Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/3502fc-d9f7-4fa8-baf6-77d529be53d7/1/1-crK62LTeJejNPx2YtXDITsjqa0.roa
File: 1-crK62LTeJejNPx2YtXDITsjqa0.roa (raw, json)
Hash identifier: FbnpOmSinW4wlfWcVBkjxTJTpjduzLFixryXzMS3yRI=
Subject key identifier: F9:CA:CA:EB:62:D3:78:97:A3:34:FC:76:62:D5:C3:21:3B:23:A9:AD
Certificate issuer: /CN=b4b0bbd6445578edbc7ba6b5bf7ca9368d2417bf
Certificate serial: 018CC424B1EB993836D58AD529FED95DAF8C
Authority key identifier: B4:B0:BB:D6:44:55:78:ED:BC:7B:A6:B5:BF:7C:A9:36:8D:24:17:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tLC71kRVeO28e6a1v3ypNo0kF78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/3502fc-d9f7-4fa8-baf6-77d529be53d7/1/1-crK62LTeJejNPx2YtXDITsjqa0.roa
Signing time: Mon 01 Jan 2024 08:29:48 +0000
ROA not before: Mon 01 Jan 2024 08:29:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206813
IP address blocks: 194.113.54.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/3502fc-d9f7-4fa8-baf6-77d529be53d7/1/tLC71kRVeO28e6a1v3ypNo0kF78.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/3502fc-d9f7-4fa8-baf6-77d529be53d7/1/tLC71kRVeO28e6a1v3ypNo0kF78.mft
rsync://rpki.ripe.net/repository/DEFAULT/tLC71kRVeO28e6a1v3ypNo0kF78.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Jul 2024 01:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:b1:eb:99:38:36:d5:8a:d5:29:fe:d9:5d:af:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4b0bbd6445578edbc7ba6b5bf7ca9368d2417bf
Validity
Not Before: Jan 1 08:29:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f9cacaeb62d37897a334fc7662d5c3213b23a9ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:1a:0c:be:74:49:a5:05:f1:0f:3d:1f:70:24:
86:b7:80:5d:38:bc:46:25:3e:ee:a5:88:41:8e:b5:
d5:76:57:40:b5:6c:96:01:75:be:c9:7f:9a:b2:38:
38:b5:14:39:e9:a8:ba:b9:17:16:19:de:70:1f:5d:
ed:01:5d:75:25:79:7b:a3:26:b3:ee:ac:4a:03:56:
73:91:4c:da:d4:5b:dd:03:f8:6c:c5:32:22:ae:7e:
96:c4:39:f7:80:06:01:1c:5c:21:85:4a:03:bb:a6:
86:ed:a3:31:20:5a:e0:ce:4a:7d:fb:39:9d:2b:ab:
79:71:a9:ab:6b:6a:f1:5d:0b:72:96:9b:85:14:be:
04:60:f8:cf:bc:12:c4:6f:f9:2e:e2:8f:ea:fb:f6:
8e:58:83:ac:52:83:28:3d:62:45:5d:e7:d2:7c:ef:
6e:f5:07:19:cc:d5:a7:b1:92:86:98:5c:a7:76:66:
47:77:c9:f7:dd:79:08:b6:fc:f6:92:bb:b9:8d:26:
ea:9b:25:ad:e8:67:24:58:ac:63:54:57:42:b7:74:
dd:70:87:2f:51:64:e0:b5:fa:ec:1d:4d:82:7f:bd:
c3:28:04:12:3a:3b:d5:29:f7:9a:4f:89:b0:24:56:
f4:f2:6c:c6:13:fd:66:c4:64:46:93:08:cd:9e:16:
5a:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:CA:CA:EB:62:D3:78:97:A3:34:FC:76:62:D5:C3:21:3B:23:A9:AD
X509v3 Authority Key Identifier:
keyid:B4:B0:BB:D6:44:55:78:ED:BC:7B:A6:B5:BF:7C:A9:36:8D:24:17:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tLC71kRVeO28e6a1v3ypNo0kF78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/3502fc-d9f7-4fa8-baf6-77d529be53d7/1/1-crK62LTeJejNPx2YtXDITsjqa0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/3502fc-d9f7-4fa8-baf6-77d529be53d7/1/tLC71kRVeO28e6a1v3ypNo0kF78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.113.54.0/23
Signature Algorithm: sha256WithRSAEncryption
0d:ec:98:5c:26:8b:42:4d:83:5e:f5:11:df:17:04:18:0e:9a:
b0:19:4f:09:47:25:1c:ee:cf:8e:07:af:33:7d:01:bb:65:22:
04:a5:d1:b5:e8:5d:ca:06:40:70:f5:01:28:74:46:15:1f:1d:
0b:17:30:fe:11:3b:c9:20:52:f9:6b:ee:ab:02:12:14:c3:e6:
4f:3a:f3:e5:03:ec:79:b6:bf:90:b8:35:64:94:dd:9c:99:31:
1c:75:6f:e9:6a:d8:8a:22:c7:cd:bc:51:6c:1d:fd:7b:bb:56:
59:eb:59:1e:ba:48:4b:ac:50:5f:8c:2e:66:a8:29:4e:da:94:
d1:36:ba:ca:71:c7:be:1a:2f:06:9e:51:b8:0d:f6:bf:2b:72:
65:03:4f:6a:90:65:56:f3:0f:fd:5e:74:b6:01:e4:67:73:6c:
9c:39:a1:e9:68:3a:3f:ca:d6:7f:c9:20:9e:40:43:18:77:3b:
d1:79:7c:63:7b:71:7b:b6:56:b4:75:a8:1d:3e:f4:0d:ca:7f:
05:d7:00:3d:2f:12:09:cb:79:33:dc:75:bc:cd:ed:d6:80:4c:
d3:73:7f:49:7a:37:d2:f9:ca:90:bc:2c:77:6f:99:e9:4d:20:
5c:48:33:8f:6a:4d:98:ad:9b:e0:8b:6e:47:4e:97:e1:cb:e5:
73:73:cd:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 8 08:36:52 2024 by rpki-client on console-fra.rpki-client.org