Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/4bcb1b-ff41-48e0-8db8-6212ac49ca3b/1/r0CqBDiHixY8TiNHLE4R4QhnyhE.roa
File: r0CqBDiHixY8TiNHLE4R4QhnyhE.roa (raw, json)
Hash identifier: HvN/UuJrVgCGnpu6fHe1gvDCCX7pcGWGEXjMaRWKXro=
Subject key identifier: AF:40:AA:04:38:87:8B:16:3C:4E:23:47:2C:4E:11:E1:08:67:CA:11
Certificate issuer: /CN=ddb71471373bb0603c356eeded4b918292b5beee
Certificate serial: 018CC6B941F506289DEBA70D61A8558D7788
Authority key identifier: DD:B7:14:71:37:3B:B0:60:3C:35:6E:ED:ED:4B:91:82:92:B5:BE:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3bcUcTc7sGA8NW7t7UuRgpK1vu4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/4bcb1b-ff41-48e0-8db8-6212ac49ca3b/1/r0CqBDiHixY8TiNHLE4R4QhnyhE.roa
Signing time: Mon 01 Jan 2024 20:31:18 +0000
ROA not before: Mon 01 Jan 2024 20:31:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3257
IP address blocks: 145.8.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/4bcb1b-ff41-48e0-8db8-6212ac49ca3b/1/3bcUcTc7sGA8NW7t7UuRgpK1vu4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/4bcb1b-ff41-48e0-8db8-6212ac49ca3b/1/3bcUcTc7sGA8NW7t7UuRgpK1vu4.mft
rsync://rpki.ripe.net/repository/DEFAULT/3bcUcTc7sGA8NW7t7UuRgpK1vu4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:41:f5:06:28:9d:eb:a7:0d:61:a8:55:8d:77:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddb71471373bb0603c356eeded4b918292b5beee
Validity
Not Before: Jan 1 20:31:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=af40aa0438878b163c4e23472c4e11e10867ca11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:25:c1:73:f4:62:39:79:6d:f7:f7:b3:be:d5:
c9:0f:20:21:55:4d:5b:2e:34:65:37:17:34:1e:18:
05:c1:71:19:7c:0a:d8:51:78:30:e4:5f:88:59:19:
da:4b:39:bf:c4:31:c4:7c:0e:b9:eb:73:1d:f5:79:
4f:8a:72:62:f6:48:4e:ca:c3:4b:0f:f6:e9:5f:10:
8f:d3:b6:56:8a:df:74:00:46:1c:3c:aa:2e:ba:7f:
0f:fd:ee:95:85:ca:14:74:01:4b:76:9c:2c:99:80:
0b:7f:46:db:66:f1:06:1f:be:93:2a:a0:05:33:9c:
0e:b8:28:84:91:33:04:84:a6:09:7a:61:62:d1:cb:
ab:05:7b:ed:c3:f9:eb:54:34:45:db:89:b1:ab:e4:
a3:7c:9c:2f:af:4f:69:0c:b2:35:7d:8f:c8:45:76:
91:2b:e7:d6:0a:e5:e9:e2:65:2e:26:a7:9f:06:fa:
06:b6:82:9d:24:02:ff:53:6c:f4:d7:55:e0:11:8e:
1b:a7:6a:52:9a:52:0a:63:8b:35:f0:4f:d3:a8:a2:
98:ad:65:3e:aa:98:5b:8f:5b:e3:40:77:b1:13:8f:
11:54:ab:7d:15:ac:96:cb:d9:2f:54:94:c0:b4:00:
1f:17:e7:82:12:98:55:67:e2:df:26:c0:99:a9:8b:
37:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:40:AA:04:38:87:8B:16:3C:4E:23:47:2C:4E:11:E1:08:67:CA:11
X509v3 Authority Key Identifier:
keyid:DD:B7:14:71:37:3B:B0:60:3C:35:6E:ED:ED:4B:91:82:92:B5:BE:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3bcUcTc7sGA8NW7t7UuRgpK1vu4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/4bcb1b-ff41-48e0-8db8-6212ac49ca3b/1/r0CqBDiHixY8TiNHLE4R4QhnyhE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/4bcb1b-ff41-48e0-8db8-6212ac49ca3b/1/3bcUcTc7sGA8NW7t7UuRgpK1vu4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.8.0.0/16
Signature Algorithm: sha256WithRSAEncryption
71:99:1d:52:5f:59:89:1c:1b:78:ca:1c:f1:f5:15:5e:df:9f:
98:30:38:91:95:18:df:31:d4:d0:3f:8b:b9:5b:5f:20:87:10:
b9:f0:9b:23:9c:5e:2f:79:ca:9e:8f:5d:9f:68:f9:f3:e8:b8:
19:42:1e:48:46:3e:3e:d8:fb:88:88:ed:7d:68:f0:a1:10:6a:
9c:fb:77:ff:04:46:f2:34:2b:06:7a:ad:75:a1:fc:9c:48:c3:
98:93:6c:61:3f:0c:29:e6:b4:a8:60:c6:35:11:b6:42:a2:a9:
c5:de:1c:7d:e2:62:87:ad:c4:e5:68:61:1a:ad:3c:d6:15:d4:
1c:66:25:60:59:e1:14:8c:ff:85:25:b2:76:3a:45:7e:d6:0a:
76:33:35:4d:af:5e:58:b1:13:20:27:0a:97:c0:2d:29:9d:df:
db:48:e0:0d:1c:46:31:96:1d:ec:9b:d5:19:c6:af:61:93:08:
d1:97:27:fa:be:51:0b:ce:3d:da:bb:73:a8:f9:bf:e8:0e:f3:
66:8d:fa:c8:68:52:22:32:5b:20:b0:ff:66:4c:1c:e8:89:1a:
18:a6:6f:14:16:ee:56:50:d9:ff:10:fb:50:b4:26:f1:96:e3:
99:73:c0:94:e6:a9:9b:29:7e:69:6c:69:f4:04:80:88:60:8e:
26:05:44:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 04:44:31 2024 by rpki-client on console-ams.rpki-client.org