Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/acd28e-52ae-4ac9-b028-669f7a761631/1/adDQjuvI3p4mjHQWdEQPux6RilY.roa
File: adDQjuvI3p4mjHQWdEQPux6RilY.roa (raw, json)
Hash identifier: rZI8xwYb/nUV0bmqU06/3aAXnouFSPFk+/wKxoi10Zc=
Subject key identifier: 69:D0:D0:8E:EB:C8:DE:9E:26:8C:74:16:74:44:0F:BB:1E:91:8A:56
Certificate issuer: /CN=29b3a717665a1137e99dc8fad22e3e7f98db8973
Certificate serial: 018CC9BC71C55295017FD783BD667F7FBDE3
Authority key identifier: 29:B3:A7:17:66:5A:11:37:E9:9D:C8:FA:D2:2E:3E:7F:98:DB:89:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KbOnF2ZaETfpncj60i4-f5jbiXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/acd28e-52ae-4ac9-b028-669f7a761631/1/adDQjuvI3p4mjHQWdEQPux6RilY.roa
Signing time: Tue 02 Jan 2024 10:33:39 +0000
ROA not before: Tue 02 Jan 2024 10:33:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9009
IP address blocks: 217.64.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/acd28e-52ae-4ac9-b028-669f7a761631/1/KbOnF2ZaETfpncj60i4-f5jbiXM.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/acd28e-52ae-4ac9-b028-669f7a761631/1/KbOnF2ZaETfpncj60i4-f5jbiXM.mft
rsync://rpki.ripe.net/repository/DEFAULT/KbOnF2ZaETfpncj60i4-f5jbiXM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 29 Apr 2024 05:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:71:c5:52:95:01:7f:d7:83:bd:66:7f:7f:bd:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29b3a717665a1137e99dc8fad22e3e7f98db8973
Validity
Not Before: Jan 2 10:33:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=69d0d08eebc8de9e268c741674440fbb1e918a56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:19:20:2c:5e:e2:d3:34:0f:df:7a:ab:be:1f:
6d:d3:41:6c:30:bb:6a:44:5e:d3:13:8a:f3:3d:05:
f1:24:e2:79:00:61:a3:3f:b2:a0:06:25:a8:f6:f8:
cd:5f:1b:98:50:d8:a4:d6:2e:d8:87:bc:22:01:b6:
e3:8e:45:5f:0f:23:5f:fa:02:9c:29:6e:64:2f:68:
53:b1:fb:2c:30:1f:2c:b5:9b:cd:25:5b:8e:c2:e5:
3b:3a:d7:0e:92:d1:2d:33:b8:51:c4:52:44:cc:33:
b1:82:c4:fb:ab:82:fc:51:85:56:38:87:ba:a6:5c:
01:fb:b6:dd:0e:bd:81:77:10:2f:80:77:08:23:a5:
ac:99:9f:0a:2c:22:28:c8:9c:40:4e:06:55:c6:98:
ed:c1:3f:67:f5:29:6d:93:50:e1:bc:f3:b7:31:91:
91:1e:17:1f:f7:c2:fe:06:cd:b6:dd:95:05:ee:e2:
ab:8c:48:eb:15:7d:a5:f1:e6:8b:ea:c8:b6:d0:e7:
a7:12:9b:0f:a4:1b:03:8e:2d:ad:ce:36:5b:37:d6:
10:10:13:16:dc:64:dd:f6:1d:7c:a9:e8:5b:e3:fb:
ec:ac:49:9d:fb:1d:d3:4e:80:87:95:1d:7c:f3:f8:
0e:f3:3c:c0:0f:01:62:d6:ac:33:3e:c4:20:a5:f7:
e2:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:D0:D0:8E:EB:C8:DE:9E:26:8C:74:16:74:44:0F:BB:1E:91:8A:56
X509v3 Authority Key Identifier:
keyid:29:B3:A7:17:66:5A:11:37:E9:9D:C8:FA:D2:2E:3E:7F:98:DB:89:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KbOnF2ZaETfpncj60i4-f5jbiXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/acd28e-52ae-4ac9-b028-669f7a761631/1/adDQjuvI3p4mjHQWdEQPux6RilY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/acd28e-52ae-4ac9-b028-669f7a761631/1/KbOnF2ZaETfpncj60i4-f5jbiXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.64.151.0/24
Signature Algorithm: sha256WithRSAEncryption
90:90:8d:da:c0:53:4d:38:8b:eb:24:ba:04:00:06:75:d1:8b:
98:bb:33:d1:2a:79:72:56:22:08:6e:5a:97:e5:be:fb:57:b7:
ff:ba:17:45:91:bd:b0:be:c7:4a:28:bd:6b:57:c9:68:92:26:
e8:a6:33:ba:0a:c6:77:e4:37:9b:eb:da:32:be:b6:9d:1d:a5:
ae:05:82:b4:d7:d4:c7:93:0b:e2:87:16:3c:01:17:8f:7a:75:
f4:e9:62:57:58:c0:16:fb:52:0d:f2:38:68:aa:9c:31:58:c3:
37:82:a6:87:91:1c:7f:d4:fb:5b:26:9a:d9:d5:ad:dc:0e:80:
e0:78:6b:3b:a4:9d:70:ff:5c:b3:bd:af:b4:c5:e8:f9:55:c6:
8b:3b:c2:1a:b8:72:f4:d9:bf:b2:da:21:df:aa:77:31:71:0f:
80:3a:17:2d:9d:c9:23:8a:ca:4a:e2:c9:83:b1:ee:03:2b:26:
6a:3d:3a:ae:4d:5d:aa:87:0b:9d:fe:26:33:0b:69:2c:05:8d:
43:c9:02:eb:97:9c:0c:61:de:21:e9:c9:6f:4b:08:0a:b3:d0:
45:7a:4a:40:00:cf:cf:8c:eb:5e:1d:19:6b:f8:db:5c:d4:18:
ab:df:50:d3:66:4a:b7:c0:17:7a:28:9b:a4:20:06:43:1e:b1:
f5:af:14:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 12:25:50 2024 by rpki-client on console-ams.rpki-client.org