Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/f7f53d-068c-444e-ad1e-b7c2696bae50/1/rDJTLVCKW3hBFtsC-XnSMadA6Z4.roa
File: rDJTLVCKW3hBFtsC-XnSMadA6Z4.roa (raw, json)
Hash identifier: oIf9XM/BvNW3sivE0tQduLPF51M8svESIyFHwLxzNFA=
Subject key identifier: AC:32:53:2D:50:8A:5B:78:41:16:DB:02:F9:79:D2:31:A7:40:E9:9E
Certificate issuer: /CN=34d0ec7ac4c391e4ecba9d0a3749191b18ebf934
Certificate serial: 018CC86F18A36E985B64E67C44261CAB2952
Authority key identifier: 34:D0:EC:7A:C4:C3:91:E4:EC:BA:9D:0A:37:49:19:1B:18:EB:F9:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NNDsesTDkeTsup0KN0kZGxjr-TQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/f7f53d-068c-444e-ad1e-b7c2696bae50/1/rDJTLVCKW3hBFtsC-XnSMadA6Z4.roa
Signing time: Tue 02 Jan 2024 04:29:33 +0000
ROA not before: Tue 02 Jan 2024 04:29:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8226
IP address blocks: 109.68.124.0/23 maxlen: 23
109.68.120.0/22 maxlen: 22
109.68.126.0/24 maxlen: 24
2001:4d00::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/f7f53d-068c-444e-ad1e-b7c2696bae50/1/NNDsesTDkeTsup0KN0kZGxjr-TQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/f7f53d-068c-444e-ad1e-b7c2696bae50/1/NNDsesTDkeTsup0KN0kZGxjr-TQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/NNDsesTDkeTsup0KN0kZGxjr-TQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:18:a3:6e:98:5b:64:e6:7c:44:26:1c:ab:29:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34d0ec7ac4c391e4ecba9d0a3749191b18ebf934
Validity
Not Before: Jan 2 04:29:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ac32532d508a5b784116db02f979d231a740e99e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:38:bc:64:dc:38:18:00:19:f5:6a:99:d7:8a:
7a:32:62:de:3a:22:d9:48:0e:b9:28:20:78:ea:72:
4a:5f:38:ed:3c:84:6a:ea:38:b3:0f:c6:76:0d:44:
d5:d3:d5:79:91:29:bf:52:4f:da:c7:71:c9:1b:08:
85:f0:04:2f:45:a5:2f:ed:dc:b9:59:05:e2:b8:e5:
47:c7:41:86:48:0c:d0:f2:8e:08:7a:63:71:7e:7f:
25:30:7e:97:34:bb:7f:12:87:1c:d0:55:0b:f9:b4:
97:d5:e5:25:6e:73:26:9d:4e:cb:2b:fb:a6:37:c8:
59:88:40:b9:c5:5a:c9:54:c1:0b:a2:a1:af:0b:3a:
ed:ad:14:e9:9c:61:04:cf:7d:d4:7c:8c:da:b0:b5:
9a:23:85:27:cf:5a:e8:3e:71:9e:96:bc:f3:e8:47:
0d:97:7c:c0:b4:6b:15:6c:cb:86:06:fb:f5:d8:3e:
a0:2f:b3:2c:07:10:f0:f8:1d:d3:ce:60:fb:76:6c:
2b:e0:3b:eb:80:ed:23:5b:bb:d4:61:74:3d:76:75:
10:4a:b9:92:27:ab:8a:68:9c:ff:21:38:e7:ee:b9:
25:01:be:6a:c2:2d:c9:98:55:c4:7d:49:fc:54:6e:
dc:df:45:83:bd:25:87:d3:56:9d:b2:9b:fe:a1:3a:
3f:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:32:53:2D:50:8A:5B:78:41:16:DB:02:F9:79:D2:31:A7:40:E9:9E
X509v3 Authority Key Identifier:
keyid:34:D0:EC:7A:C4:C3:91:E4:EC:BA:9D:0A:37:49:19:1B:18:EB:F9:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NNDsesTDkeTsup0KN0kZGxjr-TQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/f7f53d-068c-444e-ad1e-b7c2696bae50/1/rDJTLVCKW3hBFtsC-XnSMadA6Z4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/f7f53d-068c-444e-ad1e-b7c2696bae50/1/NNDsesTDkeTsup0KN0kZGxjr-TQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.68.120.0-109.68.126.255
IPv6:
2001:4d00::/32
Signature Algorithm: sha256WithRSAEncryption
96:77:ce:f0:fb:77:a8:99:f9:a2:bf:cd:27:05:ae:cf:79:05:
6b:18:ad:3d:a6:b9:47:a7:7a:29:a5:5e:e8:af:c3:9e:c6:ca:
28:e9:c5:55:28:a1:c7:2b:a3:fa:de:58:f5:81:d0:0f:ff:39:
b3:2f:f7:5e:c9:e5:f2:11:80:63:10:19:5a:0e:dc:b5:6d:7f:
c2:c1:72:09:a6:b2:a2:eb:0f:85:a3:e1:dc:7a:94:2e:0a:f3:
6e:d3:e0:c5:75:e2:4a:c5:c3:98:76:4f:4d:7a:9c:9b:48:39:
c3:6e:2c:69:ac:e6:3b:8b:a3:58:fa:f2:f0:ca:72:6f:71:5b:
f0:fb:6b:6e:ea:0c:94:9f:b2:5a:bb:23:1d:3e:1b:62:bb:96:
5f:e9:f8:79:88:e3:08:a1:b9:ba:d4:5e:b7:9e:d1:62:5a:9a:
99:56:a6:44:a8:7a:a2:78:a9:41:8b:f1:15:44:2d:c3:12:8a:
f8:f0:d0:19:ee:53:ce:e5:36:a0:1e:f6:8f:a5:84:35:47:06:
08:fe:3c:b8:d4:49:c5:f2:c6:70:46:fd:8c:e8:4d:f1:a2:fc:
b3:9d:e2:72:4a:d9:93:a4:88:c3:fb:9b:2a:e5:50:c9:d6:39:
fb:be:2f:66:11:2d:1c:00:94:da:82:bb:4c:21:a6:05:14:e2:
9f:e2:0e:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:12:48 2024 by rpki-client on console-ams.rpki-client.org