Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/cb4b6b-18aa-4e2c-a405-e7e77b6fac1e/1/mQPdNUsxiW2bzw1J3tbNAUkq_TI.roa
File: mQPdNUsxiW2bzw1J3tbNAUkq_TI.roa (raw, json)
Hash identifier: 3gB8e288Js3h7ePtc1mNT1VjYDyYo6zZBqfhZK6X4Xk=
Subject key identifier: 99:03:DD:35:4B:31:89:6D:9B:CF:0D:49:DE:D6:CD:01:49:2A:FD:32
Certificate issuer: /CN=d3202774b7de641d8ea18be56a75ff6098747618
Certificate serial: 018E803098B9A9B093AA16EE6906A7CA4EBB
Authority key identifier: D3:20:27:74:B7:DE:64:1D:8E:A1:8B:E5:6A:75:FF:60:98:74:76:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0yAndLfeZB2OoYvlanX_YJh0dhg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/cb4b6b-18aa-4e2c-a405-e7e77b6fac1e/1/mQPdNUsxiW2bzw1J3tbNAUkq_TI.roa
Signing time: Wed 27 Mar 2024 13:54:12 +0000
ROA not before: Wed 27 Mar 2024 13:54:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 396982
IP address blocks: 109.95.124.0/22 maxlen: 28
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/cb4b6b-18aa-4e2c-a405-e7e77b6fac1e/1/0yAndLfeZB2OoYvlanX_YJh0dhg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/cb4b6b-18aa-4e2c-a405-e7e77b6fac1e/1/0yAndLfeZB2OoYvlanX_YJh0dhg.mft
rsync://rpki.ripe.net/repository/DEFAULT/0yAndLfeZB2OoYvlanX_YJh0dhg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:80:30:98:b9:a9:b0:93:aa:16:ee:69:06:a7:ca:4e:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3202774b7de641d8ea18be56a75ff6098747618
Validity
Not Before: Mar 27 13:54:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9903dd354b31896d9bcf0d49ded6cd01492afd32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:36:53:41:6d:19:52:88:05:1e:57:61:38:c6:
06:15:3f:54:2d:3e:69:e0:09:b7:9e:11:5c:d5:37:
ba:28:1b:d5:9e:c1:b0:3e:0e:40:c5:45:71:aa:02:
12:0a:b2:37:00:63:e8:80:43:84:83:f3:f9:b3:49:
c4:50:80:c7:66:7e:b9:d9:e5:4f:b7:47:b6:8f:2a:
c9:da:63:9a:97:b2:82:d2:b8:36:47:70:27:8d:a5:
8f:5c:6c:5f:e5:86:ef:47:df:9f:9f:81:d4:fb:ea:
64:7a:ca:df:1a:41:ab:f3:cd:47:16:9c:39:6a:49:
31:0d:84:e8:00:6d:e4:94:ed:c2:25:c2:0f:21:4c:
45:90:37:72:4f:a8:3a:f0:e1:29:9d:70:86:4c:a8:
04:a2:00:29:58:d8:76:95:26:f0:4a:fd:8e:bd:8b:
ab:d8:f8:34:96:87:1b:a8:79:ad:29:e5:5b:6e:5b:
f4:f4:be:9b:a2:6b:42:ea:c9:e4:01:d6:1d:c3:9b:
d7:18:45:5a:98:a5:20:3c:d8:fa:09:f5:45:b3:a7:
4b:74:6d:25:30:90:fb:0a:17:6d:a3:95:7f:0e:5b:
a1:67:3e:85:6b:39:6b:f7:a8:26:5e:f7:7e:24:2e:
21:ad:0d:ac:08:7e:76:e4:fa:c1:58:e6:e9:49:ad:
97:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:03:DD:35:4B:31:89:6D:9B:CF:0D:49:DE:D6:CD:01:49:2A:FD:32
X509v3 Authority Key Identifier:
keyid:D3:20:27:74:B7:DE:64:1D:8E:A1:8B:E5:6A:75:FF:60:98:74:76:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0yAndLfeZB2OoYvlanX_YJh0dhg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/cb4b6b-18aa-4e2c-a405-e7e77b6fac1e/1/mQPdNUsxiW2bzw1J3tbNAUkq_TI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/cb4b6b-18aa-4e2c-a405-e7e77b6fac1e/1/0yAndLfeZB2OoYvlanX_YJh0dhg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.95.124.0/22
Signature Algorithm: sha256WithRSAEncryption
95:37:db:a7:4e:3e:16:ea:16:12:d7:1c:7b:69:d1:fe:b7:fa:
bf:1d:79:fe:3a:df:41:49:4e:75:66:b7:c4:ec:1f:51:57:58:
69:97:c3:5f:25:57:0c:cc:4f:cf:8b:ba:9a:93:03:36:f9:50:
2b:21:8f:99:39:21:3a:2e:80:26:77:0b:9c:79:79:9b:fa:81:
dc:2a:91:88:c3:af:a3:07:3d:f1:21:f5:a8:67:e2:1a:75:4a:
99:36:64:b1:f6:a6:6f:7f:de:5a:b3:53:60:06:44:cc:2e:c7:
37:e8:ac:f5:54:0b:ff:e1:56:68:e1:cf:4f:09:7a:7f:31:3e:
e5:a1:ed:ee:bd:6d:1e:75:2f:7f:dc:7d:62:3a:81:c7:da:03:
3c:8b:3a:ff:a3:1b:2b:68:e9:c8:91:07:84:7b:56:8e:a2:07:
25:f8:0b:14:2b:73:40:f0:ec:81:cd:bc:e6:28:0a:7e:7a:cd:
59:38:19:2f:8a:1f:b0:61:9a:1e:5d:04:54:eb:a0:1c:45:3c:
72:04:e0:84:fd:7b:27:16:e1:ba:86:68:f9:b3:ac:1c:5f:bc:
cb:62:70:9d:db:06:9d:35:f0:a1:bd:61:a3:a9:85:f0:5f:69:
a1:eb:05:96:eb:ad:ee:bb:56:b8:d0:ca:ee:a3:66:c9:b5:9a:
e2:d2:df:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 22:46:17 2024 by rpki-client on console-ams.rpki-client.org