Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/e0580d-048a-4e6d-bec6-b5bbd0b5e0aa/1/Dq009aLjut7e-aFSmLWgflqeFcw.roa
File: Dq009aLjut7e-aFSmLWgflqeFcw.roa (raw, json)
Hash identifier: wwC9lTY1klrA+ZW5Yl+LlNaN75UHpc576h27g5lyVI8=
Subject key identifier: 0E:AD:34:F5:A2:E3:BA:DE:DE:F9:A1:52:98:B5:A0:7E:5A:9E:15:CC
Certificate issuer: /CN=3c2c854011140a10947da7b53bbb350f3c54b33e
Certificate serial: 018CCA285E8AD45925C7707E2B19C0081437
Authority key identifier: 3C:2C:85:40:11:14:0A:10:94:7D:A7:B5:3B:BB:35:0F:3C:54:B3:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PCyFQBEUChCUfae1O7s1DzxUsz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/e0580d-048a-4e6d-bec6-b5bbd0b5e0aa/1/Dq009aLjut7e-aFSmLWgflqeFcw.roa
Signing time: Tue 02 Jan 2024 12:31:32 +0000
ROA not before: Tue 02 Jan 2024 12:31:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205873
IP address blocks: 193.35.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/e0580d-048a-4e6d-bec6-b5bbd0b5e0aa/1/PCyFQBEUChCUfae1O7s1DzxUsz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/e0580d-048a-4e6d-bec6-b5bbd0b5e0aa/1/PCyFQBEUChCUfae1O7s1DzxUsz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/PCyFQBEUChCUfae1O7s1DzxUsz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 05:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:28:5e:8a:d4:59:25:c7:70:7e:2b:19:c0:08:14:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c2c854011140a10947da7b53bbb350f3c54b33e
Validity
Not Before: Jan 2 12:31:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0ead34f5a2e3badedef9a15298b5a07e5a9e15cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:01:f2:e9:1a:e1:55:57:3c:27:ba:4b:4a:46:
54:ef:e7:7d:ca:ad:f6:1a:a3:2f:5f:13:46:e9:97:
5a:6d:d5:31:cb:bc:68:0e:96:81:13:36:fe:dc:a4:
a3:b8:54:c2:85:a3:53:cb:d8:f0:ca:57:42:e5:33:
0d:d0:55:0f:a5:df:bb:97:8c:56:1c:4f:ae:81:74:
bd:b5:8b:65:6d:58:c3:d5:9e:2c:32:e5:c3:4a:d6:
bc:f1:16:3c:76:7e:e5:88:4e:15:48:c7:8a:fa:eb:
8a:bd:8a:c7:9f:05:0f:f6:54:e5:06:7a:bc:01:13:
3a:1e:95:90:72:67:5c:27:cc:dc:b7:d1:3f:f8:17:
2f:ca:89:c3:f3:48:fd:76:ad:26:4b:a0:15:e3:19:
9b:0b:fb:f9:6a:ff:43:22:cd:b0:32:b5:42:bc:0c:
a4:1e:77:f5:38:a8:25:78:14:8a:30:38:c0:2c:21:
98:90:7c:f3:d1:c3:e6:ae:c3:a1:73:f5:65:ec:cf:
83:ce:b9:15:8a:d2:26:5f:29:5b:06:b4:1b:71:34:
d8:9c:c7:c3:9a:36:46:c9:50:a2:1e:4d:1e:74:dd:
a5:75:fb:eb:a5:d4:f0:3a:60:1f:8d:f0:9d:2c:15:
57:a3:c3:a8:99:06:3d:24:83:1a:40:95:f7:a6:2b:
9b:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:AD:34:F5:A2:E3:BA:DE:DE:F9:A1:52:98:B5:A0:7E:5A:9E:15:CC
X509v3 Authority Key Identifier:
keyid:3C:2C:85:40:11:14:0A:10:94:7D:A7:B5:3B:BB:35:0F:3C:54:B3:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PCyFQBEUChCUfae1O7s1DzxUsz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/e0580d-048a-4e6d-bec6-b5bbd0b5e0aa/1/Dq009aLjut7e-aFSmLWgflqeFcw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/e0580d-048a-4e6d-bec6-b5bbd0b5e0aa/1/PCyFQBEUChCUfae1O7s1DzxUsz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.35.61.0/24
Signature Algorithm: sha256WithRSAEncryption
63:c3:3c:5e:21:25:5f:6e:d3:7b:cb:db:52:ae:0c:97:00:ac:
66:0b:fd:90:d5:5e:9b:36:f9:4d:9d:8b:dd:da:ac:f8:b2:29:
ba:a6:7b:19:b8:aa:18:87:7f:1c:43:c8:39:85:2c:13:fe:7e:
08:a6:be:59:8a:21:e0:a3:dc:e3:6f:7c:b0:c8:d5:00:65:6e:
62:72:92:dd:f7:b0:1e:e5:8e:8f:e1:4c:b5:9a:9f:0f:03:4f:
b1:63:12:64:9f:8e:84:2f:de:26:b3:f3:fc:4b:90:30:d2:c5:
c2:8f:2d:b4:7e:a7:ee:66:d9:ef:7d:4e:88:e6:f2:cd:3f:b8:
ef:c1:c7:b0:d1:50:47:7c:a4:84:c5:9b:c8:10:de:44:ab:35:
a4:9d:e1:89:1f:b5:44:f4:67:8c:f6:ea:14:a6:8c:25:ea:7b:
41:92:51:84:33:10:39:fc:02:9d:39:78:f3:b9:de:81:ff:ac:
58:bf:16:84:71:eb:7c:30:f6:9c:3e:bf:ca:78:ff:5a:d2:61:
7a:d0:fa:8d:1b:19:15:8e:c6:e3:c8:f8:48:17:81:f2:48:b3:
02:84:4a:04:19:07:69:87:1b:c2:15:8d:60:35:56:97:fe:dc:
f0:9d:01:1e:73:46:0a:aa:c5:0f:74:94:5d:9a:58:87:fd:32:
71:82:fa:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 12:17:39 2024 by rpki-client on console-fra.rpki-client.org