Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/809da0-e395-4f80-ab17-3d4da8d12806/1/P2udyw1TmB2zCZHc3eNi4smQM7k.roa
File: P2udyw1TmB2zCZHc3eNi4smQM7k.roa (raw, json)
Hash identifier: 5jKAbWDGxBtTEUuIVrzx8KljOhp/dwp4LiAXWy/6Qb4=
Subject key identifier: 3F:6B:9D:CB:0D:53:98:1D:B3:09:91:DC:DD:E3:62:E2:C9:90:33:B9
Certificate issuer: /CN=6e046aeb6a01ca48a49750d881b79f7a78d51089
Certificate serial: 018CC424DFD96A865368DC35EC2DE04EEE10
Authority key identifier: 6E:04:6A:EB:6A:01:CA:48:A4:97:50:D8:81:B7:9F:7A:78:D5:10:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bgRq62oBykikl1DYgbefenjVEIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/809da0-e395-4f80-ab17-3d4da8d12806/1/P2udyw1TmB2zCZHc3eNi4smQM7k.roa
Signing time: Mon 01 Jan 2024 08:30:00 +0000
ROA not before: Mon 01 Jan 2024 08:30:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34232
IP address blocks: 176.53.194.0/23 maxlen: 24
176.53.208.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/809da0-e395-4f80-ab17-3d4da8d12806/1/bgRq62oBykikl1DYgbefenjVEIk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/809da0-e395-4f80-ab17-3d4da8d12806/1/bgRq62oBykikl1DYgbefenjVEIk.mft
rsync://rpki.ripe.net/repository/DEFAULT/bgRq62oBykikl1DYgbefenjVEIk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:df:d9:6a:86:53:68:dc:35:ec:2d:e0:4e:ee:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e046aeb6a01ca48a49750d881b79f7a78d51089
Validity
Not Before: Jan 1 08:30:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3f6b9dcb0d53981db30991dcdde362e2c99033b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:09:a1:42:c7:57:1b:28:cf:70:c6:1e:6a:59:
45:c1:fa:c2:42:0e:a1:32:5b:a7:03:df:50:88:ab:
1c:12:23:51:91:eb:95:c0:25:b6:ff:6e:72:f6:cf:
57:56:a1:85:a1:6c:16:45:ed:8d:8b:e3:fc:87:c3:
7b:71:f7:31:8e:6b:38:db:2e:70:71:f3:65:0d:d7:
12:d2:81:95:d2:cf:74:d1:50:a6:3a:44:98:80:b0:
06:87:68:e5:f5:de:da:bf:f5:34:07:e2:44:e7:e3:
74:fb:78:e6:4a:b8:6f:36:06:1b:40:72:6b:21:6d:
c7:cd:47:c0:02:62:f4:01:e8:ca:6a:d7:93:d8:88:
52:4a:c3:4e:3f:bd:c9:dc:d0:8e:0e:b3:46:5c:89:
18:97:21:6a:2c:89:ff:6e:9e:b1:a4:8b:e8:72:e8:
be:2a:78:b4:5e:12:c7:88:5d:1d:3a:06:b4:dc:54:
58:1f:8a:72:35:6a:9c:ef:1b:96:70:67:a9:29:80:
51:fd:9b:35:ce:7d:59:e4:03:73:6e:1c:78:74:2e:
1c:e9:1c:fd:9d:70:b8:3d:83:8f:72:76:fa:0b:f0:
b4:d3:e5:1a:b5:f2:64:f0:24:b4:0b:35:59:24:5e:
73:16:84:96:3b:11:d8:74:fb:00:7d:a4:7a:23:17:
c4:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:6B:9D:CB:0D:53:98:1D:B3:09:91:DC:DD:E3:62:E2:C9:90:33:B9
X509v3 Authority Key Identifier:
keyid:6E:04:6A:EB:6A:01:CA:48:A4:97:50:D8:81:B7:9F:7A:78:D5:10:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bgRq62oBykikl1DYgbefenjVEIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/809da0-e395-4f80-ab17-3d4da8d12806/1/P2udyw1TmB2zCZHc3eNi4smQM7k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/809da0-e395-4f80-ab17-3d4da8d12806/1/bgRq62oBykikl1DYgbefenjVEIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.53.194.0/23
176.53.208.0/22
Signature Algorithm: sha256WithRSAEncryption
23:2c:59:2c:19:fb:0a:ec:89:8a:7a:e8:37:24:ab:c2:54:51:
09:f2:a5:75:49:f4:ac:98:b4:ff:11:32:92:48:b1:ba:86:e5:
4d:01:18:2d:19:c1:fd:ab:4c:7e:e5:aa:78:4e:90:a3:f3:1c:
f6:87:95:94:01:e0:40:5d:91:71:cf:41:2d:3b:fc:24:9a:5d:
97:e1:6a:00:10:48:fb:fd:71:26:ac:64:95:ca:c3:51:52:b7:
c6:74:f4:e6:3a:45:bd:0a:50:9d:cb:92:55:d7:00:03:89:5f:
28:33:b9:3a:d2:bb:b7:f5:3e:ec:2a:c6:5e:d6:c2:ed:e4:6e:
a2:41:c6:35:27:38:23:c8:5b:b4:ab:72:a0:48:c5:65:96:ae:
8b:62:f3:72:df:00:69:46:30:56:f9:1b:b7:6d:a5:e6:3b:12:
9f:41:b4:ff:49:9a:1a:e1:12:d3:e8:e4:f2:a9:d7:c5:87:bd:
6b:77:97:4e:59:c9:73:0a:ab:be:99:dc:7d:e7:55:26:bb:d5:
5d:82:bb:54:ab:1a:22:2b:9c:ae:92:35:29:04:b9:81:1b:66:
a8:7f:73:c9:6a:ac:0d:be:d0:eb:c2:73:cc:b3:b0:66:ac:73:
f8:91:ee:db:dd:89:70:46:95:50:1b:f4:71:35:8e:66:27:0d:
b9:9d:e2:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 05:58:45 2024 by rpki-client on console-fra.rpki-client.org