Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/f264bb-efdd-4497-bc10-ddfef3c6ad9e/1/0xa6q5fCeP8FgS53DWOfjC7xXl4.roa
File: 0xa6q5fCeP8FgS53DWOfjC7xXl4.roa (raw, json)
Hash identifier: 9oK0cqWvUxXUSCbDu988nOmQh8MFAYprXY/8cvHwVFU=
Subject key identifier: D3:16:BA:AB:97:C2:78:FF:05:81:2E:77:0D:63:9F:8C:2E:F1:5E:5E
Certificate issuer: /CN=3dc386271c0e0a8d01fb190d68d85ff764d16ad4
Certificate serial: 0190D93D1D17A12DBF06535642C982689E9B
Authority key identifier: 3D:C3:86:27:1C:0E:0A:8D:01:FB:19:0D:68:D8:5F:F7:64:D1:6A:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PcOGJxwOCo0B-xkNaNhf92TRatQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/f264bb-efdd-4497-bc10-ddfef3c6ad9e/1/0xa6q5fCeP8FgS53DWOfjC7xXl4.roa
Signing time: Mon 22 Jul 2024 06:59:39 +0000
ROA not before: Mon 22 Jul 2024 06:59:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205559
IP address blocks: 185.206.34.0/23 maxlen: 23
185.206.34.0/24 maxlen: 24
185.206.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/f264bb-efdd-4497-bc10-ddfef3c6ad9e/1/PcOGJxwOCo0B-xkNaNhf92TRatQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/f264bb-efdd-4497-bc10-ddfef3c6ad9e/1/PcOGJxwOCo0B-xkNaNhf92TRatQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/PcOGJxwOCo0B-xkNaNhf92TRatQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Sep 2024 15:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:d9:3d:1d:17:a1:2d:bf:06:53:56:42:c9:82:68:9e:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3dc386271c0e0a8d01fb190d68d85ff764d16ad4
Validity
Not Before: Jul 22 06:59:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d316baab97c278ff05812e770d639f8c2ef15e5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:71:46:c3:3c:f2:61:5b:ec:ec:39:2a:36:0d:
82:e4:13:74:06:5a:1b:56:40:da:e9:65:bd:9e:a1:
6b:c9:87:1b:87:89:d7:b4:2b:74:bb:0d:31:77:1d:
94:54:83:3c:45:60:40:1c:0a:8a:ee:c9:c8:99:f7:
0f:bf:87:56:11:dd:c8:b8:a4:bd:1b:e4:cc:e2:d0:
d1:86:58:fa:55:2d:84:03:7c:2f:22:c5:5e:84:0b:
f4:e8:bb:a6:44:c3:21:80:a4:b5:b3:ed:e7:52:a1:
7c:d3:a6:db:bc:03:75:77:eb:28:9c:66:35:27:4e:
b3:94:29:01:1e:82:1a:d3:38:7d:b5:aa:fb:74:c5:
f8:7b:48:3e:ee:85:02:ec:4f:1c:3a:0b:b2:85:70:
97:29:b5:46:7f:4b:f6:2e:03:dc:c1:bc:60:e3:54:
aa:ff:18:03:70:86:50:1d:04:8a:72:a3:84:af:0b:
a8:73:10:fe:31:20:a0:b1:4c:cd:0d:ac:e9:4b:cb:
84:fb:f2:3b:d8:85:ab:37:d4:71:10:72:bc:85:06:
49:49:86:26:0c:18:27:1e:14:cd:e0:b7:48:b9:b5:
df:46:90:7d:58:9b:1b:ac:16:06:4e:6e:9b:38:29:
e7:b3:40:24:56:32:23:60:09:af:54:1b:91:5d:d4:
b2:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:16:BA:AB:97:C2:78:FF:05:81:2E:77:0D:63:9F:8C:2E:F1:5E:5E
X509v3 Authority Key Identifier:
keyid:3D:C3:86:27:1C:0E:0A:8D:01:FB:19:0D:68:D8:5F:F7:64:D1:6A:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PcOGJxwOCo0B-xkNaNhf92TRatQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/f264bb-efdd-4497-bc10-ddfef3c6ad9e/1/0xa6q5fCeP8FgS53DWOfjC7xXl4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/f264bb-efdd-4497-bc10-ddfef3c6ad9e/1/PcOGJxwOCo0B-xkNaNhf92TRatQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.206.34.0/23
Signature Algorithm: sha256WithRSAEncryption
54:5f:16:86:ae:3b:d4:33:a5:77:dc:e0:59:25:0b:51:33:79:
10:a4:31:65:7d:6d:40:d3:88:f3:5e:f7:ca:01:30:7a:85:13:
8e:0d:35:f5:38:36:40:e1:bb:45:5c:40:ff:b5:81:a3:8f:58:
f3:5c:f9:54:98:55:df:36:aa:f8:80:d2:8f:bf:90:20:13:ef:
84:82:18:28:38:cb:e8:bd:2f:07:c6:ba:d4:e5:cd:da:4f:bf:
73:cf:2e:a7:aa:d3:c4:d6:f4:6a:a0:e0:6f:4f:39:51:7e:81:
dd:8d:34:d7:1c:49:e4:24:1d:b9:e7:23:c5:89:7e:dc:45:4f:
bf:af:d4:db:66:e1:ed:18:70:14:5f:0f:dc:70:c3:25:a9:59:
06:b4:d2:33:d2:0a:40:18:dc:99:2b:d5:0e:24:ce:4c:08:18:
99:af:43:1e:27:3f:50:67:d7:8d:23:37:ff:91:4a:c8:5a:1c:
bf:7b:95:8e:85:26:ff:4e:16:da:20:9f:4b:91:5e:04:36:e6:
6d:95:1e:ed:36:6e:50:02:60:5c:e4:0e:6b:91:d8:b1:74:22:
cb:ed:1d:c1:28:45:03:08:d9:8a:26:d4:ff:75:0b:59:5f:16:
11:b7:a6:b0:75:76:1f:db:05:0b:b3:0f:d4:ab:65:29:56:3b:
c1:8d:2b:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 19:20:32 2024 by rpki-client on console-fra.rpki-client.org