Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/847ffa-9f38-4610-98e7-528a63be4c87/1/MD63urejUVAM75kTtVM8Ng3ldUs.roa
File: MD63urejUVAM75kTtVM8Ng3ldUs.roa (raw, json)
Hash identifier: mJOHj4LcaTOR5pVvPZSd7bIae69KPLrz9Zbcj0boBuU=
Subject key identifier: 30:3E:B7:BA:B7:A3:51:50:0C:EF:99:13:B5:53:3C:36:0D:E5:75:4B
Certificate issuer: /CN=4f9ac6fe2031adde03668240e3c5d91ec6711e1e
Certificate serial: 018CC8012882731192458CF68548BD452FE3
Authority key identifier: 4F:9A:C6:FE:20:31:AD:DE:03:66:82:40:E3:C5:D9:1E:C6:71:1E:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5rG_iAxrd4DZoJA48XZHsZxHh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/847ffa-9f38-4610-98e7-528a63be4c87/1/MD63urejUVAM75kTtVM8Ng3ldUs.roa
Signing time: Tue 02 Jan 2024 02:29:28 +0000
ROA not before: Tue 02 Jan 2024 02:29:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 33927
IP address blocks: 185.93.186.0/24 maxlen: 24
194.6.232.0/23 maxlen: 23
194.6.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/847ffa-9f38-4610-98e7-528a63be4c87/1/T5rG_iAxrd4DZoJA48XZHsZxHh4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/847ffa-9f38-4610-98e7-528a63be4c87/1/T5rG_iAxrd4DZoJA48XZHsZxHh4.mft
rsync://rpki.ripe.net/repository/DEFAULT/T5rG_iAxrd4DZoJA48XZHsZxHh4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 07:02:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:28:82:73:11:92:45:8c:f6:85:48:bd:45:2f:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9ac6fe2031adde03668240e3c5d91ec6711e1e
Validity
Not Before: Jan 2 02:29:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=303eb7bab7a351500cef9913b5533c360de5754b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:47:e6:4e:00:e9:64:fa:35:66:b7:1d:bc:ca:
80:0a:b8:47:e0:d2:b6:94:f3:38:5a:7e:40:7b:65:
76:2f:e3:b8:74:3e:4f:a5:1b:c6:6a:13:7a:07:44:
f0:5c:9c:26:fc:36:a6:77:ad:7e:4f:1f:4d:e5:49:
25:57:fb:a6:db:9a:22:52:73:03:73:25:da:e3:7d:
86:61:f0:7d:aa:32:30:58:df:9d:b2:90:82:0f:d4:
9b:e2:41:df:e3:b3:72:f1:c1:ed:1b:0c:22:3f:cc:
0d:60:fd:ed:76:93:99:7d:28:dd:54:8d:d1:96:3a:
51:9c:13:ef:c7:1f:8b:2b:6e:4a:29:af:d2:37:c4:
bc:87:fc:65:bc:cb:cd:d8:80:fb:c8:01:b3:30:2c:
a8:42:4f:d5:ff:23:53:6b:c5:64:59:75:aa:be:c1:
fc:93:21:1c:6b:9f:f3:af:10:02:96:0e:9e:ce:33:
98:30:0d:78:ef:9d:c3:29:f2:15:a2:f6:6b:85:37:
e0:81:81:45:b3:58:67:2b:36:5b:34:30:81:80:ab:
06:a7:91:a7:7e:72:57:c6:99:84:d6:9f:7e:1d:ba:
03:da:d0:00:39:4c:6d:d4:36:c5:09:05:2f:2e:e5:
7b:f2:2e:06:60:da:71:5c:7f:a1:df:30:f4:1b:a4:
e7:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:3E:B7:BA:B7:A3:51:50:0C:EF:99:13:B5:53:3C:36:0D:E5:75:4B
X509v3 Authority Key Identifier:
keyid:4F:9A:C6:FE:20:31:AD:DE:03:66:82:40:E3:C5:D9:1E:C6:71:1E:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5rG_iAxrd4DZoJA48XZHsZxHh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/847ffa-9f38-4610-98e7-528a63be4c87/1/MD63urejUVAM75kTtVM8Ng3ldUs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/847ffa-9f38-4610-98e7-528a63be4c87/1/T5rG_iAxrd4DZoJA48XZHsZxHh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.93.186.0/24
194.6.231.0-194.6.233.255
Signature Algorithm: sha256WithRSAEncryption
16:9f:35:79:59:72:e3:2d:a7:5c:a2:0a:2f:d4:8c:3d:ef:49:
32:77:34:0b:1d:ea:bc:e6:06:32:39:5d:0e:8d:b8:f9:a6:2a:
c1:eb:72:c9:1c:e3:19:12:2c:45:89:2d:3c:23:b7:db:48:73:
ab:af:57:b8:c3:19:3f:cd:bb:14:5f:9a:79:e6:e8:3f:5d:44:
10:0a:ba:b1:1e:0e:bf:4c:0c:62:a8:f0:99:fc:52:ce:f4:57:
d2:66:57:dc:04:c9:27:65:21:56:b7:6c:34:15:a0:92:bd:90:
bc:60:4e:7f:de:95:02:b9:ca:55:22:18:a9:9c:6b:b0:6b:6d:
ad:18:04:43:42:1b:55:6b:e8:ba:dc:94:41:a3:dd:ee:58:5e:
1d:18:52:4b:45:7d:ff:4f:08:5e:01:d5:dd:04:c0:c6:82:ca:
34:bb:d3:1b:4b:58:ad:4d:55:4c:29:89:98:87:db:87:73:48:
a9:19:e8:b9:c3:d6:1a:77:67:8f:26:33:5c:45:b6:bd:56:32:
08:39:8e:21:83:07:62:3d:d7:c9:6e:7e:2b:39:5e:94:d2:17:
4c:ab:32:f8:9f:88:1e:9e:b1:a2:bc:85:ec:4e:0e:af:aa:46:
54:4f:2a:d0:56:ca:1e:81:f6:e8:40:c1:0d:9d:e6:10:9e:f1:
f0:9d:1a:1e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jun 7 17:40:40 2024 by rpki-client on console-ams.rpki-client.org