Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/b95ca0-853f-48ab-9b41-e0aee1bbf9e3/1/ON4RT3lXyVBP4y23Hs7gpxj49Xk.roa
File: ON4RT3lXyVBP4y23Hs7gpxj49Xk.roa (raw, json)
Hash identifier: fll2v8FVBndPNAXfbabmDZjNyAqZ1D4OCrlT+MfIWwA=
Subject key identifier: 38:DE:11:4F:79:57:C9:50:4F:E3:2D:B7:1E:CE:E0:A7:18:F8:F5:79
Certificate issuer: /CN=5aedcb334d39e797817e2eb47703c018b4dc49d5
Certificate serial: 018CC64B4319651308F3E4032E3C3196FE1D
Authority key identifier: 5A:ED:CB:33:4D:39:E7:97:81:7E:2E:B4:77:03:C0:18:B4:DC:49:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wu3LM00555eBfi60dwPAGLTcSdU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/b95ca0-853f-48ab-9b41-e0aee1bbf9e3/1/ON4RT3lXyVBP4y23Hs7gpxj49Xk.roa
Signing time: Mon 01 Jan 2024 18:31:10 +0000
ROA not before: Mon 01 Jan 2024 18:31:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51983
IP address blocks: 194.88.6.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/b95ca0-853f-48ab-9b41-e0aee1bbf9e3/1/Wu3LM00555eBfi60dwPAGLTcSdU.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/b95ca0-853f-48ab-9b41-e0aee1bbf9e3/1/Wu3LM00555eBfi60dwPAGLTcSdU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wu3LM00555eBfi60dwPAGLTcSdU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:43:19:65:13:08:f3:e4:03:2e:3c:31:96:fe:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5aedcb334d39e797817e2eb47703c018b4dc49d5
Validity
Not Before: Jan 1 18:31:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=38de114f7957c9504fe32db71ecee0a718f8f579
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:64:db:f3:b4:b2:2a:ee:fe:87:49:22:f2:86:
9a:d7:7d:83:1a:65:63:06:27:93:1e:22:f3:9c:44:
17:e6:e3:e9:e1:8c:94:a2:90:69:4b:26:fc:10:84:
8c:c8:91:27:3f:75:d5:34:11:8d:6c:ef:85:30:df:
66:20:69:7c:05:89:01:92:00:2e:56:07:27:b7:b8:
73:d7:7a:12:cb:8e:ef:6c:bc:45:4b:2f:92:99:ba:
75:2e:41:da:e6:69:d5:a6:ce:d4:01:9c:fe:80:ae:
9b:6d:a1:83:74:b2:9a:57:8b:ac:71:7a:ce:04:30:
45:fe:f4:85:80:d7:82:f5:5b:5d:d4:54:5e:5d:69:
23:6e:b5:c1:62:8d:41:a8:48:c4:19:d4:52:7a:07:
f0:5f:39:3b:38:b7:56:24:76:a3:11:d9:d9:95:9f:
bc:f3:7e:6d:2f:43:2b:e7:37:dd:30:bc:ab:82:2a:
79:92:0e:cb:78:70:35:00:46:4e:f6:b7:b6:c8:7e:
b5:3b:20:b3:61:78:59:45:b9:d9:7b:e2:f8:ee:7c:
13:23:9b:3d:75:02:ed:82:31:27:03:6c:59:43:88:
34:3f:c4:ae:b6:9e:1b:90:37:ba:9b:33:d4:be:85:
1f:f6:91:2e:bf:4e:d1:33:61:8e:c2:fa:39:72:40:
06:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:DE:11:4F:79:57:C9:50:4F:E3:2D:B7:1E:CE:E0:A7:18:F8:F5:79
X509v3 Authority Key Identifier:
keyid:5A:ED:CB:33:4D:39:E7:97:81:7E:2E:B4:77:03:C0:18:B4:DC:49:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wu3LM00555eBfi60dwPAGLTcSdU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b95ca0-853f-48ab-9b41-e0aee1bbf9e3/1/ON4RT3lXyVBP4y23Hs7gpxj49Xk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b95ca0-853f-48ab-9b41-e0aee1bbf9e3/1/Wu3LM00555eBfi60dwPAGLTcSdU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.88.6.0/23
Signature Algorithm: sha256WithRSAEncryption
80:7a:78:3e:d8:db:20:ac:14:50:22:96:61:31:58:3b:89:7a:
99:60:19:54:61:e2:2a:7a:84:1b:5a:af:45:ad:f0:9d:8e:00:
94:97:61:99:0f:3a:58:e2:6e:f6:ec:fa:22:a7:20:89:a3:5e:
e7:8e:e6:d2:41:e3:c3:fb:f5:99:33:87:af:c2:51:ca:fe:cc:
2f:3e:7b:9d:52:8b:66:04:22:f7:3e:33:2d:78:2e:2d:f9:4b:
66:5a:07:28:78:37:85:2a:aa:1d:dc:ed:92:c8:08:c2:eb:f5:
91:a1:bf:7a:d3:67:73:e9:6c:6b:0d:2f:d6:6b:f4:03:c9:2c:
8f:9c:41:dd:71:ff:77:0d:bc:5f:2c:92:33:c7:e7:19:00:32:
b5:2c:5d:3f:6c:78:d3:df:7f:0c:80:af:dd:03:c5:7a:87:d7:
ab:96:cb:d9:6e:cf:33:06:c5:12:7e:89:dd:36:76:1c:2c:25:
9a:73:6c:49:c6:1e:b2:b7:f9:ab:0d:30:23:5b:d4:7f:c4:d2:
cc:14:0f:0e:9f:61:e3:93:bb:49:4a:05:1b:df:bf:06:58:9e:
3f:06:f4:b0:f9:3d:52:16:fa:77:cf:4c:10:35:93:04:24:5b:
99:e6:f6:e0:d1:87:68:30:42:0a:ce:5a:66:d3:c7:d9:c6:22:
d5:ef:22:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 07:15:18 2024 by rpki-client on console-ams.rpki-client.org