Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/19e6e2-c2a1-4ebc-ba5a-e7caf5e5bcba/1/As6DBm2_cYTLq8Ao3beqPUk_OQI.roa
File: As6DBm2_cYTLq8Ao3beqPUk_OQI.roa (raw, json)
Hash identifier: dHPoic4O07u6jI/6jnlgvJoymtdOzMFi19wkcdcQv3U=
Subject key identifier: 02:CE:83:06:6D:BF:71:84:CB:AB:C0:28:DD:B7:AA:3D:49:3F:39:02
Certificate issuer: /CN=c691f345a503cb8c8a9de427e8812efff21b22b5
Certificate serial: 01900CFA03F66600FA577B5B9718A8E0E1F0
Authority key identifier: C6:91:F3:45:A5:03:CB:8C:8A:9D:E4:27:E8:81:2E:FF:F2:1B:22:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xpHzRaUDy4yKneQn6IEu__IbIrU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/19e6e2-c2a1-4ebc-ba5a-e7caf5e5bcba/1/As6DBm2_cYTLq8Ao3beqPUk_OQI.roa
Signing time: Wed 12 Jun 2024 15:03:49 +0000
ROA not before: Wed 12 Jun 2024 15:03:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20473
IP address blocks: 146.19.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/19e6e2-c2a1-4ebc-ba5a-e7caf5e5bcba/1/xpHzRaUDy4yKneQn6IEu__IbIrU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/19e6e2-c2a1-4ebc-ba5a-e7caf5e5bcba/1/xpHzRaUDy4yKneQn6IEu__IbIrU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xpHzRaUDy4yKneQn6IEu__IbIrU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Sep 2024 14:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:0c:fa:03:f6:66:00:fa:57:7b:5b:97:18:a8:e0:e1:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c691f345a503cb8c8a9de427e8812efff21b22b5
Validity
Not Before: Jun 12 15:03:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=02ce83066dbf7184cbabc028ddb7aa3d493f3902
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:76:47:90:af:29:13:46:ca:77:29:70:e4:aa:
f6:bb:e1:e9:ec:96:62:7c:12:e7:10:dd:8b:c7:98:
47:b5:d2:bf:cd:ec:b9:69:bf:d9:82:19:b2:76:bb:
7b:41:05:e2:2a:af:2b:aa:a7:f4:f4:99:1e:8e:63:
94:54:0b:ca:d9:50:98:7a:0b:4c:af:fa:e7:97:c7:
d2:4d:5b:20:b2:f2:15:30:5d:c4:65:81:78:a3:9f:
a1:37:0b:2c:09:c7:41:ed:e0:9c:66:33:e1:6f:20:
ff:b8:7d:ae:9c:45:36:f6:eb:6e:ce:c5:8e:08:d2:
b1:be:0a:33:10:10:44:a5:a3:a5:08:94:38:d9:b6:
10:c1:b5:e2:fd:89:56:eb:af:cc:a2:be:64:c8:79:
da:f8:c7:0a:8e:d2:63:39:a6:c9:10:c4:1b:73:13:
e1:87:be:79:0f:f8:ba:93:3d:c1:66:d5:7a:87:08:
ca:4f:2d:c1:e4:68:0c:ca:45:a8:37:d8:a9:57:a7:
f7:51:41:04:b7:44:65:f1:34:2e:ca:84:96:80:49:
48:b8:5b:60:43:c6:5a:6c:4f:e6:f2:76:ff:82:7f:
aa:5b:ef:4d:f0:b6:b0:63:88:76:ff:b7:88:78:d4:
aa:5b:92:b3:e7:44:b4:70:7c:d1:2c:05:a8:29:72:
8b:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:CE:83:06:6D:BF:71:84:CB:AB:C0:28:DD:B7:AA:3D:49:3F:39:02
X509v3 Authority Key Identifier:
keyid:C6:91:F3:45:A5:03:CB:8C:8A:9D:E4:27:E8:81:2E:FF:F2:1B:22:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xpHzRaUDy4yKneQn6IEu__IbIrU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/19e6e2-c2a1-4ebc-ba5a-e7caf5e5bcba/1/As6DBm2_cYTLq8Ao3beqPUk_OQI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/19e6e2-c2a1-4ebc-ba5a-e7caf5e5bcba/1/xpHzRaUDy4yKneQn6IEu__IbIrU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.204.0/24
Signature Algorithm: sha256WithRSAEncryption
42:39:4a:e0:79:59:cd:67:fd:1b:89:1b:28:f6:35:00:16:a3:
85:f2:a9:4e:64:49:75:d2:e1:f1:1e:94:c2:08:31:17:02:43:
87:c9:d7:d7:12:16:38:13:66:06:32:87:80:d2:3e:88:f8:91:
3c:04:a9:45:f0:00:e7:77:1b:e7:7e:e9:ef:8c:a4:8c:4d:0a:
c9:8f:73:d8:47:af:06:c3:54:7d:94:59:a6:1c:4b:28:bf:c8:
73:63:03:10:2c:e3:9d:95:b1:df:28:ce:c6:87:28:78:96:0b:
2a:db:4e:3a:8c:e1:f2:36:84:cc:0f:a6:31:4f:7e:08:e8:73:
2c:96:89:0a:d2:ad:20:9a:cb:40:f4:67:5f:11:14:3a:0d:a0:
79:86:81:4c:2e:b4:b7:ab:b8:17:ec:36:d7:4b:63:12:cf:77:
c2:06:f6:2d:d2:c7:9b:a1:86:3d:06:01:04:b1:47:bb:c5:e3:
ea:2d:10:d2:61:d7:2c:a1:22:d9:2d:8e:a8:7c:3a:ca:70:7b:
d3:8a:8e:14:c2:64:f6:1a:88:d1:d5:a2:cf:1b:ae:a4:f0:31:
6a:08:79:6b:81:cb:aa:69:54:38:8a:bf:0f:46:98:a4:51:f6:
0f:6c:5d:0b:b8:91:12:4d:42:dc:c4:ca:33:79:ae:96:5c:99:
2a:38:7b:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 21:08:46 2024 by rpki-client on console-fra.rpki-client.org