Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/182621-cc99-4385-9368-5d61fe2631d0/1/54rY0BBMOV0Jlpku6I764LIeAaw.roa
File: 54rY0BBMOV0Jlpku6I764LIeAaw.roa (raw, json)
Hash identifier: Doyb9rMjyr6+6KE6QePx1M7sklfGsbFhtebaLQKxazs=
Subject key identifier: E7:8A:D8:D0:10:4C:39:5D:09:96:99:2E:E8:8E:FA:E0:B2:1E:01:AC
Certificate issuer: /CN=0807601bc44422c8d23a3cd72bfea1bbf2a0563a
Certificate serial: 018CCA2A5166B578B3FA2465298E34FA5956
Authority key identifier: 08:07:60:1B:C4:44:22:C8:D2:3A:3C:D7:2B:FE:A1:BB:F2:A0:56:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAdgG8REIsjSOjzXK_6hu_KgVjo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/182621-cc99-4385-9368-5d61fe2631d0/1/54rY0BBMOV0Jlpku6I764LIeAaw.roa
Signing time: Tue 02 Jan 2024 12:33:40 +0000
ROA not before: Tue 02 Jan 2024 12:33:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8823
IP address blocks: 194.180.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/182621-cc99-4385-9368-5d61fe2631d0/1/CAdgG8REIsjSOjzXK_6hu_KgVjo.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/182621-cc99-4385-9368-5d61fe2631d0/1/CAdgG8REIsjSOjzXK_6hu_KgVjo.mft
rsync://rpki.ripe.net/repository/DEFAULT/CAdgG8REIsjSOjzXK_6hu_KgVjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 May 2024 14:34:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:51:66:b5:78:b3:fa:24:65:29:8e:34:fa:59:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0807601bc44422c8d23a3cd72bfea1bbf2a0563a
Validity
Not Before: Jan 2 12:33:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e78ad8d0104c395d0996992ee88efae0b21e01ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:8f:b8:40:67:e0:6f:34:74:13:34:18:fe:f8:
e0:4f:60:93:7d:34:64:23:9a:b6:aa:81:48:34:58:
43:5c:b1:7e:8c:35:9a:b4:d7:7a:11:19:6c:bb:86:
af:4f:6a:fa:39:85:09:5d:5b:f0:69:fb:a4:77:1f:
01:82:ed:0c:75:28:ba:73:d4:89:29:f7:19:d7:98:
39:f0:33:3b:b8:f8:dd:bc:68:63:5b:89:fb:ca:73:
85:b9:34:73:e2:d9:99:cb:08:05:eb:11:42:f3:13:
7b:c4:c2:13:1a:e7:be:29:f1:09:f4:49:9a:a2:a5:
c7:0c:a7:d3:2a:15:2a:31:fb:e9:8a:2a:09:84:87:
e0:2d:97:09:ad:dd:7a:01:8b:5a:9d:9f:5d:12:c7:
d1:8f:29:33:6b:5e:26:13:04:aa:fb:37:37:18:ac:
4c:14:2e:44:43:90:f0:54:0f:64:0a:ee:6d:23:b4:
5b:d0:f9:b7:59:b4:11:5e:be:52:dd:20:d7:17:f6:
89:09:73:1c:59:84:0b:07:72:51:54:91:49:8b:9e:
ba:b7:d8:31:4f:62:a9:ce:cc:95:89:e5:34:75:a3:
07:33:a4:36:bb:d0:02:74:9c:6d:e0:cb:61:27:0c:
96:37:1e:d8:d5:03:19:c1:40:a6:b8:d0:bd:f6:50:
8b:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:8A:D8:D0:10:4C:39:5D:09:96:99:2E:E8:8E:FA:E0:B2:1E:01:AC
X509v3 Authority Key Identifier:
keyid:08:07:60:1B:C4:44:22:C8:D2:3A:3C:D7:2B:FE:A1:BB:F2:A0:56:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAdgG8REIsjSOjzXK_6hu_KgVjo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/182621-cc99-4385-9368-5d61fe2631d0/1/54rY0BBMOV0Jlpku6I764LIeAaw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/182621-cc99-4385-9368-5d61fe2631d0/1/CAdgG8REIsjSOjzXK_6hu_KgVjo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.180.199.0/24
Signature Algorithm: sha256WithRSAEncryption
61:14:4c:ad:66:8d:d3:ae:7c:77:df:c5:07:b3:2d:23:2c:0a:
5e:4d:f4:e8:f1:b1:68:a3:c1:8b:1c:22:29:ba:1a:77:98:ef:
6e:0b:84:8b:5c:c3:16:ee:44:85:9d:3a:42:b2:d5:b0:6d:a4:
70:be:e3:fb:89:a3:03:a5:af:e3:56:a8:a7:10:5e:5c:6d:c1:
4b:b2:66:fb:04:eb:81:a5:24:ae:c8:ad:8b:70:76:06:34:5e:
65:f7:c9:16:34:73:da:fd:39:7f:b1:37:26:c0:68:e2:22:97:
a2:d6:ac:74:0f:5d:b8:ea:c8:ac:ec:25:5c:2c:3d:31:04:23:
5d:13:8b:90:1c:ab:89:b9:aa:c3:bb:6c:08:4c:5d:44:2c:d4:
c7:e5:1d:00:bd:35:31:30:26:f4:2b:dc:4b:83:0e:46:ca:e1:
e4:a5:6f:9e:e5:1a:18:de:48:fb:55:45:ad:ce:26:8e:fa:ba:
c3:8d:72:31:82:25:35:c7:04:30:bd:e2:dd:c5:cc:a0:98:f5:
a4:10:c7:12:1f:84:98:ad:c4:26:0b:ed:12:dc:f1:12:50:ed:
bb:1d:6f:31:24:b1:66:64:52:55:01:db:dc:a4:d1:92:04:f7:
fb:64:65:1b:8f:79:6c:80:ae:c0:08:f9:26:0f:b4:b8:36:d2:
09:38:3d:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 20:55:14 2024 by rpki-client on console-fra.rpki-client.org