Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/nUheknKGfFzzrd-FhUAQL6s6-po.roa
File: nUheknKGfFzzrd-FhUAQL6s6-po.roa (raw, json)
Hash identifier: cRkw3ZAYyIj+F3+/vRnEJR4mG3fIgsXllWpE1ipg9Ro=
Subject key identifier: 9D:48:5E:92:72:86:7C:5C:F3:AD:DF:85:85:40:10:2F:AB:3A:FA:9A
Certificate issuer: /CN=19ee5f16fc144acb98977449faa0ab77de1bdcc9
Certificate serial: 018CC649E0352A9B9E21CC761F185E3DF521
Authority key identifier: 19:EE:5F:16:FC:14:4A:CB:98:97:74:49:FA:A0:AB:77:DE:1B:DC:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/nUheknKGfFzzrd-FhUAQL6s6-po.roa
Signing time: Mon 01 Jan 2024 18:29:39 +0000
ROA not before: Mon 01 Jan 2024 18:29:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6220
IP address blocks: 83.111.3.0/24 maxlen: 24
83.111.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 00:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:49:e0:35:2a:9b:9e:21:cc:76:1f:18:5e:3d:f5:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19ee5f16fc144acb98977449faa0ab77de1bdcc9
Validity
Not Before: Jan 1 18:29:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9d485e9272867c5cf3addf858540102fab3afa9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:3d:b7:10:28:95:33:6a:4d:90:94:5b:cb:15:
58:ac:55:df:99:3e:bf:2d:e8:51:58:f6:73:f3:75:
01:a7:f6:fe:48:88:f1:a6:67:6a:e5:c4:25:0d:12:
b8:58:c9:9c:26:0f:75:68:11:9e:de:65:2e:a5:29:
85:9c:23:9b:64:9f:0a:0b:58:23:b7:27:9d:c5:69:
ae:8d:4b:15:b5:f6:12:f9:a9:2e:23:a1:fe:50:44:
a3:12:dd:4a:6d:60:aa:11:4a:35:ae:2f:d9:10:80:
98:40:45:f2:bc:24:74:90:73:da:9a:19:15:56:ea:
ab:79:af:ee:c4:e3:c1:53:0e:bd:b2:c3:3c:6a:83:
39:50:16:9e:7a:76:86:eb:38:af:eb:6b:c5:46:35:
16:92:7f:a9:79:8f:e2:32:67:e9:a8:1b:83:c4:f6:
99:5b:f4:b1:ae:ef:6c:d9:2b:ca:13:8f:27:a2:a5:
8f:fc:84:b8:d1:e7:f1:3b:a1:23:39:57:af:00:f1:
8f:84:be:fc:ac:e7:d4:1d:08:54:9b:67:aa:8c:c6:
4f:95:4d:26:90:60:aa:3a:66:ee:5d:83:36:56:0e:
6b:c1:e5:fd:b5:42:e3:41:1c:a0:6c:17:67:47:5f:
9b:be:e4:a7:18:57:6d:0a:b6:13:07:80:fb:e4:cd:
a7:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:48:5E:92:72:86:7C:5C:F3:AD:DF:85:85:40:10:2F:AB:3A:FA:9A
X509v3 Authority Key Identifier:
keyid:19:EE:5F:16:FC:14:4A:CB:98:97:74:49:FA:A0:AB:77:DE:1B:DC:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/nUheknKGfFzzrd-FhUAQL6s6-po.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.111.3.0-83.111.4.255
Signature Algorithm: sha256WithRSAEncryption
49:8f:7a:10:a2:2c:90:9d:0d:d1:67:26:36:0c:e5:0c:72:81:
3f:44:8d:23:08:29:98:e3:56:aa:8f:c7:ca:e1:f0:88:74:62:
96:e6:98:2c:59:11:dd:7b:bb:c8:c9:fa:4f:db:0e:62:95:b3:
3e:69:c6:cb:a7:5b:3c:a5:a1:2d:15:4e:96:60:de:02:f3:5c:
77:72:a5:96:38:fe:4e:df:7a:10:c6:b4:10:3e:55:a1:05:fe:
9e:9c:bf:61:ca:e0:45:12:48:e9:bb:dc:05:b4:27:8e:8f:e8:
29:67:6b:c0:e0:ec:8c:00:a6:bc:0a:28:fd:94:52:39:cb:94:
e5:39:11:17:98:e9:91:af:f8:84:76:81:0a:38:73:d0:e9:9c:
13:b8:17:ec:73:ba:d3:9a:53:01:11:14:d1:63:e1:93:da:b9:
bb:4f:7e:92:b7:4e:c7:88:66:53:85:9c:df:fe:e3:8a:9f:f7:
dc:35:a9:18:bf:de:5c:56:07:ba:d8:8c:63:09:a4:5c:0b:18:
9b:62:43:86:19:b6:ca:55:2c:f9:71:49:dd:9d:c3:36:4c:e1:
89:bc:37:c3:46:79:a4:bf:c3:d0:07:33:36:9d:93:5c:f4:2c:
3e:d8:f7:80:11:1d:af:cd:1d:87:7a:9e:83:d9:83:7e:7d:71:
ae:4c:17:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 06:10:59 2024 by rpki-client on console-fra.rpki-client.org