Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/ed5e15-4f14-49e6-a6dd-45351f9dbb52/1/1TXYPpCuH5thftRJAUayWI44w4U.roa
File: 1TXYPpCuH5thftRJAUayWI44w4U.roa (raw, json)
Hash identifier: ZQmDkZhiGDXo2W195dJ9QiUF9FsFxj65kOQdV4yVXdo=
Subject key identifier: D5:35:D8:3E:90:AE:1F:9B:61:7E:D4:49:01:46:B2:58:8E:38:C3:85
Certificate issuer: /CN=fd6369271b6d13a6aedcaa23ebb29e29b796a46b
Certificate serial: 018CC3B71D06F13D41B3F4B8AD296BC69A49
Authority key identifier: FD:63:69:27:1B:6D:13:A6:AE:DC:AA:23:EB:B2:9E:29:B7:96:A4:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_WNpJxttE6au3Koj67KeKbeWpGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/ed5e15-4f14-49e6-a6dd-45351f9dbb52/1/1TXYPpCuH5thftRJAUayWI44w4U.roa
Signing time: Mon 01 Jan 2024 06:30:06 +0000
ROA not before: Mon 01 Jan 2024 06:30:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20775
IP address blocks: 194.55.3.0/24 maxlen: 24
194.55.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/ed5e15-4f14-49e6-a6dd-45351f9dbb52/1/_WNpJxttE6au3Koj67KeKbeWpGs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/ed5e15-4f14-49e6-a6dd-45351f9dbb52/1/_WNpJxttE6au3Koj67KeKbeWpGs.mft
rsync://rpki.ripe.net/repository/DEFAULT/_WNpJxttE6au3Koj67KeKbeWpGs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:1d:06:f1:3d:41:b3:f4:b8:ad:29:6b:c6:9a:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd6369271b6d13a6aedcaa23ebb29e29b796a46b
Validity
Not Before: Jan 1 06:30:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d535d83e90ae1f9b617ed4490146b2588e38c385
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:63:44:36:88:e5:96:b0:25:3f:e0:21:95:7c:
27:68:38:6e:6e:25:60:e1:a3:40:56:60:5a:90:7a:
24:24:ab:bf:a5:f1:06:10:a7:d9:6a:f7:07:ba:5b:
bf:34:60:69:3c:fb:ed:34:62:84:8c:d9:f2:e8:5a:
45:ea:49:61:b6:21:75:23:c5:09:d9:46:d2:54:85:
fa:d0:2b:27:b9:18:21:6a:4e:8e:ec:3b:e9:49:c6:
b4:6f:c2:ce:18:13:7e:db:85:96:e2:ce:94:da:37:
60:fa:eb:c0:b2:72:ea:e1:3d:af:e8:8c:18:ad:d3:
c7:d1:c3:49:ec:8d:bf:13:ee:d4:03:86:82:ca:fd:
e8:14:9e:4f:eb:02:b7:f5:4c:cd:7f:6e:f3:40:3e:
d8:0e:ee:c8:03:e2:28:3f:01:e9:db:01:16:06:00:
3d:dd:25:a9:3e:ff:b9:b9:c2:1a:e4:ef:cb:23:7e:
b8:26:1d:22:25:59:41:b6:8b:a1:f8:ee:26:6c:bb:
90:64:86:b3:97:91:f0:2f:60:9d:14:55:2c:5d:6a:
9a:2c:71:a6:83:bd:92:a7:d3:12:77:e3:94:1a:3c:
8c:11:04:d6:06:43:e3:64:95:8a:19:85:5f:02:6c:
1a:c6:8d:4b:df:eb:0c:ea:c9:a0:54:ae:80:39:02:
ec:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:35:D8:3E:90:AE:1F:9B:61:7E:D4:49:01:46:B2:58:8E:38:C3:85
X509v3 Authority Key Identifier:
keyid:FD:63:69:27:1B:6D:13:A6:AE:DC:AA:23:EB:B2:9E:29:B7:96:A4:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_WNpJxttE6au3Koj67KeKbeWpGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ed5e15-4f14-49e6-a6dd-45351f9dbb52/1/1TXYPpCuH5thftRJAUayWI44w4U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ed5e15-4f14-49e6-a6dd-45351f9dbb52/1/_WNpJxttE6au3Koj67KeKbeWpGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.55.2.0/23
Signature Algorithm: sha256WithRSAEncryption
24:28:90:8c:91:a1:0b:83:5c:29:6a:2f:af:b3:f0:aa:d2:88:
40:60:9b:98:25:ba:15:de:12:35:23:e9:31:71:fa:ca:47:71:
28:1d:9f:46:a2:22:cf:27:02:e7:9f:51:55:41:96:99:47:02:
cc:92:9b:4e:ec:a6:3c:13:fb:d6:71:fc:5f:18:c5:cc:96:32:
09:d5:2f:b9:2e:ed:b5:e8:51:bc:bb:f7:3f:6a:7f:80:dd:e8:
31:5f:ff:c8:1c:66:bf:97:8b:94:82:83:ee:f4:5f:81:6e:4e:
3f:5e:36:e1:94:db:de:47:a6:94:64:f7:ab:ac:d4:03:4b:d9:
06:a8:2a:be:bb:c4:9f:b1:f5:8a:60:ce:4e:cc:0c:4d:71:e2:
7f:68:b9:44:58:c0:27:c8:3d:f7:cf:a8:72:97:93:8c:eb:b6:
6b:1f:7a:c0:9e:73:4b:d0:d5:be:79:0f:8a:9f:d5:99:0d:76:
33:d4:7d:39:d1:91:44:03:ed:0c:ea:d7:76:13:fd:ab:56:fc:
83:a7:6d:5d:89:f1:24:0d:ff:18:10:d9:ac:51:09:a7:04:35:
69:ba:b0:ba:f4:c7:c4:d9:5e:aa:2e:96:36:8e:49:b0:7d:b7:
96:04:a3:d1:36:95:a5:74:ac:04:e9:e1:2f:d6:05:95:26:b4:
e0:6a:c8:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 16:57:14 2024 by rpki-client on console-ams.rpki-client.org