Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/sDbQELwdqGsekMU_dQv2V7Vfov4.roa
File: sDbQELwdqGsekMU_dQv2V7Vfov4.roa (raw, json)
Hash identifier: FcIF6v2XXYR/R2dybxEJSyASv2XX1egYZJY8wGbVCyU=
Subject key identifier: B0:36:D0:10:BC:1D:A8:6B:1E:90:C5:3F:75:0B:F6:57:B5:5F:A2:FE
Certificate issuer: /CN=a7fd3f89335dcf828666b28fad8ae993bd448878
Certificate serial: 018CC3B745858C97EA91B19CB775225BDB59
Authority key identifier: A7:FD:3F:89:33:5D:CF:82:86:66:B2:8F:AD:8A:E9:93:BD:44:88:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p_0_iTNdz4KGZrKPrYrpk71EiHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/sDbQELwdqGsekMU_dQv2V7Vfov4.roa
Signing time: Mon 01 Jan 2024 06:30:17 +0000
ROA not before: Mon 01 Jan 2024 06:30:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212477
IP address blocks: 194.32.144.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/p_0_iTNdz4KGZrKPrYrpk71EiHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/p_0_iTNdz4KGZrKPrYrpk71EiHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/p_0_iTNdz4KGZrKPrYrpk71EiHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 23:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:45:85:8c:97:ea:91:b1:9c:b7:75:22:5b:db:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7fd3f89335dcf828666b28fad8ae993bd448878
Validity
Not Before: Jan 1 06:30:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b036d010bc1da86b1e90c53f750bf657b55fa2fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:63:8d:d9:9e:51:41:b4:03:2d:df:9e:54:5f:
e2:e7:80:2b:5a:2a:14:e6:32:ac:0e:76:8c:dc:75:
0c:72:e0:48:1d:9c:86:73:09:36:dc:6d:fa:31:da:
c5:f0:45:09:6f:fc:d1:23:83:a1:7e:40:58:bf:96:
96:c4:e5:29:f5:b8:ae:f8:dd:bf:f4:5a:7e:eb:ff:
b4:e6:72:5e:e2:13:9e:0d:28:e2:25:37:03:8e:3b:
ad:62:c3:9b:d8:36:20:95:da:18:bf:91:46:f1:d2:
a3:93:5d:6c:5d:51:82:e7:a0:25:5e:4d:10:fc:34:
7c:67:18:a6:48:1e:fe:b6:21:9c:d5:3b:4c:05:d2:
7b:65:12:e4:50:3f:78:b6:52:ab:db:60:8f:9c:2a:
a0:6c:23:20:45:68:22:44:10:40:9c:bf:8f:5a:2c:
01:ac:db:d2:a2:8c:31:5f:3a:ed:05:cc:23:e2:35:
d6:d2:df:6d:c2:c9:76:cf:40:f3:05:78:ee:7c:5c:
76:02:f8:4c:51:b5:93:f3:8d:ea:2b:0b:f5:d3:20:
ae:ce:fa:e7:ff:a2:43:0d:3e:86:f2:73:23:96:da:
97:45:05:c0:7a:89:bf:6f:2e:e0:e2:36:43:23:2d:
ee:d6:2e:3c:fb:91:12:e3:49:6e:02:8a:15:94:35:
d3:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:36:D0:10:BC:1D:A8:6B:1E:90:C5:3F:75:0B:F6:57:B5:5F:A2:FE
X509v3 Authority Key Identifier:
keyid:A7:FD:3F:89:33:5D:CF:82:86:66:B2:8F:AD:8A:E9:93:BD:44:88:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p_0_iTNdz4KGZrKPrYrpk71EiHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/sDbQELwdqGsekMU_dQv2V7Vfov4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/p_0_iTNdz4KGZrKPrYrpk71EiHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.32.144.0/23
Signature Algorithm: sha256WithRSAEncryption
7d:43:0a:bf:2e:63:b3:02:35:90:af:f2:6c:ac:1d:87:0e:8e:
66:79:86:55:4e:ed:0c:7a:8b:ae:67:90:6c:80:d2:06:54:2e:
5d:45:e6:d3:a8:d7:f2:ec:cd:b2:c1:b8:e8:c0:9d:1f:05:b7:
b2:d9:84:80:f7:72:5d:49:fc:f7:c3:b2:48:64:e4:12:b2:8b:
7c:65:8e:b3:26:4f:81:03:1a:23:5a:b3:61:ec:9b:f1:05:ae:
80:f9:a4:dc:fc:10:3b:5b:c1:71:91:9e:29:67:5a:a8:26:6d:
ea:6d:14:5a:60:f5:aa:c1:85:a0:71:83:8a:04:94:22:9e:10:
6d:3b:30:7e:7e:63:ff:75:b6:52:05:f2:47:c8:21:39:7d:d2:
5f:66:99:7f:7a:91:43:14:b4:3b:56:fb:28:14:8e:a6:cf:e1:
47:b2:93:7b:f5:0a:65:67:c0:39:a9:38:a9:d1:82:4f:b7:b3:
bd:57:eb:af:2a:fe:57:8e:1c:9c:8a:46:37:0e:61:43:a3:26:
74:ef:90:6d:5e:e9:5b:23:3c:78:53:fc:86:10:15:0d:13:a4:
7d:29:aa:24:6b:cb:ae:76:0e:43:9d:59:74:83:23:c8:b2:2a:
c9:fc:4f:77:f2:35:c0:7d:53:d3:cc:39:41:36:08:fd:0e:bd:
9e:6c:a7:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 08:31:00 2024 by rpki-client on console-ams.rpki-client.org