Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/1n84ttSBSTs0lIFDVWiy_Ps3gsY.roa
File: 1n84ttSBSTs0lIFDVWiy_Ps3gsY.roa (raw, json)
Hash identifier: drTtFK0YdRiD4UHN6W6tMx0rio+7dfJVTAFsQ4FPtXw=
Subject key identifier: D6:7F:38:B6:D4:81:49:3B:34:94:81:43:55:68:B2:FC:FB:37:82:C6
Certificate issuer: /CN=464952bc165441ec6e2e2010c933dc830f361731
Certificate serial: 018CC3491ADD74AEB4845FE04EA9EBFD9EF9
Authority key identifier: 46:49:52:BC:16:54:41:EC:6E:2E:20:10:C9:33:DC:83:0F:36:17:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RklSvBZUQexuLiAQyTPcgw82FzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/1n84ttSBSTs0lIFDVWiy_Ps3gsY.roa
Signing time: Mon 01 Jan 2024 04:29:57 +0000
ROA not before: Mon 01 Jan 2024 04:29:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47414
IP address blocks: 217.19.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.mft
rsync://rpki.ripe.net/repository/DEFAULT/RklSvBZUQexuLiAQyTPcgw82FzE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jul 2024 08:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:1a:dd:74:ae:b4:84:5f:e0:4e:a9:eb:fd:9e:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=464952bc165441ec6e2e2010c933dc830f361731
Validity
Not Before: Jan 1 04:29:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d67f38b6d481493b349481435568b2fcfb3782c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:67:e6:26:d7:31:72:f2:24:b7:b3:de:c2:90:
62:f5:70:b4:33:d9:79:cd:57:36:5b:71:44:29:22:
a1:88:18:f1:a0:04:bb:09:69:99:87:f5:ac:b3:e0:
6a:da:c4:83:b1:e0:08:ba:42:79:df:2c:7c:cf:08:
ec:a1:9e:b7:0e:a0:32:4d:72:44:84:93:f3:23:cc:
af:b3:8e:d6:24:21:bd:f3:2f:77:9e:6f:2f:1f:6d:
fc:3c:9f:77:7d:a2:84:8a:47:8b:91:6a:4a:81:e6:
7c:41:27:e9:70:8c:64:84:23:63:8a:71:d7:70:2a:
9b:9d:20:e2:f8:e6:11:9b:8d:45:5b:65:73:b9:f8:
3f:ed:c4:bd:98:8e:3e:5a:37:78:52:2b:72:c3:e9:
1f:ea:ac:93:6e:24:71:01:be:18:30:9a:9e:89:c5:
c1:71:a9:0f:a4:f7:30:61:f5:1a:fb:7f:cd:cd:e2:
5d:b8:f4:42:3b:34:15:19:f9:a9:39:a6:be:b5:3c:
7a:5a:ca:b7:32:8d:8e:ed:52:e5:eb:b1:20:cb:c9:
ef:fc:45:e0:48:12:7c:3f:4b:cb:af:28:54:df:c2:
96:0c:96:07:9f:bd:5c:4c:f6:da:50:e2:44:e9:b3:
c8:6c:82:ff:6e:0e:4b:a8:06:4c:ab:7d:0c:6d:6c:
fa:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:7F:38:B6:D4:81:49:3B:34:94:81:43:55:68:B2:FC:FB:37:82:C6
X509v3 Authority Key Identifier:
keyid:46:49:52:BC:16:54:41:EC:6E:2E:20:10:C9:33:DC:83:0F:36:17:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RklSvBZUQexuLiAQyTPcgw82FzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/1n84ttSBSTs0lIFDVWiy_Ps3gsY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.19.6.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:78:ff:ec:86:39:4a:2f:5b:8e:43:92:f6:ce:e2:72:63:4d:
c1:83:33:18:57:25:2f:e4:7c:d7:25:f7:ab:f7:8e:6e:dd:c3:
5a:0e:b7:2c:cc:d7:e7:98:94:89:a6:47:25:ff:85:e1:de:3a:
46:c6:e1:22:e7:31:9a:2e:24:fc:e0:46:b9:b4:15:ec:2b:4b:
b6:5f:7c:2a:2d:84:f3:5c:53:6a:fc:e7:ae:68:95:32:77:82:
5b:e5:9e:f2:d8:5b:58:07:05:f1:5f:53:c9:92:13:fc:17:e8:
e3:2c:bd:5e:2b:28:bc:58:bc:9c:d2:34:b2:ac:4b:fd:57:39:
03:8a:68:4c:9f:dc:b5:74:b8:4d:66:94:3d:c8:42:1b:f4:f5:
2c:9b:d8:38:46:76:1d:7b:60:09:67:92:da:50:99:50:07:06:
80:19:bc:c5:f7:ef:75:71:55:70:e9:0e:e8:cc:28:e0:08:9e:
bd:bb:a1:31:37:93:bf:9e:0e:a3:d7:f9:c3:50:88:d6:ec:ad:
e3:ba:27:a3:74:a5:92:27:d0:c0:7e:04:e4:02:d0:be:68:4b:
c3:26:31:cd:b3:d0:cf:d8:fb:28:5e:2f:aa:9a:c5:90:51:9d:
5c:10:6f:40:98:0e:fb:05:62:9b:68:74:8d:1a:73:9d:56:d4:
db:88:fc:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 4 15:24:05 2024 by rpki-client on console-fra.rpki-client.org