0:d9:3b:62:95:ef:d8:15:1d:43:36:20:d6:eb:4b:b0:7e:38:
86:68:78:2b:18:66:7f:c4:1f:65:8c:6a:04:9a:5b:68:04:9e:
d6:fb:57:42:0b:73:f8:a1:8a:82:61:e0:8b:cb:7d:9c:9b:8a:
68:68:ce:3b:d1:9b:52:29:0d:b0:14:62:a8:f0:31:40:54:fc:
69:7a:f0:f4:27:c7:6c:74:39:c5:d3:ae:a6:d5:ae:33:6e:39:
11:38:f2:b1:7f:83:9d:d5:e6:d3:73:c2:aa:c7:f9:7d:43:e8:
7c:53:04:ba:8a:a7:4a:6a:86:4d:02:a5:2b:97:d4:64:a9:4b:
af:1f:fa:d9:c5:ac:4f:57:05:8b:b4:ad:2e:44:c9:0f:85:9f:
bc:0d:b2:22:51:46:f3:e5:f7:e8:f4:30:3d:3e:57:f7:96:64:
2c:63:04:57:a2:dd:1a:67:11:84:e1:ea:55:d6:ff:1c:f1:c9:
06:33:45:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 20:57:53 2024 by rpki-client on console-fra.rpki-client.org