Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/3YlmhOb1WyxT2BiPJo8pUz8V-xI.roa
File: 3YlmhOb1WyxT2BiPJo8pUz8V-xI.roa (raw, json)
Hash identifier: dw5AVLJBKYwT6ofJT/4ck1U2LplU7TIzElgf2tKKhY0=
Subject key identifier: DD:89:66:84:E6:F5:5B:2C:53:D8:18:8F:26:8F:29:53:3F:15:FB:12
Certificate issuer: /CN=700a1231d1c27a754e46ef10e92a730ae15d0f55
Certificate serial: 018CC4254BED7F097CFB369050A2828318C8
Authority key identifier: 70:0A:12:31:D1:C2:7A:75:4E:46:EF:10:E9:2A:73:0A:E1:5D:0F:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cAoSMdHCenVORu8Q6SpzCuFdD1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/3YlmhOb1WyxT2BiPJo8pUz8V-xI.roa
Signing time: Mon 01 Jan 2024 08:30:27 +0000
ROA not before: Mon 01 Jan 2024 08:30:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208732
IP address blocks: 217.11.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/cAoSMdHCenVORu8Q6SpzCuFdD1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/cAoSMdHCenVORu8Q6SpzCuFdD1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/cAoSMdHCenVORu8Q6SpzCuFdD1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 10:03:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:4b:ed:7f:09:7c:fb:36:90:50:a2:82:83:18:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=700a1231d1c27a754e46ef10e92a730ae15d0f55
Validity
Not Before: Jan 1 08:30:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dd896684e6f55b2c53d8188f268f29533f15fb12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:43:44:b3:01:7e:50:e5:4e:8d:39:28:d2:dc:
f1:f5:0b:24:78:21:a1:e7:ab:08:9c:2c:4d:cb:81:
e8:ea:25:ba:bb:10:2b:00:33:f2:44:0a:e2:ae:d6:
33:dd:95:fa:70:5b:e5:a9:10:74:4c:e1:2a:23:34:
c1:ad:3b:cd:c5:b8:37:01:ab:b2:81:ae:57:d6:8a:
bf:45:83:fd:71:00:e3:49:8e:44:69:58:21:2d:aa:
e9:14:87:04:ab:89:29:6e:ff:4f:5f:86:74:8e:17:
78:e7:3c:83:46:eb:94:0e:ff:f7:f5:d3:1c:ea:f7:
50:ed:65:22:0f:ff:33:89:ba:f5:19:31:41:23:b3:
c5:19:7f:68:6e:09:b5:0c:12:04:89:5e:31:85:79:
19:a6:54:80:7b:41:f7:58:8a:41:94:41:d7:ed:4a:
97:f7:02:28:37:fa:86:9e:18:5a:97:7a:2c:09:26:
e8:72:fe:cb:6a:ae:08:2f:ea:bc:d3:c8:2b:d8:2a:
17:cb:c9:c4:d0:34:25:2a:8e:3f:a6:38:e7:19:3e:
86:7c:bc:44:15:1f:e6:3c:91:a8:78:df:4e:c3:9c:
d9:7c:41:01:7b:f3:6e:f4:33:a3:1b:95:2b:b6:7b:
dc:1b:a4:74:da:93:79:9e:3d:28:23:bf:e8:5c:d8:
56:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:89:66:84:E6:F5:5B:2C:53:D8:18:8F:26:8F:29:53:3F:15:FB:12
X509v3 Authority Key Identifier:
keyid:70:0A:12:31:D1:C2:7A:75:4E:46:EF:10:E9:2A:73:0A:E1:5D:0F:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cAoSMdHCenVORu8Q6SpzCuFdD1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/3YlmhOb1WyxT2BiPJo8pUz8V-xI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/cAoSMdHCenVORu8Q6SpzCuFdD1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.11.133.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:cd:ed:46:74:78:f2:e4:d4:19:c7:ee:a7:d8:7f:ef:bf:35:
3f:4a:df:b9:52:ca:52:55:97:99:5a:a4:41:a1:40:20:94:3b:
94:80:54:64:dc:d7:32:a8:ff:9d:cb:d5:9c:82:f5:f3:7e:76:
90:5a:2d:d2:34:8d:7d:e6:a4:b1:49:21:6a:1a:3a:9d:96:80:
68:4b:87:b2:55:19:0e:f8:76:48:24:e0:e9:6a:0f:de:88:86:
05:a8:ec:2b:f4:f3:75:01:95:d1:a9:76:6e:4a:ad:fd:2a:78:
90:32:ac:9e:83:4c:9f:d7:67:56:1a:9e:f9:09:de:ea:a6:72:
21:4c:7d:a1:7f:25:1d:e5:21:8b:c3:2c:2c:69:58:7f:2a:05:
d8:8f:32:0d:a4:f9:34:b0:5b:7e:68:f3:1c:9b:0d:a2:eb:40:
3a:b9:a2:36:bd:bc:6a:e7:d0:d6:0d:1e:1b:77:93:0b:09:ab:
c3:a8:28:42:23:a5:6e:b5:f9:f8:f6:73:55:ac:8f:a4:74:28:
72:a2:c9:91:2e:b4:98:20:60:c2:88:c9:47:6e:b4:58:92:2e:
f7:47:0b:98:91:a3:1a:57:bf:24:a1:9f:7f:60:8f:42:30:c9:
68:7c:23:ca:2b:c6:a5:22:cd:b7:81:ba:19:c2:19:13:8e:7d:
48:f0:25:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 18:35:04 2024 by rpki-client on console-ams.rpki-client.org