Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/CBhFbyFq8paIYUYc9uji0r5cUaI.roa
File: CBhFbyFq8paIYUYc9uji0r5cUaI.roa (raw, json)
Hash identifier: NdGjMX8rasaGOzzfJlU5KHjBhImJiKtMz8rVODdy+tk=
Subject key identifier: 08:18:45:6F:21:6A:F2:96:88:61:46:1C:F6:E8:E2:D2:BE:5C:51:A2
Certificate issuer: /CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Certificate serial: 018CC94DFFFF13E0226CDB3C4CB407338F44
Authority key identifier: 30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/CBhFbyFq8paIYUYc9uji0r5cUaI.roa
Signing time: Tue 02 Jan 2024 08:33:01 +0000
ROA not before: Tue 02 Jan 2024 08:33:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60421
IP address blocks: 148.81.116.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.mft
rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Jun 2024 14:33:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:ff:ff:13:e0:22:6c:db:3c:4c:b4:07:33:8f:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Validity
Not Before: Jan 2 08:33:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0818456f216af2968861461cf6e8e2d2be5c51a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:02:f1:15:ea:e6:dd:a7:d9:f3:40:6c:95:93:
d4:38:ba:a6:d0:ae:c9:af:31:8f:8a:eb:24:79:07:
e4:f6:4c:d9:7e:ee:a8:4f:13:c4:28:14:a7:87:d7:
ac:24:15:39:98:91:54:6f:cf:2c:12:c1:7c:a8:78:
91:13:6a:1b:5d:4d:c5:f6:db:96:f2:3a:1f:56:0b:
c8:33:16:16:62:a4:db:7a:0c:63:26:66:49:0b:cf:
bc:e9:0d:54:fd:de:c7:b3:2a:bc:b8:33:51:83:d7:
1a:92:ff:9a:f6:aa:4b:2c:f6:c6:bc:7d:01:41:27:
73:21:fe:a0:f2:e6:cf:2d:80:b2:31:d1:21:0a:e5:
4a:6e:fc:cd:89:81:3e:aa:13:91:57:3e:48:63:82:
05:3a:4b:00:92:3f:72:f9:f7:9a:1e:f5:bd:0d:96:
c2:30:5c:c0:b8:29:f9:52:92:9c:5a:17:09:ba:7e:
79:04:67:a6:3a:9e:42:fa:65:82:96:c1:d3:e1:d6:
61:76:8a:43:f8:69:4d:80:89:38:3c:0b:d3:9b:2b:
11:d3:d3:04:8d:80:3a:72:7f:8d:46:21:2d:0c:8b:
98:4d:2c:6c:d0:d7:3f:cf:30:0c:27:ee:f9:71:47:
99:ce:ca:26:6d:82:62:30:e5:7c:a1:1a:ed:e6:39:
a0:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:18:45:6F:21:6A:F2:96:88:61:46:1C:F6:E8:E2:D2:BE:5C:51:A2
X509v3 Authority Key Identifier:
keyid:30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/CBhFbyFq8paIYUYc9uji0r5cUaI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
148.81.116.0/24
Signature Algorithm: sha256WithRSAEncryption
51:f2:84:37:d2:d8:b9:51:7e:c3:00:67:99:d3:f6:4b:9d:0c:
82:0f:0e:42:e9:57:39:60:98:84:28:09:85:f3:29:fd:6e:e5:
aa:83:c7:06:96:4d:b9:aa:b1:61:ee:7d:8c:e6:6f:8f:2c:4c:
a2:47:34:75:dd:f1:18:44:d5:0b:d3:ec:25:37:90:7c:91:b3:
69:81:ba:db:3d:a6:12:41:f6:8d:6c:cf:e2:cd:d5:0e:4d:4c:
77:cc:3b:64:da:b5:07:20:48:94:81:a8:47:9c:e3:f9:aa:50:
3a:9e:ca:96:3d:8f:ca:3a:89:68:18:b2:df:74:2f:25:4e:5b:
41:8d:bd:dc:96:12:6d:2a:7e:5a:3e:91:4f:8e:55:0b:6c:b6:
c3:e5:b2:7b:7d:18:53:f2:7b:38:e2:53:87:9f:8b:55:a2:a0:
74:1f:8b:46:fc:d4:70:a5:9b:b8:1a:6f:36:db:30:be:af:0a:
a6:4a:d4:c0:26:38:d4:f3:16:60:35:1d:c2:0a:d3:d2:87:70:
c0:31:fe:e2:9f:26:29:f8:ea:b8:51:d5:b8:ae:fe:ed:dd:84:
fe:ad:9c:a5:3a:de:35:40:35:31:59:10:8d:2c:b6:d7:ad:f5:
92:c3:d0:d1:68:6d:77:3e:17:7d:a7:3e:af:27:d8:ea:5e:5f:
f9:9c:a7:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 22:41:46 2024 by rpki-client on console-ams.rpki-client.org