Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/6TUJPvRMnCwmjgfKL_XLPaU3dAk.roa
File: 6TUJPvRMnCwmjgfKL_XLPaU3dAk.roa (raw, json)
Hash identifier: IiLOGDUZKNvV+6n0pi5BdOiB2rFJv5rAIK4k1ZCyYw4=
Subject key identifier: E9:35:09:3E:F4:4C:9C:2C:26:8E:07:CA:2F:F5:CB:3D:A5:37:74:09
Certificate issuer: /CN=44fc887c977393575de6257e75fa99cde2037c6c
Certificate serial: 018CC7934E341C682693D5D36A7EBA8F798D
Authority key identifier: 44:FC:88:7C:97:73:93:57:5D:E6:25:7E:75:FA:99:CD:E2:03:7C:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RPyIfJdzk1dd5iV-dfqZzeIDfGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/6TUJPvRMnCwmjgfKL_XLPaU3dAk.roa
Signing time: Tue 02 Jan 2024 00:29:28 +0000
ROA not before: Tue 02 Jan 2024 00:29:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 64267
IP address blocks: 193.43.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.mft
rsync://rpki.ripe.net/repository/DEFAULT/RPyIfJdzk1dd5iV-dfqZzeIDfGw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:93:4e:34:1c:68:26:93:d5:d3:6a:7e:ba:8f:79:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44fc887c977393575de6257e75fa99cde2037c6c
Validity
Not Before: Jan 2 00:29:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e935093ef44c9c2c268e07ca2ff5cb3da5377409
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d1:36:ef:28:aa:32:93:4f:9a:43:d7:97:36:
fd:be:7d:b3:cf:e1:36:4b:8a:5a:c9:00:5c:e7:68:
95:00:2a:4c:48:52:54:35:99:e0:da:56:68:78:f7:
b3:5c:4f:97:64:60:ec:b9:b9:00:e3:b3:c5:31:a4:
11:48:af:58:bb:f2:0e:da:29:8f:5f:71:53:9c:73:
5a:94:8a:69:86:8b:33:c7:61:4c:84:d3:b8:d0:08:
46:67:fe:ed:7a:e5:00:7a:fb:5c:3d:40:95:fc:81:
70:fc:72:3e:52:55:07:24:83:bd:e9:a1:1d:9d:ba:
a3:d6:91:22:67:51:77:52:ab:12:3d:71:ff:e3:98:
ea:1d:11:a7:b8:bd:b7:c6:24:8e:a7:fa:af:3b:c8:
cd:1e:6e:47:23:72:4b:b3:19:34:e2:93:b7:06:a8:
3f:53:9c:92:3e:dc:24:bf:32:ec:19:e0:75:20:50:
b3:d4:79:10:e6:dd:64:b5:4e:d5:c6:24:8a:34:91:
3f:4c:be:7e:67:18:7f:5a:ad:65:c1:e6:35:2f:38:
2e:51:b9:6c:fd:58:4a:d1:f1:fc:9f:02:0c:7f:54:
5e:2e:d3:ef:3c:86:bb:1d:2e:31:2d:99:8f:09:46:
90:7c:bb:22:80:f4:e5:81:06:8d:3d:5c:15:f0:b6:
c2:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:35:09:3E:F4:4C:9C:2C:26:8E:07:CA:2F:F5:CB:3D:A5:37:74:09
X509v3 Authority Key Identifier:
keyid:44:FC:88:7C:97:73:93:57:5D:E6:25:7E:75:FA:99:CD:E2:03:7C:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RPyIfJdzk1dd5iV-dfqZzeIDfGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/6TUJPvRMnCwmjgfKL_XLPaU3dAk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.43.143.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:a5:d6:a3:8b:9a:bc:54:1f:2b:f8:fb:e0:12:8b:6a:3c:9b:
c9:ea:9a:5f:fb:b0:af:79:e7:d0:a0:dc:84:9d:6c:46:6a:4d:
6d:98:fe:40:ec:b1:16:91:87:1a:3c:b8:55:25:6a:e6:79:f4:
53:27:2a:a9:a6:fd:51:02:76:0b:a9:eb:02:2b:75:98:69:ef:
2d:bd:32:d2:9c:21:f0:f1:c7:fe:55:01:a4:69:27:84:7c:72:
c2:0f:16:d0:19:f3:80:64:86:b1:42:c6:6d:f4:7c:96:05:eb:
da:84:5c:6d:7c:77:45:77:86:58:6e:22:95:fb:72:18:57:2b:
c6:95:7e:a0:49:8d:d6:e5:70:1e:fb:82:c8:16:22:59:c7:8e:
06:53:b2:92:cd:36:d0:1e:99:57:08:dd:a1:d2:55:d3:01:04:
c8:88:d5:7d:6c:54:6a:aa:eb:6a:16:f6:18:ca:3f:97:df:f8:
eb:86:37:6d:23:19:fe:6d:a9:1e:a3:c7:f1:0b:27:01:53:cb:
fa:32:1c:44:55:a2:db:09:d8:c2:08:d8:98:03:b2:98:ba:67:
20:6c:d6:34:27:11:1e:db:4c:25:55:a6:41:c9:0c:bf:a9:a3:
d3:e0:36:79:22:9e:50:4a:5b:a4:2c:3b:51:5d:27:98:a9:16:
46:0c:39:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 19:33:46 2024 by rpki-client on console-fra.rpki-client.org