Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/61109f-2d19-41ce-ba6e-ddbc0def83e1/1/sFQebQQfmfZ1ChQvAVce0K-uXb4.roa
File: sFQebQQfmfZ1ChQvAVce0K-uXb4.roa (raw, json)
Hash identifier: VDEY8v6ld/RKdBxeHBTQh0OCbyxStJmCz0sdg+0eEgc=
Subject key identifier: B0:54:1E:6D:04:1F:99:F6:75:0A:14:2F:01:57:1E:D0:AF:AE:5D:BE
Certificate issuer: /CN=4e7461477b59b7bc0906f6ce60650bb3ad2dee57
Certificate serial: 018CC6B90DE7D57ECB79BF1ECB2601244281
Authority key identifier: 4E:74:61:47:7B:59:B7:BC:09:06:F6:CE:60:65:0B:B3:AD:2D:EE:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TnRhR3tZt7wJBvbOYGULs60t7lc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/61109f-2d19-41ce-ba6e-ddbc0def83e1/1/sFQebQQfmfZ1ChQvAVce0K-uXb4.roa
Signing time: Mon 01 Jan 2024 20:31:05 +0000
ROA not before: Mon 01 Jan 2024 20:31:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29075
IP address blocks: 194.147.152.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/61109f-2d19-41ce-ba6e-ddbc0def83e1/1/TnRhR3tZt7wJBvbOYGULs60t7lc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/61109f-2d19-41ce-ba6e-ddbc0def83e1/1/TnRhR3tZt7wJBvbOYGULs60t7lc.mft
rsync://rpki.ripe.net/repository/DEFAULT/TnRhR3tZt7wJBvbOYGULs60t7lc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Jun 2024 17:05:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:0d:e7:d5:7e:cb:79:bf:1e:cb:26:01:24:42:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e7461477b59b7bc0906f6ce60650bb3ad2dee57
Validity
Not Before: Jan 1 20:31:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b0541e6d041f99f6750a142f01571ed0afae5dbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:c1:5d:5a:90:3b:04:11:57:9e:5d:94:cb:a2:
c6:90:5f:85:fd:bd:bc:14:58:ab:14:7a:c1:7f:9e:
dd:07:cd:92:1c:b6:84:4d:37:93:f5:75:3f:91:7e:
17:8a:1b:92:d3:fc:f5:75:8f:8c:6c:d9:14:00:7d:
7d:a2:a2:66:11:a8:75:6e:77:5f:40:85:3b:e6:84:
c7:55:2c:0c:a2:a5:a0:41:97:4f:32:45:f6:43:0c:
09:b6:d4:3c:d4:28:4f:1b:ec:5f:c0:0d:0a:7e:3c:
69:ae:74:fd:24:8d:ec:ef:40:be:4d:a5:28:9c:ea:
95:bb:b6:5e:66:49:30:4a:2f:98:41:f2:46:3d:de:
5a:5e:ce:0e:0c:12:7c:1b:65:16:0a:73:13:06:76:
1c:08:7b:46:b5:5d:dd:3f:16:70:fd:38:f3:9b:5c:
2c:de:dc:c0:15:93:f0:e3:b9:59:49:73:f2:1c:4b:
1a:c6:61:38:21:50:3d:2b:bc:22:38:9b:dc:34:73:
db:c5:e7:b7:30:e3:07:22:de:e7:3f:a3:50:44:4f:
33:bf:96:d6:59:fe:b0:fa:21:44:ce:31:5c:57:06:
4d:39:0a:5c:8c:7b:e3:f2:75:a4:b2:ae:95:3e:cb:
f0:12:18:79:50:3d:3c:5b:37:3b:99:01:c2:4e:67:
e7:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:54:1E:6D:04:1F:99:F6:75:0A:14:2F:01:57:1E:D0:AF:AE:5D:BE
X509v3 Authority Key Identifier:
keyid:4E:74:61:47:7B:59:B7:BC:09:06:F6:CE:60:65:0B:B3:AD:2D:EE:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TnRhR3tZt7wJBvbOYGULs60t7lc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/61109f-2d19-41ce-ba6e-ddbc0def83e1/1/sFQebQQfmfZ1ChQvAVce0K-uXb4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/61109f-2d19-41ce-ba6e-ddbc0def83e1/1/TnRhR3tZt7wJBvbOYGULs60t7lc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.147.152.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:52:96:aa:8d:58:a4:88:5d:7b:31:cb:5a:90:15:ae:55:f1:
ab:f7:6e:00:55:b2:16:ca:7f:bb:d4:cb:49:99:70:42:73:c5:
d2:02:46:89:3f:ff:80:06:ce:d7:25:9c:b7:5a:21:21:79:a7:
21:86:9b:31:16:4e:b3:59:6e:8a:54:4a:8b:7a:ec:2a:fe:88:
61:38:5f:58:f8:a5:45:03:f1:ee:e3:e2:a7:32:23:b9:74:76:
ba:f9:d0:db:55:ce:98:6f:db:59:1f:73:a6:ae:32:92:66:07:
83:7d:b1:56:20:7c:63:fc:67:8c:bc:de:84:38:23:b5:7c:66:
7b:53:f3:7d:1c:fb:ba:11:14:25:c0:e4:01:ad:08:62:34:cc:
d3:45:85:be:d5:93:86:83:03:7a:f8:39:8e:cf:a9:c6:dd:ed:
a5:28:e2:25:f8:b0:ff:0a:ec:4e:03:b1:c0:aa:d5:60:97:4e:
04:0a:17:92:37:a6:f7:c7:51:74:f5:13:9e:36:cc:21:69:fe:
39:f8:55:9a:39:66:b9:55:24:6c:cb:4b:dc:46:75:67:2e:12:
c3:ac:8a:01:1b:0e:86:9e:34:4b:1e:01:71:c0:66:80:49:c2:
fb:f0:a4:a7:4e:0b:8f:e1:cb:e2:f7:e7:1f:83:50:a1:aa:66:
d3:e1:7d:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 21:53:37 2024 by rpki-client on console-fra.rpki-client.org