Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/a94780-1bf3-467a-9369-e98ff33f697c/1/4xjMbsicSaeFnY-4hyLre2YynJ0.roa
File: 4xjMbsicSaeFnY-4hyLre2YynJ0.roa (raw, json)
Hash identifier: NM4K2HcrJFPy5krUZKyIGIyawZ2ITgHMa3MIBCUE+Hc=
Subject key identifier: E3:18:CC:6E:C8:9C:49:A7:85:9D:8F:B8:87:22:EB:7B:66:32:9C:9D
Certificate issuer: /CN=fa6df53c9fd2c5fc74f1db71834d7e46a76e91d7
Certificate serial: 018CCA2B384DB8D40A1E3E9805D0A9EE70B6
Authority key identifier: FA:6D:F5:3C:9F:D2:C5:FC:74:F1:DB:71:83:4D:7E:46:A7:6E:91:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-m31PJ_Sxfx08dtxg01-Rqdukdc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/a94780-1bf3-467a-9369-e98ff33f697c/1/4xjMbsicSaeFnY-4hyLre2YynJ0.roa
Signing time: Tue 02 Jan 2024 12:34:39 +0000
ROA not before: Tue 02 Jan 2024 12:34:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210647
IP address blocks: 193.222.254.0/24 maxlen: 24
2a11:a5c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/a94780-1bf3-467a-9369-e98ff33f697c/1/1-m31PJ_Sxfx08dtxg01-Rqdukdc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/a94780-1bf3-467a-9369-e98ff33f697c/1/1-m31PJ_Sxfx08dtxg01-Rqdukdc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-m31PJ_Sxfx08dtxg01-Rqdukdc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 May 2024 13:03:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2b:38:4d:b8:d4:0a:1e:3e:98:05:d0:a9:ee:70:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa6df53c9fd2c5fc74f1db71834d7e46a76e91d7
Validity
Not Before: Jan 2 12:34:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e318cc6ec89c49a7859d8fb88722eb7b66329c9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ef:13:b8:a0:3d:bc:b8:c8:1a:9d:ce:62:f5:
6b:20:59:16:26:e5:44:75:3d:da:27:b9:9c:fa:a0:
06:e1:6b:d8:a8:ae:d5:5c:4a:95:11:42:24:6b:f5:
99:ca:31:b4:41:ae:8c:2e:89:c8:d6:20:e5:fa:83:
c7:1b:03:b1:58:02:9f:3b:44:cb:91:13:c5:35:67:
92:6f:8a:04:ed:2c:54:52:91:a1:12:6d:bc:e6:ff:
35:46:cc:30:96:65:ac:f6:50:28:50:1c:00:71:b8:
af:11:25:b2:41:8b:51:08:62:ec:e6:51:de:d9:b0:
ac:31:d5:e9:30:ca:74:8d:70:1f:70:8c:d4:ce:5a:
15:a6:c8:f6:26:ca:8e:a9:97:93:02:54:6e:a6:69:
4e:ba:34:74:60:3f:dd:3c:53:0e:e2:b6:2a:b3:81:
60:07:51:fb:15:31:6c:63:60:8f:f6:96:ee:18:48:
14:20:c9:f5:b8:c6:52:66:96:c9:d1:5a:c9:19:b2:
e8:a7:96:4c:08:87:de:d2:2a:c7:60:92:b0:0d:6e:
3e:93:3a:3a:52:8f:44:33:ad:e3:5d:5e:ac:6e:f5:
1f:8d:03:ef:3f:59:1d:ad:68:68:11:38:01:62:e6:
22:ef:e1:5c:32:27:a5:5d:8a:13:a4:f9:b8:be:58:
d5:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:18:CC:6E:C8:9C:49:A7:85:9D:8F:B8:87:22:EB:7B:66:32:9C:9D
X509v3 Authority Key Identifier:
keyid:FA:6D:F5:3C:9F:D2:C5:FC:74:F1:DB:71:83:4D:7E:46:A7:6E:91:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-m31PJ_Sxfx08dtxg01-Rqdukdc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/a94780-1bf3-467a-9369-e98ff33f697c/1/4xjMbsicSaeFnY-4hyLre2YynJ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/a94780-1bf3-467a-9369-e98ff33f697c/1/1-m31PJ_Sxfx08dtxg01-Rqdukdc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.222.254.0/24
IPv6:
2a11:a5c0::/29
Signature Algorithm: sha256WithRSAEncryption
62:2b:5c:a4:46:92:4e:d7:99:df:2b:ea:73:52:69:6a:66:09:
8e:77:bd:69:58:ad:3f:8e:6a:20:57:e0:c6:a4:7c:14:2e:2e:
e7:aa:3c:6c:31:81:65:60:4e:ff:c3:6b:81:79:6e:f1:ab:4e:
c5:1e:1e:f2:a2:f7:8f:39:27:ad:d6:f2:4e:6f:c2:bc:0b:06:
96:79:da:be:67:6c:47:5c:1f:58:37:8f:92:bd:c4:ef:88:e2:
69:eb:be:4e:2e:21:80:a8:6d:fd:67:71:01:c2:ef:20:ac:b8:
36:33:63:e9:fe:6f:db:3d:14:46:49:22:1b:c7:d1:38:ea:d9:
4b:76:af:bb:0e:6b:e3:91:e6:ca:79:a8:17:9d:fb:15:28:85:
af:e7:e9:63:26:ee:7e:b3:19:e4:ee:95:14:f9:4f:84:08:5e:
b8:39:98:8e:ab:9f:34:b6:10:3d:65:b3:93:83:c4:9a:78:5d:
59:fb:59:a8:f6:36:b5:2e:71:61:3e:c3:0f:de:0b:71:7a:45:
71:10:24:b5:05:8a:26:cb:17:36:40:e5:a5:17:75:3c:f0:90:
c4:a7:59:41:e0:da:9f:bb:88:ec:e2:85:02:89:aa:27:cd:dc:
72:36:49:35:0a:b1:f1:7b:01:1d:44:b8:e9:17:85:02:62:5d:
d9:33:53:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 28 21:19:10 2024 by rpki-client on console-ams.rpki-client.org