Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/PXFd2Sz2QRw5HqKcxF7ZqAMy6Ho.roa
File: PXFd2Sz2QRw5HqKcxF7ZqAMy6Ho.roa (raw, json)
Hash identifier: xyOvIT0bxB3t212QUntZlql50ZN9bI1/xhNZjGU22rw=
Subject key identifier: 3D:71:5D:D9:2C:F6:41:1C:39:1E:A2:9C:C4:5E:D9:A8:03:32:E8:7A
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018CCA2A883BC656ECA6B68F8FD10F0688C6
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/PXFd2Sz2QRw5HqKcxF7ZqAMy6Ho.roa
Signing time: Tue 02 Jan 2024 12:33:54 +0000
ROA not before: Tue 02 Jan 2024 12:33:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206092
IP address blocks: 192.124.177.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:88:3b:c6:56:ec:a6:b6:8f:8f:d1:0f:06:88:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 2 12:33:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3d715dd92cf6411c391ea29cc45ed9a80332e87a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:57:be:88:0f:48:bb:dc:7f:5a:3b:0f:97:c7:
97:f9:3f:e7:d8:5c:33:2c:84:9b:22:9f:95:a4:c1:
5b:5f:19:a6:3c:f3:53:51:28:cd:70:9f:fc:81:26:
3f:0f:6f:a5:d9:56:4b:ac:a4:58:08:07:18:e0:4e:
0d:36:7a:4d:38:e6:ec:fa:62:01:0c:eb:b6:15:bb:
51:56:a5:74:8f:38:42:10:71:65:96:a8:10:cb:ed:
4c:cd:ce:34:1b:9c:df:fd:b2:ad:c4:81:58:5d:c7:
70:5e:e1:ee:0c:23:ff:c5:fc:2b:0d:14:7f:3a:90:
b3:6d:2e:ba:83:71:55:c4:dd:c1:fa:e5:4d:a5:ad:
8e:5e:09:2d:d9:1d:11:71:a2:b5:6d:c0:e0:5c:c4:
29:00:6d:9f:5b:d4:64:e3:ca:7c:7c:b0:f0:a1:b5:
9a:67:5a:a2:ac:ce:07:87:d1:42:10:e9:91:1c:bf:
c1:45:5d:48:8a:9a:95:7e:e3:27:b7:dd:81:53:a6:
99:24:e6:77:28:7a:8f:3c:9e:d6:a9:da:44:d9:ac:
16:01:69:dd:24:1d:84:bf:79:36:57:07:67:d0:d6:
69:41:06:11:a1:d6:df:8b:72:eb:39:fe:79:dc:74:
fc:12:db:c8:06:91:9b:e3:f8:bd:c7:74:4a:73:46:
00:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:71:5D:D9:2C:F6:41:1C:39:1E:A2:9C:C4:5E:D9:A8:03:32:E8:7A
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/PXFd2Sz2QRw5HqKcxF7ZqAMy6Ho.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.124.177.0/24
Signature Algorithm: sha256WithRSAEncryption
72:b4:a6:49:8d:c4:49:64:bf:04:02:5b:07:30:32:b6:49:bc:
58:61:4b:3a:9e:3e:74:76:9c:84:52:c0:cf:6f:f9:7b:76:29:
26:28:d6:73:cb:8e:28:d6:54:af:9f:31:c6:22:ec:f5:6a:72:
0c:8f:ef:87:a9:5e:38:a1:1d:4c:48:24:6a:21:fa:6b:1d:51:
75:b6:15:37:b5:47:44:52:23:c3:68:c6:34:3c:0f:6e:f9:51:
38:5f:35:f6:7d:d6:39:39:bd:1c:c2:1f:81:51:34:49:4e:a6:
17:c5:1e:b3:bc:5e:7e:49:80:57:a5:af:f6:f1:72:8c:79:7b:
52:7d:10:6d:2d:f1:1a:7b:6f:42:da:1d:f2:af:a4:5f:da:5a:
bf:52:6a:9c:fe:c8:9a:c9:bf:93:56:4b:59:f6:1f:6c:db:e7:
bf:01:60:e8:26:34:d1:08:b1:de:c7:6f:53:08:67:97:57:45:
f8:21:b5:c8:f3:f4:9b:b3:c1:3d:7d:93:31:04:28:38:8f:74:
a1:87:38:dd:bd:59:f4:6e:ce:f3:42:79:34:2b:d1:a5:e7:78:
d9:31:f0:04:76:8f:42:e3:74:b5:e7:40:9b:f4:af:b9:8b:70:
a4:fe:c3:2f:b6:ba:28:f6:7c:0f:fb:c8:3f:b5:ac:4a:98:95:
77:57:b9:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 22:51:19 2024 by rpki-client on console-ams.rpki-client.org