Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/d0a3f9-997a-42a8-aa47-4bb71e274a5c/1/P1QxCjECv4gluNGA6Q1l56ZgVsM.roa
File: P1QxCjECv4gluNGA6Q1l56ZgVsM.roa (raw, json)
Hash identifier: RM3wXuRQ4Ja5KWuVpoKZw7cAYWJsiJwH037T0srVHOM=
Subject key identifier: 3F:54:31:0A:31:02:BF:88:25:B8:D1:80:E9:0D:65:E7:A6:60:56:C3
Certificate issuer: /CN=318cbfffcd21127de3628697598db0c2d9e11351
Certificate serial: 018CC6B7DB3FEF30469C837BE14387C1FD48
Authority key identifier: 31:8C:BF:FF:CD:21:12:7D:E3:62:86:97:59:8D:B0:C2:D9:E1:13:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYy__80hEn3jYoaXWY2wwtnhE1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/d0a3f9-997a-42a8-aa47-4bb71e274a5c/1/P1QxCjECv4gluNGA6Q1l56ZgVsM.roa
Signing time: Mon 01 Jan 2024 20:29:47 +0000
ROA not before: Mon 01 Jan 2024 20:29:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42721
IP address blocks: 194.110.205.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/d0a3f9-997a-42a8-aa47-4bb71e274a5c/1/MYy__80hEn3jYoaXWY2wwtnhE1E.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/d0a3f9-997a-42a8-aa47-4bb71e274a5c/1/MYy__80hEn3jYoaXWY2wwtnhE1E.mft
rsync://rpki.ripe.net/repository/DEFAULT/MYy__80hEn3jYoaXWY2wwtnhE1E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 07:02:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:db:3f:ef:30:46:9c:83:7b:e1:43:87:c1:fd:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=318cbfffcd21127de3628697598db0c2d9e11351
Validity
Not Before: Jan 1 20:29:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3f54310a3102bf8825b8d180e90d65e7a66056c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:1d:21:4d:99:66:88:68:a2:50:e0:2c:40:6e:
e3:57:9a:a5:b3:ae:51:d4:25:05:ea:07:b1:f5:05:
f5:5c:ed:cd:22:0a:b8:99:f5:b7:13:69:59:72:c9:
a7:c9:30:e5:20:e7:de:bd:41:b7:f0:a1:77:06:01:
57:94:55:32:13:7b:cb:e0:d4:b9:95:13:c8:c5:f3:
6c:2c:90:69:49:16:6c:4b:d5:a4:de:d8:2c:d6:78:
ea:b9:e1:11:75:c2:03:9b:fa:61:e7:1b:2c:26:7e:
da:c2:e2:c5:6d:99:63:e3:72:ba:5f:3d:ab:be:b3:
5b:83:79:14:2d:db:81:68:83:b5:9b:12:67:0e:58:
9d:34:42:40:f2:63:76:3d:21:90:cc:07:83:37:7c:
9c:d6:bf:11:c4:dc:ee:aa:2c:23:b3:78:6f:e7:d7:
31:ba:83:f4:16:eb:62:de:c9:25:37:04:ee:db:e9:
e4:0f:3e:a0:46:69:42:5f:aa:35:74:ec:17:ec:98:
17:d8:9d:5d:02:f6:e9:4c:1e:3d:0c:6f:cd:51:33:
dd:24:1b:63:8b:34:e1:76:e5:4c:86:2c:34:0c:c7:
d4:cf:c6:3e:f0:b4:76:2a:41:db:85:e4:40:62:73:
ed:9e:6a:81:f7:7d:80:98:95:8e:28:f0:52:47:d2:
95:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:54:31:0A:31:02:BF:88:25:B8:D1:80:E9:0D:65:E7:A6:60:56:C3
X509v3 Authority Key Identifier:
keyid:31:8C:BF:FF:CD:21:12:7D:E3:62:86:97:59:8D:B0:C2:D9:E1:13:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYy__80hEn3jYoaXWY2wwtnhE1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d0a3f9-997a-42a8-aa47-4bb71e274a5c/1/P1QxCjECv4gluNGA6Q1l56ZgVsM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d0a3f9-997a-42a8-aa47-4bb71e274a5c/1/MYy__80hEn3jYoaXWY2wwtnhE1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.110.205.0/24
Signature Algorithm: sha256WithRSAEncryption
22:29:1e:23:6a:fd:7a:97:bb:40:04:42:60:20:cd:3e:73:a6:
8c:0d:b5:f5:6d:70:9d:77:04:42:44:ae:71:3e:cc:53:c1:9c:
f6:e9:9f:c0:21:3b:72:6f:22:42:de:af:6d:ce:e2:97:3f:e9:
36:f2:2b:76:d6:35:b9:55:67:28:1e:8d:a3:65:d4:68:29:12:
33:12:14:b2:f2:d9:d9:4e:c4:58:df:dd:ef:ad:f8:16:ee:d8:
76:d5:bf:29:19:1d:0d:40:49:5b:81:54:ea:5e:5a:f1:22:91:
05:b4:b2:68:ea:fc:41:c7:29:30:1d:75:cb:45:27:33:5e:5c:
b9:69:3a:23:5b:39:cc:66:f8:d3:92:a1:c5:26:d3:de:1f:31:
e2:89:d3:b2:92:02:d9:c6:36:07:ec:02:b1:7d:42:34:56:fc:
97:f0:20:da:10:17:c7:8d:a4:6a:94:79:e9:80:66:a8:fd:a6:
1a:bd:ba:0c:d2:82:47:2b:9e:08:68:14:85:7e:a2:71:68:2d:
71:28:63:88:13:cd:97:bb:f4:5e:be:d9:98:24:4e:03:a6:7c:
4a:41:85:3a:72:d7:6d:09:82:5f:74:74:e9:58:d4:a9:b6:97:
e8:0c:be:61:17:90:d4:d6:0e:da:b8:c8:74:9a:ed:1e:03:15:
dd:24:6c:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 12:28:43 2024 by rpki-client on console-ams.rpki-client.org