Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/3e7980-7e31-4fd1-b79d-0bd62c83e92b/1/4ddBs-ioXceBPZ9DZ7y1dY3rgDQ.roa
File: 4ddBs-ioXceBPZ9DZ7y1dY3rgDQ.roa (raw, json)
Hash identifier: QCc5beSCihUA4q+cO0TCoKm9oAsaGKAWcAx0iWmwDnY=
Subject key identifier: E1:D7:41:B3:E8:A8:5D:C7:81:3D:9F:43:67:BC:B5:75:8D:EB:80:34
Certificate issuer: /CN=bf4fcb64aeb3455fb39897e31295dde83add4d0e
Certificate serial: 018CC86F43FDCDAB8FB17C3792DD8E5F451C
Authority key identifier: BF:4F:CB:64:AE:B3:45:5F:B3:98:97:E3:12:95:DD:E8:3A:DD:4D:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v0_LZK6zRV-zmJfjEpXd6DrdTQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/3e7980-7e31-4fd1-b79d-0bd62c83e92b/1/4ddBs-ioXceBPZ9DZ7y1dY3rgDQ.roa
Signing time: Tue 02 Jan 2024 04:29:44 +0000
ROA not before: Tue 02 Jan 2024 04:29:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48200
IP address blocks: 193.36.46.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/3e7980-7e31-4fd1-b79d-0bd62c83e92b/1/v0_LZK6zRV-zmJfjEpXd6DrdTQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/3e7980-7e31-4fd1-b79d-0bd62c83e92b/1/v0_LZK6zRV-zmJfjEpXd6DrdTQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/v0_LZK6zRV-zmJfjEpXd6DrdTQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:43:fd:cd:ab:8f:b1:7c:37:92:dd:8e:5f:45:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf4fcb64aeb3455fb39897e31295dde83add4d0e
Validity
Not Before: Jan 2 04:29:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e1d741b3e8a85dc7813d9f4367bcb5758deb8034
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ff:08:5a:d3:29:6c:7e:e6:c6:b1:23:c9:9d:
ef:06:17:48:26:03:b8:79:66:da:5d:2f:2f:f6:27:
07:dc:62:32:79:6e:bd:5b:41:f3:40:a9:38:80:7a:
f9:02:4b:7b:28:3b:fe:12:15:e0:e8:29:7c:4a:66:
89:bd:aa:39:44:f0:8a:8d:5b:a6:3c:92:93:01:69:
b4:43:aa:2c:eb:4b:6b:f7:0d:1a:72:7e:4d:d2:e7:
0a:98:38:24:0a:72:4e:4b:88:8a:c3:79:9e:df:4c:
8c:04:3f:1c:1e:30:2e:a8:75:e4:22:b9:a0:39:18:
81:de:01:2c:8e:77:b6:24:06:45:2c:be:e0:9b:59:
b4:52:f3:42:40:87:7d:7c:35:89:5f:05:f6:44:cf:
40:0f:62:a0:f6:c6:96:40:94:ef:91:e8:7f:b6:5b:
dd:08:24:58:4a:a2:cd:5b:0e:44:cd:76:78:db:57:
81:fc:2e:07:4a:fa:82:68:0d:50:5f:14:6b:bd:55:
c3:5d:b8:0a:af:8c:95:ba:5d:a7:a8:fa:9e:50:64:
12:67:99:75:c2:fa:e6:ca:34:e1:4e:6b:74:81:4b:
eb:8f:8b:34:7a:3f:f0:56:94:53:98:9b:58:18:b8:
5e:c9:59:85:7a:b5:8c:c8:1f:00:21:18:45:75:de:
2e:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:D7:41:B3:E8:A8:5D:C7:81:3D:9F:43:67:BC:B5:75:8D:EB:80:34
X509v3 Authority Key Identifier:
keyid:BF:4F:CB:64:AE:B3:45:5F:B3:98:97:E3:12:95:DD:E8:3A:DD:4D:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v0_LZK6zRV-zmJfjEpXd6DrdTQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/3e7980-7e31-4fd1-b79d-0bd62c83e92b/1/4ddBs-ioXceBPZ9DZ7y1dY3rgDQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/3e7980-7e31-4fd1-b79d-0bd62c83e92b/1/v0_LZK6zRV-zmJfjEpXd6DrdTQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.36.46.0/24
Signature Algorithm: sha256WithRSAEncryption
89:95:ca:7e:13:23:03:ac:4e:60:c4:38:3c:4d:a8:9d:34:b3:
c1:1c:a0:a7:8f:ba:23:83:89:17:ee:51:26:ac:cf:7b:93:01:
14:7b:66:32:62:95:8f:de:63:fd:c3:39:1e:c6:e6:18:78:0d:
d5:b4:85:a9:c5:b2:f5:b9:ed:e6:60:5f:99:76:c7:7c:7b:44:
d4:85:3e:11:2c:52:ef:68:d0:69:5e:b9:a0:93:9b:15:af:0f:
bd:e4:2a:c1:ce:32:f3:2d:39:cd:0b:07:54:52:b2:86:c5:19:
82:c4:98:69:c1:10:de:82:64:bf:1a:2a:4b:7f:89:23:f4:84:
c2:44:04:cd:7f:fa:8c:81:98:73:0a:97:46:6b:91:85:cb:af:
db:29:70:44:43:ad:be:79:b8:4b:0b:2b:8c:cb:11:44:57:bc:
6d:3a:63:d2:5a:fa:d7:ff:a9:b0:6b:04:db:c7:d0:ee:2e:db:
16:34:1e:80:8a:50:b4:e5:f0:1c:07:29:c0:be:fb:60:02:83:
7f:57:8c:a4:94:71:26:90:73:e0:91:d1:44:20:52:9d:0c:9d:
31:dc:94:ab:06:28:32:43:fa:88:e5:76:5c:da:e3:6f:59:02:
d3:8e:7d:7c:ee:c7:9a:fa:65:a1:75:89:d6:da:83:4e:1a:e3:
3f:30:53:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 20:39:55 2024 by rpki-client on console-ams.rpki-client.org