Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/vN332wbAiPRUiKra47jtbGbbAK0.roa
File: vN332wbAiPRUiKra47jtbGbbAK0.roa (raw, json)
Hash identifier: i8VPvUR24Fu8QqPNEnlS8C+0M4LV61VdpLE2lbbzmwI=
Subject key identifier: BC:DD:F7:DB:06:C0:88:F4:54:88:AA:DA:E3:B8:ED:6C:66:DB:00:AD
Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial: 018CC649D303441CD9EEA21348CED0D26F06
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/vN332wbAiPRUiKra47jtbGbbAK0.roa
Signing time: Mon 01 Jan 2024 18:29:36 +0000
ROA not before: Mon 01 Jan 2024 18:29:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8672
IP address blocks: 151.251.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:49:d3:03:44:1c:d9:ee:a2:13:48:ce:d0:d2:6f:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Validity
Not Before: Jan 1 18:29:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bcddf7db06c088f45488aadae3b8ed6c66db00ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:99:eb:68:a5:fa:df:fa:f8:2f:aa:fa:72:76:
60:e7:25:6c:db:b4:22:85:4c:f2:8b:fc:07:67:8b:
22:6e:37:5b:38:ba:00:f4:14:8f:99:cb:5c:cf:ae:
91:e0:04:9f:f9:bd:38:b2:36:e7:23:3b:80:81:4a:
95:28:bb:65:b2:ba:b4:a7:27:fa:94:64:29:9f:b2:
2d:e1:b0:52:1d:24:9e:0a:f6:03:22:25:2e:6b:db:
4e:68:54:6c:0d:53:cc:78:75:66:83:aa:f9:ce:d0:
1e:11:d2:4b:2e:17:b4:2a:4f:18:fb:39:7a:4f:ef:
7f:2d:f4:9d:a6:70:87:cb:74:da:e5:0b:0c:50:5e:
a6:50:85:cd:ee:4a:6a:a7:2d:1d:28:01:cc:62:4f:
50:6f:a9:39:f5:89:0a:f7:d7:47:99:b7:9e:28:8a:
41:f7:6b:7b:00:06:08:48:e8:6f:b4:2a:60:20:cf:
09:83:1c:c8:f5:10:24:b8:a3:a7:f4:55:71:36:f9:
f7:c6:1d:e1:8b:68:2e:f2:4a:7b:df:6b:32:8d:6b:
b3:87:58:34:74:28:c9:d4:79:ab:a3:56:58:9d:c7:
08:c8:06:24:c8:65:90:8e:5f:08:b1:e1:5f:8e:2d:
00:e0:bc:b6:39:ff:a7:d2:d6:4f:52:03:28:64:65:
28:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:DD:F7:DB:06:C0:88:F4:54:88:AA:DA:E3:B8:ED:6C:66:DB:00:AD
X509v3 Authority Key Identifier:
keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/vN332wbAiPRUiKra47jtbGbbAK0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.251.39.0/24
Signature Algorithm: sha256WithRSAEncryption
87:26:f8:12:65:9e:63:cb:17:8b:bf:96:2b:ca:ff:74:93:7b:
0e:9b:c5:af:4a:15:fb:9c:4c:e7:e3:09:52:59:35:0a:98:6d:
9d:c5:b8:31:d1:eb:a6:34:3d:96:fb:29:6d:44:c1:69:84:52:
79:00:6a:94:1a:b2:f3:bf:3e:ec:75:84:ed:57:91:77:3a:94:
77:85:ac:77:64:cf:b2:fc:ab:6b:bf:d4:ab:7e:e8:f9:23:02:
93:c4:59:42:73:95:f4:8d:79:38:30:89:b7:8d:7a:f3:29:ad:
3f:a2:4e:c9:1e:5c:9d:b3:9e:ae:79:fe:14:b6:9b:ef:3e:e7:
35:5d:5d:b0:95:f3:fa:d3:66:65:19:9d:d6:08:ab:dc:18:9b:
22:78:02:e9:93:14:36:f4:4a:74:b1:ab:9b:98:f4:46:ae:69:
0b:ca:fb:b2:6d:cb:af:23:d2:5d:5a:52:70:cb:93:2a:fc:62:
6a:a4:20:66:e3:7b:b0:e0:a9:80:9e:7d:c9:1e:2d:34:dc:5a:
fa:a9:a7:52:7d:1f:b0:36:1a:8a:a5:34:b3:1e:91:1b:c1:d5:
c3:fe:2e:09:92:a8:8f:62:bb:3c:13:ec:88:98:62:c8:72:e0:
e1:3b:da:b0:12:ef:39:c7:e6:cd:36:5e:41:25:1b:62:c5:8f:
2e:f1:bd:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 20:32:58 2024 by rpki-client on console-ams.rpki-client.org