Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/7faae6-9f30-42ed-b375-55a43aab8f73/1/C-uOQuJE2VA01lXDjaneFMz8RvI.roa
File: C-uOQuJE2VA01lXDjaneFMz8RvI.roa (raw, json)
Hash identifier: zUZXPhUmMItAp4sF9XeqWcNJQmscjBvrHpLdDPq7rfc=
Subject key identifier: 0B:EB:8E:42:E2:44:D9:50:34:D6:55:C3:8D:A9:DE:14:CC:FC:46:F2
Certificate issuer: /CN=437a5c7e7c7eab2392372fc38d48c7a977b24abd
Certificate serial: 018CC7950AF24962F9DE122019065A0AB522
Authority key identifier: 43:7A:5C:7E:7C:7E:AB:23:92:37:2F:C3:8D:48:C7:A9:77:B2:4A:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q3pcfnx-qyOSNy_DjUjHqXeySr0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/7faae6-9f30-42ed-b375-55a43aab8f73/1/C-uOQuJE2VA01lXDjaneFMz8RvI.roa
Signing time: Tue 02 Jan 2024 00:31:22 +0000
ROA not before: Tue 02 Jan 2024 00:31:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9211
IP address blocks: 194.76.62.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/7faae6-9f30-42ed-b375-55a43aab8f73/1/Q3pcfnx-qyOSNy_DjUjHqXeySr0.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/7faae6-9f30-42ed-b375-55a43aab8f73/1/Q3pcfnx-qyOSNy_DjUjHqXeySr0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q3pcfnx-qyOSNy_DjUjHqXeySr0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 29 Jun 2024 17:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:0a:f2:49:62:f9:de:12:20:19:06:5a:0a:b5:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=437a5c7e7c7eab2392372fc38d48c7a977b24abd
Validity
Not Before: Jan 2 00:31:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0beb8e42e244d95034d655c38da9de14ccfc46f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:45:6d:56:6e:f5:45:f2:94:b9:87:e8:1a:30:
db:4f:86:e1:98:e8:49:ae:0b:a6:0e:6c:67:e5:a3:
7b:1f:51:71:28:f6:df:8b:45:4b:7f:bb:79:a6:90:
bc:11:94:a8:1a:50:8c:ee:99:11:25:0c:bf:fc:2e:
f7:2f:ec:e6:c5:47:2a:e5:44:a3:71:d1:05:71:22:
71:e9:c4:24:0d:66:ed:bf:14:1f:06:d0:67:a7:3e:
f9:fc:a0:ff:aa:9d:cd:be:9d:17:ec:ea:6a:3d:86:
f1:1e:36:8f:e8:49:40:40:6e:d3:b5:ce:fc:13:20:
c3:29:50:b4:2d:e4:66:89:59:58:41:23:ae:1e:ee:
13:bb:8e:7c:1c:e1:b8:8d:96:c3:4a:6d:59:1f:ec:
33:33:a7:93:9e:f4:f5:0a:c5:de:9b:f7:85:0e:12:
20:fc:0a:e2:c4:32:8c:a6:4b:49:8e:67:67:48:7a:
08:dc:fd:88:e5:ef:6f:5e:19:0a:c8:41:f7:2a:da:
8d:9f:9f:1f:e0:c8:fd:b4:cd:c9:68:8f:9e:98:09:
c3:be:6b:ab:76:87:bd:6c:33:bf:3d:61:b9:5b:45:
84:36:56:1d:a5:1d:f0:30:66:0d:03:51:ae:e5:bf:
9c:78:0a:2d:14:af:92:15:5d:ef:25:e1:9c:c5:23:
e8:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:EB:8E:42:E2:44:D9:50:34:D6:55:C3:8D:A9:DE:14:CC:FC:46:F2
X509v3 Authority Key Identifier:
keyid:43:7A:5C:7E:7C:7E:AB:23:92:37:2F:C3:8D:48:C7:A9:77:B2:4A:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q3pcfnx-qyOSNy_DjUjHqXeySr0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7faae6-9f30-42ed-b375-55a43aab8f73/1/C-uOQuJE2VA01lXDjaneFMz8RvI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7faae6-9f30-42ed-b375-55a43aab8f73/1/Q3pcfnx-qyOSNy_DjUjHqXeySr0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.76.62.0/23
Signature Algorithm: sha256WithRSAEncryption
22:bb:f1:65:6a:71:b8:a8:6a:d1:07:0e:e8:22:2e:dd:df:2a:
8f:a2:99:72:e6:6d:33:20:ff:51:8d:3d:d9:06:55:09:dc:c6:
65:df:ab:9c:30:d1:69:26:03:dd:de:8d:ed:bb:df:07:1a:8f:
e0:3b:ec:76:80:30:27:cd:c9:db:1a:83:af:ab:ea:a0:88:d4:
9b:1a:92:50:b1:25:a7:cb:75:1f:92:f0:ee:4b:e7:dd:0b:79:
97:ee:8c:23:20:ce:69:17:62:67:a3:36:5c:4a:d8:1e:4a:25:
29:bf:78:1a:37:b0:a4:64:31:eb:3b:78:df:20:3e:b8:21:17:
53:94:23:ef:75:eb:2e:34:c3:a5:72:ba:68:b2:48:44:00:7c:
31:d1:d5:15:31:8e:fa:a7:8d:35:47:c9:06:9c:6c:76:cc:12:
f3:45:1a:28:c3:99:83:25:3e:c6:65:d1:06:cc:5f:a6:62:45:
6c:10:54:d9:ec:41:f2:f9:6e:b4:0a:1b:43:ff:1c:d3:23:57:
5a:6b:0e:13:77:0d:c4:9a:cf:9d:af:dd:e8:17:f1:ea:62:ee:
26:9a:32:f1:a5:7b:bc:bc:ab:29:61:8f:db:2e:73:33:f6:0c:
d9:46:b5:ea:0a:8c:42:db:ca:6c:26:e3:80:27:ba:3b:c7:7b:
77:61:a9:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 00:36:31 2024 by rpki-client on console-ams.rpki-client.org