Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/b3d25c-45ba-433f-8824-17e0a6869ced/1/TwO0yT1YRg6BcVZ4AowJgC9DiFo.roa
File: TwO0yT1YRg6BcVZ4AowJgC9DiFo.roa (raw, json)
Hash identifier: S//NZrEgKa3LN4H3tVPLSdmULlJhqbqckFJCtXCinKM=
Subject key identifier: 4F:03:B4:C9:3D:58:46:0E:81:71:56:78:02:8C:09:80:2F:43:88:5A
Certificate issuer: /CN=75cb91b539fd7de8ac5538caf53bbf2fac1bb259
Certificate serial: 018CC50155A3B2277CF7DFA90A3325272EC0
Authority key identifier: 75:CB:91:B5:39:FD:7D:E8:AC:55:38:CA:F5:3B:BF:2F:AC:1B:B2:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dcuRtTn9feisVTjK9Tu_L6wbslk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/b3d25c-45ba-433f-8824-17e0a6869ced/1/TwO0yT1YRg6BcVZ4AowJgC9DiFo.roa
Signing time: Mon 01 Jan 2024 12:30:48 +0000
ROA not before: Mon 01 Jan 2024 12:30:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41660
IP address blocks: 193.219.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/b3d25c-45ba-433f-8824-17e0a6869ced/1/dcuRtTn9feisVTjK9Tu_L6wbslk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/b3d25c-45ba-433f-8824-17e0a6869ced/1/dcuRtTn9feisVTjK9Tu_L6wbslk.mft
rsync://rpki.ripe.net/repository/DEFAULT/dcuRtTn9feisVTjK9Tu_L6wbslk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Jun 2024 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:55:a3:b2:27:7c:f7:df:a9:0a:33:25:27:2e:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75cb91b539fd7de8ac5538caf53bbf2fac1bb259
Validity
Not Before: Jan 1 12:30:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4f03b4c93d58460e81715678028c09802f43885a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:a6:e9:a3:c0:70:cc:ee:97:55:54:00:ed:84:
d6:c5:6b:b5:e2:e2:12:4d:68:d4:58:2a:4f:29:8d:
7a:58:92:3a:cd:5c:4f:f8:c6:5a:13:50:c3:5d:19:
de:fd:db:94:58:46:cc:76:48:ac:94:85:94:ea:61:
f4:09:db:28:87:3b:36:ad:9a:90:75:23:b1:6f:4b:
43:cd:1f:10:3e:f7:a7:46:29:16:90:47:9d:16:54:
2d:99:ca:95:2f:2d:e6:07:29:3c:f4:28:ab:f6:e3:
ee:84:16:7a:57:d5:75:81:60:3b:0e:5c:6f:97:a0:
a0:27:40:68:1f:95:1b:7e:36:e3:40:97:95:96:35:
21:71:6b:d6:ac:46:4f:29:03:0c:de:63:16:23:cb:
8f:87:35:22:62:33:62:2b:c2:f5:d2:9e:53:58:85:
3d:8a:a6:50:83:bf:a7:52:6b:dc:73:7f:7d:d0:d7:
1f:3e:ca:ac:c1:6d:35:b4:3a:e6:da:8e:c9:83:9c:
a7:54:69:32:53:63:74:80:d3:94:8b:95:95:44:11:
66:4d:8f:ea:07:bb:04:7a:c9:9d:70:f4:53:c8:2d:
4c:aa:86:62:6e:fb:2b:84:a1:75:e4:f9:2a:88:9b:
47:d4:0c:2c:8a:97:2e:74:88:4c:3a:7d:97:fa:81:
a6:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:03:B4:C9:3D:58:46:0E:81:71:56:78:02:8C:09:80:2F:43:88:5A
X509v3 Authority Key Identifier:
keyid:75:CB:91:B5:39:FD:7D:E8:AC:55:38:CA:F5:3B:BF:2F:AC:1B:B2:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dcuRtTn9feisVTjK9Tu_L6wbslk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/b3d25c-45ba-433f-8824-17e0a6869ced/1/TwO0yT1YRg6BcVZ4AowJgC9DiFo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/b3d25c-45ba-433f-8824-17e0a6869ced/1/dcuRtTn9feisVTjK9Tu_L6wbslk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.219.114.0/24
Signature Algorithm: sha256WithRSAEncryption
93:9e:d7:0b:cb:89:29:dc:3d:f6:fe:56:a3:1c:7e:51:be:d3:
6a:cf:94:23:a1:6c:b7:e7:7b:56:c9:2b:7e:d0:b7:6f:fc:78:
f2:7a:7b:05:36:78:cb:49:16:7d:2b:8a:3b:31:64:46:0c:c9:
0f:8d:e2:92:15:d9:81:fe:95:d0:49:22:83:ce:f9:2a:5c:af:
00:16:fc:4d:ca:67:df:3c:0e:9e:a6:28:e8:65:b1:3a:7e:1e:
99:fc:f7:a7:eb:4d:00:66:ef:27:e2:ae:8c:a8:af:d0:84:4d:
46:02:61:42:87:32:08:4f:3e:b2:ff:58:e6:b2:6b:3a:b7:c5:
42:53:19:5e:21:b1:5c:2a:2b:7e:bd:04:ab:30:cf:3b:3f:24:
e1:9c:8b:94:e4:aa:9e:9c:57:fb:1d:f6:90:16:7c:63:04:00:
6d:45:63:52:9b:fd:73:0f:90:3f:86:a1:34:9e:b1:b9:b2:3f:
01:59:6f:73:00:8b:14:69:44:74:31:a2:86:73:ba:c0:dc:13:
96:d9:83:d3:38:2e:f3:c6:84:ef:fb:10:b5:0c:a1:f3:eb:5c:
b0:42:d8:91:4b:46:da:ac:c1:b3:fd:d9:1f:39:b6:9b:8c:d3:
ab:51:10:70:c0:3d:40:52:dd:6c:75:a2:ef:83:9c:5c:f5:1c:
5e:b7:96:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 22:41:26 2024 by rpki-client on console-fra.rpki-client.org