Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/R6uc_9XJrtKt2yKdd2bETBPJFSw.roa
File: R6uc_9XJrtKt2yKdd2bETBPJFSw.roa (raw, json)
Hash identifier: EYSDnF5scGmzh1oj29cAxbDYxPjemEyyOcX+/Atton4=
Subject key identifier: 47:AB:9C:FF:D5:C9:AE:D2:AD:DB:22:9D:77:66:C4:4C:13:C9:15:2C
Certificate issuer: /CN=c42708df93954aac601aef1835bd5d69245fb02f
Certificate serial: 019353DCA92F81CFE39511DA2FDD637F93AC
Authority key identifier: C4:27:08:DF:93:95:4A:AC:60:1A:EF:18:35:BD:5D:69:24:5F:B0:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xCcI35OVSqxgGu8YNb1daSRfsC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/R6uc_9XJrtKt2yKdd2bETBPJFSw.roa
Signing time: Fri 22 Nov 2024 12:33:10 +0000
ROA not before: Fri 22 Nov 2024 12:33:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203329
IP address blocks: 194.121.56.0/24 maxlen: 24
2001:678:f44::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.mft
rsync://rpki.ripe.net/repository/DEFAULT/xCcI35OVSqxgGu8YNb1daSRfsC8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 17:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:53:dc:a9:2f:81:cf:e3:95:11:da:2f:dd:63:7f:93:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c42708df93954aac601aef1835bd5d69245fb02f
Validity
Not Before: Nov 22 12:33:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=47ab9cffd5c9aed2addb229d7766c44c13c9152c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:b1:8f:87:d1:04:d5:bf:95:39:04:56:aa:e4:
01:fa:5a:c0:69:5d:d9:fc:03:db:21:2d:10:5c:c1:
21:aa:01:2e:8d:27:3e:3d:3d:a8:ff:97:04:bf:f9:
c2:f2:aa:6a:6a:da:7a:88:50:81:8b:c3:38:7c:28:
c4:54:f7:0c:a8:ce:32:4e:8d:97:5e:c2:44:33:72:
03:35:fa:aa:04:b0:a2:10:ea:42:5e:19:e9:b4:59:
39:e4:c9:a2:6f:30:1e:ab:59:9a:b7:4c:78:c2:e9:
4b:26:47:09:94:c4:7f:f0:70:2a:b4:1e:25:73:86:
dd:b4:e6:43:92:cd:49:18:2d:d2:ff:b0:27:a7:fb:
91:4a:dc:0b:f6:8d:f0:4d:c5:50:92:fb:9e:90:78:
58:0d:69:e4:9a:9a:7f:94:88:f5:fc:9b:0a:6f:d7:
5a:18:73:aa:0e:db:ee:4e:69:01:c1:c2:39:ba:f7:
21:14:a4:6a:c3:aa:71:16:80:5e:74:20:a9:c6:a6:
2e:69:78:84:40:4e:27:f8:5a:45:59:01:07:e8:b4:
fc:e7:09:67:75:a3:fe:a8:af:10:b2:34:78:c2:2d:
e0:6d:1b:d7:79:e9:69:3f:ab:56:21:88:71:52:e6:
e0:8d:10:5b:2e:93:b2:ec:b8:5e:69:a5:d7:0d:73:
d7:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:AB:9C:FF:D5:C9:AE:D2:AD:DB:22:9D:77:66:C4:4C:13:C9:15:2C
X509v3 Authority Key Identifier:
keyid:C4:27:08:DF:93:95:4A:AC:60:1A:EF:18:35:BD:5D:69:24:5F:B0:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xCcI35OVSqxgGu8YNb1daSRfsC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/R6uc_9XJrtKt2yKdd2bETBPJFSw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.121.56.0/24
IPv6:
2001:678:f44::/48
Signature Algorithm: sha256WithRSAEncryption
80:cc:0d:6b:3b:65:11:06:e5:ea:2c:5a:6f:01:93:e3:0f:6f:
7c:48:ae:d2:9e:83:c8:b0:aa:24:e9:74:9d:8b:5a:85:2c:1d:
76:2b:03:39:38:7f:dc:a1:6d:cb:23:7d:ea:83:0f:9e:08:ff:
bb:1a:eb:7f:8a:a9:f0:5b:8d:4f:5d:80:9d:ee:1a:58:1a:69:
72:63:c0:76:68:16:a2:91:1d:0b:dc:b5:dc:1e:05:81:18:de:
50:56:4b:52:81:30:98:f5:b5:c7:08:f4:6e:d7:11:67:12:78:
7d:6e:3a:12:2a:f6:b8:c1:d4:47:09:22:fa:ef:fd:4e:51:a2:
51:2b:11:70:d7:6d:c5:80:4e:eb:cd:2f:4c:2e:c9:d8:86:7b:
1d:b0:b7:e8:2a:28:d9:02:3f:32:e9:2c:1d:ec:06:38:60:51:
d5:6b:e8:46:26:fe:c3:51:a8:ef:59:db:67:00:9e:bb:d9:66:
18:1c:ac:28:a1:96:67:42:28:ea:2f:01:9a:af:0f:85:ff:2d:
e4:61:86:fd:69:67:2c:38:d7:b1:59:bc:11:6d:7a:6b:2d:f5:
23:15:25:0a:43:af:12:1d:31:df:d3:bd:f1:fa:45:ec:c3:a9:
65:5c:5c:f2:76:0b:a2:85:50:74:98:0d:0f:f3:f8:d5:aa:e2:
e7:e5:75:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:31:11 2024 by rpki-client on console-fra.rpki-client.org