Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/1-VmWqoew3BBDOOtghQuJFHi5d3c.roa
File: 1-VmWqoew3BBDOOtghQuJFHi5d3c.roa (raw, json)
Hash identifier: sv4mII3iR+JdC1Ws2XRjfQ6e/QUYIQ5OBeBMhvu5k+g=
Subject key identifier: F9:59:96:AA:87:B0:DC:10:43:38:EB:60:85:0B:89:14:78:B9:77:77
Certificate issuer: /CN=3cea1ea887dcefee6136155b8bd83392937c1671
Certificate serial: 018CCA2979CC4895E7E63E2FCB844E512693
Authority key identifier: 3C:EA:1E:A8:87:DC:EF:EE:61:36:15:5B:8B:D8:33:92:93:7C:16:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/POoeqIfc7-5hNhVbi9gzkpN8FnE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/1-VmWqoew3BBDOOtghQuJFHi5d3c.roa
Signing time: Tue 02 Jan 2024 12:32:44 +0000
ROA not before: Tue 02 Jan 2024 12:32:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56729
IP address blocks: 93.189.126.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/POoeqIfc7-5hNhVbi9gzkpN8FnE.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/POoeqIfc7-5hNhVbi9gzkpN8FnE.mft
rsync://rpki.ripe.net/repository/DEFAULT/POoeqIfc7-5hNhVbi9gzkpN8FnE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Jun 2024 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:79:cc:48:95:e7:e6:3e:2f:cb:84:4e:51:26:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cea1ea887dcefee6136155b8bd83392937c1671
Validity
Not Before: Jan 2 12:32:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f95996aa87b0dc104338eb60850b891478b97777
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:88:dc:76:44:87:a4:f2:29:41:0b:21:19:15:
cd:37:e0:72:82:e9:6f:01:4e:3d:46:01:63:3b:9b:
24:cf:69:c8:51:7a:36:45:1e:e3:81:e6:41:b6:62:
5a:96:7a:bf:f4:e7:46:cd:8c:64:22:f5:46:69:ec:
f1:c7:4f:6d:10:5f:ac:38:cb:b0:5a:23:91:28:ab:
4a:06:5e:44:ea:99:4e:ef:91:53:d7:34:78:ae:e0:
3d:66:d4:7f:e4:38:87:f3:07:16:0b:1b:cb:8f:fb:
23:1e:20:4e:48:1e:cf:be:37:93:4b:81:99:ad:fc:
07:90:e9:0c:df:c5:48:2c:43:6b:67:35:8c:35:57:
03:5f:a9:7e:94:05:86:bd:95:fc:a2:3b:3f:f6:35:
78:2f:54:cf:8a:c1:cf:63:80:09:73:80:b9:2c:64:
d0:74:42:83:58:12:57:a5:41:1d:58:d9:c7:ab:aa:
f2:44:75:66:b7:08:35:1d:5a:c6:ec:7d:18:91:25:
b4:f1:d3:25:ae:ff:b6:82:e6:13:b1:4b:19:be:30:
79:35:c0:97:59:b0:2c:76:2a:b9:dc:18:5f:5a:3b:
be:63:1f:66:fb:e0:3f:17:c0:c5:00:cf:74:7d:d3:
69:c2:b0:61:87:47:10:5c:e5:ac:73:0d:86:a1:cf:
9e:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:59:96:AA:87:B0:DC:10:43:38:EB:60:85:0B:89:14:78:B9:77:77
X509v3 Authority Key Identifier:
keyid:3C:EA:1E:A8:87:DC:EF:EE:61:36:15:5B:8B:D8:33:92:93:7C:16:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/POoeqIfc7-5hNhVbi9gzkpN8FnE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/1-VmWqoew3BBDOOtghQuJFHi5d3c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/POoeqIfc7-5hNhVbi9gzkpN8FnE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.189.126.0/23
Signature Algorithm: sha256WithRSAEncryption
ab:88:5b:dd:fe:14:8e:57:1c:e6:07:e0:0d:d7:67:a4:0c:7a:
c0:98:18:5e:31:ea:b2:67:9f:5b:fe:c8:1d:f1:9f:91:b2:24:
ef:25:f5:b5:8b:3d:56:19:77:63:ba:b4:8c:3d:2d:cb:89:7d:
37:f4:f0:3a:6f:1d:a2:a4:dd:50:b6:d0:dc:82:fe:e1:10:5e:
d0:51:05:c0:8c:59:fd:5d:d6:ed:d4:ab:b9:b4:f4:9b:d9:cf:
01:53:ac:3c:6f:23:22:ca:3f:02:26:ea:c1:4a:d7:2f:79:e6:
b9:c1:67:48:ea:30:3b:ba:3c:d3:d2:87:9c:7f:0b:11:94:a9:
43:25:c2:02:78:a9:72:b7:a0:b4:7e:15:78:8d:78:79:48:d9:
d5:f0:ae:89:6c:29:32:80:62:2d:5f:4d:2b:8c:cf:6e:8b:10:
33:da:8d:3f:0f:04:a0:9e:b0:97:02:9c:1d:40:f2:ac:6b:d2:
7f:0e:97:29:88:12:8c:87:1b:11:9c:fb:e6:3e:cc:ac:d2:75:
58:ac:90:d5:61:35:37:a5:f4:93:6d:4d:da:df:e3:3b:18:dd:
ef:18:54:aa:98:72:13:a9:93:24:37:98:6d:50:9c:a2:f1:7e:
e4:57:74:0d:62:a6:2f:ff:44:df:a1:31:b4:36:35:8b:92:32:
f6:62:4e:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 04:37:35 2024 by rpki-client on console-ams.rpki-client.org