Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/Az4dY6eGgtwExfH-BqYRj78ef4Q.roa
File: Az4dY6eGgtwExfH-BqYRj78ef4Q.roa (raw, json)
Hash identifier: OJKdxDcpUjujADLVSCin6N80J+Fq03mnBTtFMxcHKw0=
Subject key identifier: 03:3E:1D:63:A7:86:82:DC:04:C5:F1:FE:06:A6:11:8F:BF:1E:7F:84
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 018CC64B83835136E3EE19C7C73A114A1CD2
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/Az4dY6eGgtwExfH-BqYRj78ef4Q.roa
Signing time: Mon 01 Jan 2024 18:31:26 +0000
ROA not before: Mon 01 Jan 2024 18:31:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34656
IP address blocks: 178.16.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.mft
rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 21:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:83:83:51:36:e3:ee:19:c7:c7:3a:11:4a:1c:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Jan 1 18:31:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=033e1d63a78682dc04c5f1fe06a6118fbf1e7f84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:e4:d1:39:e1:24:bd:7e:53:43:1d:86:ea:b3:
88:6b:a7:ce:e8:dd:4b:ed:7d:57:cb:6b:ac:45:b1:
a2:12:79:b3:02:e0:b0:eb:61:65:9e:04:5e:a3:db:
3a:41:e4:98:76:75:5b:ad:4f:7e:8f:eb:a3:a0:99:
07:53:68:28:a9:04:17:e4:1d:31:6f:da:b3:d2:2d:
d1:68:fd:5f:c4:f3:81:1d:d1:83:83:06:47:07:23:
22:29:c7:ef:8e:46:33:7e:af:82:88:28:15:ff:d2:
8a:e4:57:9e:ce:55:45:99:ed:22:91:5f:03:ec:d9:
17:55:2d:a1:c5:7d:27:bd:89:75:22:fe:df:7d:9c:
ff:19:83:b6:57:f7:d7:b3:a6:43:95:67:50:99:90:
04:eb:6e:c5:28:35:f1:a0:a0:45:c7:09:bf:b3:b4:
94:ce:95:04:1e:72:c9:a8:60:56:9f:3f:04:ce:ff:
98:f0:13:b2:5e:86:df:2f:5f:2b:34:2e:a7:a8:7a:
6a:5f:14:2f:da:c6:0c:8e:da:a3:a8:ef:31:e1:5f:
c1:e9:e3:0e:33:ba:f9:8a:23:9a:9a:15:9c:41:0c:
06:78:8c:5e:16:d3:52:f2:bc:3a:bd:da:3d:c0:f7:
1c:b7:37:1a:3e:11:d5:c9:ca:4e:c2:c7:02:03:ad:
9c:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:3E:1D:63:A7:86:82:DC:04:C5:F1:FE:06:A6:11:8F:BF:1E:7F:84
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/Az4dY6eGgtwExfH-BqYRj78ef4Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.16.119.0/24
Signature Algorithm: sha256WithRSAEncryption
89:88:7d:cd:56:03:20:50:ba:95:4b:47:18:31:d5:b9:03:f1:
fa:78:f4:3f:da:96:1a:6b:33:a6:dd:94:50:02:88:41:6f:da:
fc:9a:46:d8:71:72:25:ef:f3:96:3f:c2:6d:0b:bd:47:73:85:
84:0e:ae:06:c6:dc:29:17:01:bf:f3:d3:26:e7:b7:9a:ea:af:
ff:aa:ac:ef:c4:20:eb:e3:04:59:76:ee:0a:b4:7c:39:58:4c:
87:1d:bb:a2:b1:85:e4:19:93:9f:93:36:84:e9:87:21:b3:23:
7c:62:b1:65:b5:f8:b8:bd:32:0b:0a:6c:73:96:34:62:d9:4e:
0d:62:92:b3:8c:8a:ce:5b:83:93:d7:0e:36:4f:77:93:c7:48:
fa:f7:88:69:a6:11:6c:69:e0:36:b8:b2:ce:1a:8d:02:b1:8a:
cf:c0:b3:94:1a:1d:ed:ea:cb:ec:4e:3d:58:c5:df:56:d1:31:
87:c2:6d:c6:96:9a:b0:ea:b6:37:9a:66:ab:0f:81:0a:bd:f8:
be:2c:51:f8:22:4d:61:4d:c6:44:c2:f8:df:ce:a4:05:f8:8c:
02:86:4d:0f:f0:bc:7c:db:cf:03:bf:18:1f:26:b6:b3:6f:70:
44:d2:e6:3b:47:92:59:d9:e6:cd:a3:b9:a5:b1:5b:1a:74:4d:
db:5e:2f:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 01:26:06 2024 by rpki-client on console-ams.rpki-client.org