Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/1lAJDzOelW15xTHYC8EqqWBIEwk.roa
File: 1lAJDzOelW15xTHYC8EqqWBIEwk.roa (raw, json)
Hash identifier: XN3wJ0r3zEbfu6hiEH4V3qFWkeK+8YI/dHxp3yLAVLQ=
Subject key identifier: D6:50:09:0F:33:9E:95:6D:79:C5:31:D8:0B:C1:2A:A9:60:48:13:09
Certificate issuer: /CN=624ad4535ac88dd534199f2a726095af71afe44e
Certificate serial: 01924D05A63A60FAF4F6A04510F02A6E6E04
Authority key identifier: 62:4A:D4:53:5A:C8:8D:D5:34:19:9F:2A:72:60:95:AF:71:AF:E4:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/1lAJDzOelW15xTHYC8EqqWBIEwk.roa
Signing time: Wed 02 Oct 2024 11:37:48 +0000
ROA not before: Wed 02 Oct 2024 11:37:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8708
IP address blocks: 194.113.80.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.mft
rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 10:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:4d:05:a6:3a:60:fa:f4:f6:a0:45:10:f0:2a:6e:6e:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=624ad4535ac88dd534199f2a726095af71afe44e
Validity
Not Before: Oct 2 11:37:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d650090f339e956d79c531d80bc12aa960481309
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:1e:97:58:61:5b:ca:7a:ec:5f:51:57:04:b4:
84:71:92:39:b0:41:6b:9f:ae:bd:40:19:64:df:af:
53:f8:09:3a:82:9f:0b:83:3f:0d:86:f4:3e:19:d3:
c5:07:8c:79:fc:fe:be:57:fe:fa:22:3a:bc:99:53:
33:5d:86:6e:3d:67:4d:42:5a:5d:a2:20:7c:19:11:
3e:20:56:81:4e:31:e6:cd:af:68:48:ab:5c:2a:2c:
91:f0:57:c7:05:61:7c:4a:3f:8c:25:44:9d:fb:43:
d5:56:b9:62:74:c4:5a:84:0e:95:9d:6b:2d:bf:49:
3e:29:f0:2e:df:22:c1:4b:f6:62:13:a8:8c:00:c5:
75:93:ca:9b:29:c4:3a:74:8a:b0:bf:40:44:bc:6e:
60:4b:47:ae:9a:88:0c:93:f1:76:8b:40:67:4c:62:
5c:d4:93:7c:c7:01:6d:b9:66:90:45:f1:b7:6f:c5:
2b:df:31:7d:43:f1:35:eb:b0:60:a1:c7:59:e4:e2:
d4:a7:88:3c:51:7d:0a:6a:b9:ac:3e:f3:84:40:1e:
fb:df:62:5f:55:70:95:68:20:53:cb:4d:1b:ed:5a:
89:f9:a5:a2:aa:5e:93:4a:ac:ab:91:ad:62:95:8b:
29:dc:02:fb:0d:89:c5:77:0f:60:eb:6e:78:c2:91:
6b:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:50:09:0F:33:9E:95:6D:79:C5:31:D8:0B:C1:2A:A9:60:48:13:09
X509v3 Authority Key Identifier:
keyid:62:4A:D4:53:5A:C8:8D:D5:34:19:9F:2A:72:60:95:AF:71:AF:E4:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/1lAJDzOelW15xTHYC8EqqWBIEwk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.113.80.0/23
Signature Algorithm: sha256WithRSAEncryption
a0:e1:c6:dc:78:77:99:59:b9:4c:a0:ca:b0:b2:02:db:2e:13:
30:40:d2:55:7a:7c:39:b5:d1:1b:a6:48:38:a7:4d:42:7c:3d:
cb:f6:42:f0:fc:0d:2d:f2:a4:f5:07:8a:38:eb:49:10:c9:54:
de:cd:32:da:60:d8:48:c1:46:c5:d5:17:09:41:9d:b3:d1:a4:
39:d2:2e:fb:15:18:d1:de:ee:39:e3:53:70:e3:31:f3:88:02:
47:12:69:8d:f0:03:ba:ab:7b:ad:34:e9:40:8e:63:ac:e6:3f:
8d:95:46:66:01:6d:ac:91:93:4f:ca:71:ee:56:f7:75:a8:f2:
ac:9b:63:4b:a8:9d:26:ee:33:94:0b:ff:cf:00:ac:33:74:d4:
68:6f:30:96:da:b5:a6:c3:a7:b8:73:4c:a4:88:6c:56:52:f3:
e3:51:d4:1b:33:0d:8e:13:fb:40:4f:dc:74:82:2c:3f:49:a5:
68:a4:75:91:64:a8:08:11:c1:e0:6e:c3:cc:7b:35:d7:c9:9c:
c8:8e:04:49:07:fd:a0:1b:31:d8:f7:e1:e0:12:cd:0c:cf:44:
41:20:0e:81:48:a1:4b:91:ec:12:17:0b:86:36:67:4f:42:3e:
ac:a7:b2:01:a6:fc:15:a2:e7:e5:7c:30:2c:2e:26:9b:33:1a:
fa:ec:52:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:31:03 2024 by rpki-client on console-ams.rpki-client.org