Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/CDWaU0U4NScwvf8Iw5TZhAGaLjw.roa
File: CDWaU0U4NScwvf8Iw5TZhAGaLjw.roa (raw, json)
Hash identifier: ewf0Nlh+RCnGcSWJO3WWf9dLmyceQct6xY5rUZRttlw=
Subject key identifier: 08:35:9A:53:45:38:35:27:30:BD:FF:08:C3:94:D9:84:01:9A:2E:3C
Certificate issuer: /CN=9d5de490ff874e9689cecf726cbb4e2f51f6c731
Certificate serial: 018CC6B8FFE8FC67FECACDB6EDAE7F4BC7C7
Authority key identifier: 9D:5D:E4:90:FF:87:4E:96:89:CE:CF:72:6C:BB:4E:2F:51:F6:C7:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nV3kkP-HTpaJzs9ybLtOL1H2xzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/CDWaU0U4NScwvf8Iw5TZhAGaLjw.roa
Signing time: Mon 01 Jan 2024 20:31:02 +0000
ROA not before: Mon 01 Jan 2024 20:31:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198949
IP address blocks: 194.8.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/nV3kkP-HTpaJzs9ybLtOL1H2xzE.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/nV3kkP-HTpaJzs9ybLtOL1H2xzE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nV3kkP-HTpaJzs9ybLtOL1H2xzE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 25 Jun 2024 04:03:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:ff:e8:fc:67:fe:ca:cd:b6:ed:ae:7f:4b:c7:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d5de490ff874e9689cecf726cbb4e2f51f6c731
Validity
Not Before: Jan 1 20:31:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=08359a534538352730bdff08c394d984019a2e3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:94:8c:2c:d9:fa:02:72:9c:b5:71:dd:8d:8d:
fa:cf:37:a4:35:81:6f:89:a5:ac:ad:94:21:ad:8e:
4c:99:37:11:7d:62:ad:f1:65:65:83:e2:51:72:7c:
c5:13:07:97:71:04:64:60:7f:3f:07:6e:2d:37:23:
ff:80:b4:9e:26:41:85:1e:19:b2:3e:84:4a:aa:8e:
e3:95:fb:df:a7:56:63:11:a1:6a:e7:ac:f6:d1:67:
1d:5d:95:2d:db:78:e9:84:a3:4e:64:18:6c:64:d6:
91:9b:ee:37:7c:eb:80:1f:84:ad:ad:c8:8f:27:68:
4c:67:54:0f:6f:37:eb:e2:60:56:fb:67:b2:2d:d2:
c9:f9:5b:2b:fb:cb:99:e1:da:03:38:d3:85:7c:e0:
cb:d3:5e:90:f5:4f:eb:0d:63:79:16:77:c2:da:14:
3d:75:78:cb:10:4c:e2:84:ed:70:cd:ca:3b:7d:46:
2b:07:ba:e5:e0:ad:c5:82:09:29:51:60:6a:fc:71:
3d:59:0d:ad:2b:9c:d3:59:5f:d5:cc:4a:ad:15:93:
90:08:74:ec:a3:2c:b8:2b:52:5d:6d:c7:0d:5a:77:
50:ed:04:99:86:0b:92:a2:f2:b9:95:7a:76:53:16:
72:24:23:07:02:a3:11:4a:86:b7:11:31:3c:c8:3b:
48:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:35:9A:53:45:38:35:27:30:BD:FF:08:C3:94:D9:84:01:9A:2E:3C
X509v3 Authority Key Identifier:
keyid:9D:5D:E4:90:FF:87:4E:96:89:CE:CF:72:6C:BB:4E:2F:51:F6:C7:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nV3kkP-HTpaJzs9ybLtOL1H2xzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/CDWaU0U4NScwvf8Iw5TZhAGaLjw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/nV3kkP-HTpaJzs9ybLtOL1H2xzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.8.123.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:0e:00:7d:9b:13:34:ff:42:95:75:8f:1c:3c:a9:77:57:3c:
40:b0:09:38:28:1e:52:90:19:a1:e8:05:4b:dc:21:c1:d2:dc:
cf:87:c9:a1:c0:cd:b5:28:2e:12:b8:25:83:c9:b1:a5:87:a9:
a8:5e:95:8d:9c:5d:72:55:6e:80:12:29:58:9f:b0:f8:16:d0:
c5:ec:8f:34:48:2a:92:d0:64:11:15:fa:5f:2d:db:6c:d3:c1:
92:37:42:26:72:4b:c6:73:85:c6:7c:ba:39:7f:60:0d:45:32:
fc:46:ce:40:1a:bf:6f:d5:4a:35:31:b4:59:7e:f3:2b:dc:21:
27:26:32:35:72:ea:8d:7c:27:49:37:ee:8a:0f:43:f9:cf:9e:
90:1f:01:50:cb:71:d3:7e:37:38:24:06:4e:28:95:92:92:d0:
77:6b:57:d5:5e:c9:b6:7d:a6:ff:62:61:f4:af:7b:dc:2f:64:
37:bc:46:00:f4:09:69:b4:cf:26:ab:f2:1c:ba:97:ff:b7:0c:
40:6b:39:32:b4:65:82:21:bd:d7:87:05:c8:6e:c3:3b:f0:18:
31:cc:df:8a:a7:4d:a4:20:e5:55:8e:7b:bc:21:89:f2:ae:e9:
4c:8b:40:76:56:6b:e9:11:51:84:08:cb:cd:5d:fa:1e:dc:ac:
71:f3:6d:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 12:00:40 2024 by rpki-client on console-fra.rpki-client.org