Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/nOiuMle7CumdsiCQ6c7d6Kphluk.roa
File: nOiuMle7CumdsiCQ6c7d6Kphluk.roa (raw, json)
Hash identifier: 33bqIA2jWdtABYDiEJ16634X+WUSrRg4EYii6enLwrg=
Subject key identifier: 9C:E8:AE:32:57:BB:0A:E9:9D:B2:20:90:E9:CE:DD:E8:AA:61:96:E9
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 018D65AF7DCEE1BEC874F9F93803F4F0D772
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/nOiuMle7CumdsiCQ6c7d6Kphluk.roa
Signing time: Thu 01 Feb 2024 17:20:16 +0000
ROA not before: Thu 01 Feb 2024 17:20:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200482
IP address blocks: 109.71.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.mft
rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 May 2024 22:26:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:65:af:7d:ce:e1:be:c8:74:f9:f9:38:03:f4:f0:d7:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Feb 1 17:20:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9ce8ae3257bb0ae99db22090e9cedde8aa6196e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:56:19:49:a1:bb:9d:61:75:5f:f8:9c:21:c8:
8b:34:5c:3f:09:36:d0:5a:04:93:3c:73:f1:e2:d5:
93:ee:69:1d:75:ca:e0:9d:78:37:50:47:e4:e0:01:
4e:17:e1:84:b7:f1:c6:08:e4:a0:7d:b2:90:8d:67:
58:9e:7b:6d:14:ee:00:3f:a0:b0:0e:6a:44:35:8f:
94:4a:57:6c:96:bf:12:79:84:e8:45:af:86:55:ef:
8c:18:c5:ad:a1:21:96:33:39:d1:bc:9c:d7:0a:36:
81:c9:9b:24:f9:5e:ed:d9:9e:80:b4:04:d0:9e:29:
6d:b5:49:f1:b0:ac:f7:6a:c7:bf:c0:bc:14:5c:29:
f0:e3:af:55:90:ab:16:10:a6:8f:b0:f6:7b:27:76:
f6:25:ee:bd:1f:d2:e8:59:a1:44:97:ec:bb:b3:dd:
19:4e:1e:ba:59:4e:07:c3:63:8c:e2:7f:d5:4c:f4:
4e:cc:f4:4b:0b:a7:8a:8e:73:0a:cf:19:52:ba:c5:
5f:2c:47:02:d1:af:6c:97:69:64:93:68:6c:99:51:
50:75:84:d6:e3:d0:a4:a2:58:b0:99:35:44:c2:58:
51:b1:ab:d6:aa:90:06:dc:ac:bd:0e:02:d3:fc:49:
f1:64:0b:12:1e:0a:eb:71:33:49:87:fd:47:70:96:
c1:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:E8:AE:32:57:BB:0A:E9:9D:B2:20:90:E9:CE:DD:E8:AA:61:96:E9
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/nOiuMle7CumdsiCQ6c7d6Kphluk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.71.254.0/24
Signature Algorithm: sha256WithRSAEncryption
12:fc:e7:cf:90:46:f7:9a:4c:5a:be:c1:71:58:7b:d0:fd:90:
b9:c5:97:95:be:44:4f:ca:5c:7d:01:8f:71:8a:52:fd:5a:f8:
b8:23:26:0d:55:4c:3c:31:27:6b:66:d6:ed:0c:b0:31:2c:da:
81:cc:7d:80:8e:dd:b4:e2:b5:2a:2c:da:f8:71:be:06:29:1a:
24:17:32:1f:5f:ba:fe:2b:0c:0d:d5:e0:ce:78:ba:57:c0:09:
50:6c:c2:4a:22:65:09:c7:58:ee:de:2a:f7:24:6f:26:1d:30:
b2:77:2f:fe:85:20:3f:3e:dd:6e:a2:f4:b5:81:78:a4:c3:73:
56:74:f7:92:17:ef:0f:23:ce:4f:9d:8a:1a:f5:26:20:8a:06:
17:7c:ff:66:27:74:b8:c6:cb:7a:0f:19:ba:57:b6:c1:9c:8b:
12:df:29:7d:55:53:12:d4:0e:ce:a3:ea:55:bd:fa:50:b4:0e:
30:97:81:4e:98:a3:f8:bb:68:bd:55:d8:62:21:b4:33:4c:40:
a7:8a:df:be:69:ed:c4:83:15:6e:b2:b4:b2:81:0c:87:db:3e:
8a:f1:5d:fd:b6:91:ec:7f:e3:47:45:40:9c:47:ec:1e:2b:da:
d9:56:be:de:0e:2d:ba:93:72:0e:36:74:51:4c:b0:80:5e:5b:
e5:47:92:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 02:55:12 2024 by rpki-client on console-ams.rpki-client.org