Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/P4dmzUcfZjbktzVOjYfcEqJ4Zdg.roa
File: P4dmzUcfZjbktzVOjYfcEqJ4Zdg.roa (raw, json)
Hash identifier: 1TqykqnDJThghmS8IxN0rmaKfwS/ZBrLGHoxNLxSW1k=
Subject key identifier: 3F:87:66:CD:47:1F:66:36:E4:B7:35:4E:8D:87:DC:12:A2:78:65:D8
Certificate issuer: /CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Certificate serial: 018CF7F3D383AA0901C875B6403B740947A1
Authority key identifier: 51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/P4dmzUcfZjbktzVOjYfcEqJ4Zdg.roa
Signing time: Thu 11 Jan 2024 09:56:40 +0000
ROA not before: Thu 11 Jan 2024 09:56:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9009
IP address blocks: 194.79.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 29 Apr 2024 05:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:f7:f3:d3:83:aa:09:01:c8:75:b6:40:3b:74:09:47:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Validity
Not Before: Jan 11 09:56:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3f8766cd471f6636e4b7354e8d87dc12a27865d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:89:c1:55:78:23:4e:86:81:39:1a:1d:00:52:
fe:04:fa:b7:4e:75:7d:ac:f0:83:f0:29:c5:29:13:
05:c0:61:16:c7:b2:8e:24:e4:f9:f7:0f:31:4a:87:
37:a4:71:a8:dc:b4:e9:20:11:0e:ce:24:f1:81:e5:
e2:52:9e:5a:60:c2:76:4b:c1:c8:c0:95:17:ab:fc:
02:38:cf:fe:7e:79:02:83:47:52:8c:e1:57:d6:32:
cd:b5:48:6b:2a:26:7b:cc:21:a2:0b:b4:9a:2c:d7:
e6:94:cc:bd:c9:25:dc:58:3c:17:f5:f8:3a:8c:bd:
54:b5:e7:14:cb:25:b6:7b:ce:50:b4:2c:aa:90:c5:
5c:46:04:90:5b:51:50:43:6e:da:f8:6c:6a:5a:3c:
c6:05:e9:fa:38:bf:67:04:b9:90:4d:ca:03:87:cd:
8d:ca:74:cf:e4:bd:2e:44:54:75:bf:6b:1f:82:50:
85:ed:1a:bd:85:cf:41:c2:1f:43:89:2b:7b:7a:8e:
17:22:7a:83:11:55:ad:c2:04:61:c8:cf:a5:6b:1e:
41:6c:40:4c:aa:48:77:08:a3:14:66:18:e5:cd:39:
c7:e2:37:29:07:f5:5a:cc:85:ee:f1:7e:61:49:f6:
2b:c5:9d:8a:cc:62:42:0b:d3:d7:67:23:0d:64:96:
01:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:87:66:CD:47:1F:66:36:E4:B7:35:4E:8D:87:DC:12:A2:78:65:D8
X509v3 Authority Key Identifier:
keyid:51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/P4dmzUcfZjbktzVOjYfcEqJ4Zdg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.79.14.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:a0:53:ad:20:92:83:2b:77:68:92:5b:45:ef:15:6e:83:25:
3a:ec:18:57:97:79:83:a2:3f:7a:0f:7d:e8:e8:f7:7e:66:1e:
c7:b3:8f:a5:d4:0c:1c:bf:cd:04:66:e1:a3:96:f1:72:92:78:
ea:87:52:d9:50:94:67:3a:47:68:22:59:d2:9c:cc:3c:86:30:
0d:0e:a1:c4:f3:ad:49:89:dc:45:d3:3a:eb:87:44:61:32:c1:
2f:12:ca:b4:f1:b0:b4:31:5f:8e:2a:ea:69:63:97:34:80:6d:
22:3b:ab:a9:10:7d:03:56:d0:27:91:db:02:ad:f1:b0:89:fa:
85:22:a7:b7:ff:09:56:33:c7:a8:1c:b9:ed:d4:2d:74:6c:50:
d6:f3:e8:e8:08:a0:4e:b5:44:45:ee:27:38:59:be:86:a0:37:
e9:dc:12:cc:46:3e:2c:8f:9a:8b:b5:f6:0d:40:aa:e4:6f:ac:
0c:d8:1b:6f:7b:20:e3:98:4b:a5:c4:f7:d0:dd:74:5a:76:9f:
a6:d8:06:66:b6:68:66:43:24:0e:d1:cb:e3:b9:5f:55:b3:b8:
b8:17:5e:f0:84:34:ca:02:93:55:a0:e6:de:f0:6b:19:73:6a:
3b:97:66:00:44:96:cc:0f:ea:4c:83:d1:c4:08:9c:b7:1a:c4:
78:c0:89:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 15:25:08 2024 by rpki-client on console-ams.rpki-client.org