Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/0vHf9iABQ1oR7gbJoF3r1exU7kY.roa
File: 0vHf9iABQ1oR7gbJoF3r1exU7kY.roa (raw, json)
Hash identifier: aoA2yPeaGzD1wZHuwDw2IQVmacU+3rJHUrckvBYO5+U=
Subject key identifier: D2:F1:DF:F6:20:01:43:5A:11:EE:06:C9:A0:5D:EB:D5:EC:54:EE:46
Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial: 018CC64A7BDD6940C3FEE18F3B02F61BDE10
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/0vHf9iABQ1oR7gbJoF3r1exU7kY.roa
Signing time: Mon 01 Jan 2024 18:30:19 +0000
ROA not before: Mon 01 Jan 2024 18:30:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59941
IP address blocks: 141.101.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Jun 2024 02:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:7b:dd:69:40:c3:fe:e1:8f:3b:02:f6:1b:de:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Validity
Not Before: Jan 1 18:30:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d2f1dff62001435a11ee06c9a05debd5ec54ee46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:bc:4c:b6:75:39:bf:db:5b:87:2a:f8:38:34:
52:13:58:f8:d0:47:7a:b6:0b:a5:44:04:1b:2d:66:
30:5f:0f:1d:93:7b:6e:61:19:0f:b2:b2:61:2f:d6:
a6:bd:27:41:29:aa:6f:3e:d0:e1:33:c4:1a:7a:a1:
53:e2:34:d0:35:cf:a4:7d:cb:30:b5:e7:72:6c:ec:
32:9e:62:ff:04:54:f2:e1:bd:7b:82:f8:ec:5a:74:
f3:f8:83:6d:7c:7b:f9:87:c2:5a:55:e8:7a:d8:ac:
f7:fc:1d:cc:c8:46:7e:0f:e6:c4:63:1b:f2:a7:6b:
6a:c5:81:d7:8e:ce:2e:60:fe:81:b1:e6:c8:1e:d1:
d1:ec:30:8c:97:7d:1b:0d:94:a1:28:14:83:f9:a5:
29:57:b1:57:ab:30:05:c3:65:f8:58:fc:99:a2:0e:
5f:44:12:8b:b9:36:31:4e:9a:02:b3:eb:5f:f0:01:
a2:39:8c:05:07:9f:23:27:82:66:b3:bf:c6:2b:80:
c0:3e:04:1e:1e:62:a4:c5:6f:f1:82:1a:9a:ac:07:
20:f7:50:cd:98:54:33:46:69:e3:56:b6:7f:5e:31:
71:37:00:08:b8:91:ce:42:72:12:2a:20:70:fb:75:
75:a5:c4:51:c7:d3:59:05:0a:00:44:a0:6c:06:d8:
ad:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:F1:DF:F6:20:01:43:5A:11:EE:06:C9:A0:5D:EB:D5:EC:54:EE:46
X509v3 Authority Key Identifier:
keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/0vHf9iABQ1oR7gbJoF3r1exU7kY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.101.251.0/24
Signature Algorithm: sha256WithRSAEncryption
73:05:fd:16:07:25:46:ff:50:75:a4:f1:bc:28:fa:a8:33:b7:
ca:da:48:5b:43:07:ff:2f:cd:4b:61:a6:44:30:96:23:4e:3d:
f8:6a:d8:a1:e7:2c:0c:57:73:56:e8:c4:a7:c6:10:41:30:d6:
3a:6f:17:f9:a5:1a:ae:c9:73:09:0e:70:c6:49:70:a6:39:57:
93:b7:b0:39:dc:2e:f7:ab:a9:71:46:0d:b9:14:83:56:df:1b:
82:89:69:53:50:71:54:36:ab:89:01:9a:ce:a2:35:1b:99:e7:
0a:24:84:cc:da:8a:98:b5:31:df:89:d1:d8:1a:93:2c:53:53:
bb:9c:1c:32:2b:e1:dd:82:aa:df:54:c0:36:62:8e:85:c2:39:
2f:d0:d7:ed:2a:c5:8d:5a:8d:3d:ae:50:1b:5b:34:d4:a2:0e:
e0:6f:f5:90:06:c1:45:11:b8:ea:d3:07:cc:29:81:d1:54:aa:
8b:70:eb:b7:f0:17:26:2a:6f:0a:b2:64:fc:b1:e4:84:46:02:
23:d7:bf:d5:88:a9:ba:45:eb:c4:bc:05:79:06:cc:0b:9d:b0:
1e:d9:15:3b:e0:43:f7:90:3c:f7:90:e7:b1:0c:04:e6:8e:36:
ab:ee:83:8e:52:6f:52:ab:50:b9:a3:43:02:5a:79:ee:24:59:
7f:3a:32:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 17 09:28:53 2024 by rpki-client on console-ams.rpki-client.org