Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Ri3uxWYZYfxicfO9aF0S4gl_wY4.roa
File: Ri3uxWYZYfxicfO9aF0S4gl_wY4.roa (raw, json)
Hash identifier: +vpzqxaratqvMl0hXb+RS8Epie61aOAbkVqjp/vgRBo=
Subject key identifier: 46:2D:EE:C5:66:19:61:FC:62:71:F3:BD:68:5D:12:E2:09:7F:C1:8E
Certificate issuer: /CN=6363bb65895f3a54a4b324a10c79ac98efe2a1ca
Certificate serial: 0190BF7B6AE092624F721276B9F8F9B36ADC
Authority key identifier: 63:63:BB:65:89:5F:3A:54:A4:B3:24:A1:0C:79:AC:98:EF:E2:A1:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Ri3uxWYZYfxicfO9aF0S4gl_wY4.roa
Signing time: Wed 17 Jul 2024 06:57:34 +0000
ROA not before: Wed 17 Jul 2024 06:57:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210542
IP address blocks: 185.126.134.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:bf:7b:6a:e0:92:62:4f:72:12:76:b9:f8:f9:b3:6a:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6363bb65895f3a54a4b324a10c79ac98efe2a1ca
Validity
Not Before: Jul 17 06:57:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=462deec5661961fc6271f3bd685d12e2097fc18e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:6c:50:2e:03:9c:55:13:ad:3a:db:bf:a2:62:
9f:03:3b:10:94:98:53:e8:0d:c0:68:da:a3:31:32:
38:85:c3:d9:9d:f6:76:1d:63:35:80:af:a0:79:00:
26:ae:bd:b0:dc:9b:9f:aa:a8:ed:19:15:87:82:5f:
6d:ff:67:82:16:a6:8f:9d:be:f5:8c:58:23:db:b3:
59:1f:1b:e6:dc:52:fa:f8:5e:ee:7d:91:ac:f8:6b:
f5:76:59:23:02:43:04:f2:38:80:ea:a7:5c:32:21:
c8:c4:f4:3d:e1:b8:3d:20:1b:64:fe:32:6a:81:6d:
f1:4c:43:9a:f0:04:4c:0e:19:6f:41:d3:54:ea:c8:
9f:1a:63:37:16:15:bb:19:0d:29:81:0c:87:85:0b:
4b:52:3b:4d:ae:86:8e:fe:c7:90:39:85:f5:b2:c0:
c8:fa:7d:4f:df:5e:a2:da:66:d6:58:2c:32:9a:ec:
3b:20:33:7c:f5:f8:8b:29:3c:a9:6b:5e:57:81:92:
5c:68:08:61:00:11:6e:3b:83:b9:15:19:65:fc:b5:
d0:21:82:c3:75:80:08:ad:c3:73:e2:e5:23:bd:17:
a9:94:20:1d:65:2b:cd:7f:ca:97:10:53:72:a7:ed:
cc:c1:41:3b:fc:1d:ce:a0:86:ae:65:60:47:ac:c9:
d4:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:2D:EE:C5:66:19:61:FC:62:71:F3:BD:68:5D:12:E2:09:7F:C1:8E
X509v3 Authority Key Identifier:
keyid:63:63:BB:65:89:5F:3A:54:A4:B3:24:A1:0C:79:AC:98:EF:E2:A1:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Ri3uxWYZYfxicfO9aF0S4gl_wY4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.126.134.0/23
Signature Algorithm: sha256WithRSAEncryption
95:0a:93:58:16:d7:63:97:dc:92:7f:54:dd:0f:ad:57:be:ed:
e6:95:dc:4e:8a:1a:50:8a:0b:15:ad:13:79:00:76:8b:95:d3:
57:38:fe:cc:d1:e4:dc:7e:45:f8:4d:bc:88:01:57:7f:8f:65:
3a:58:d9:67:6e:38:d0:f0:1c:69:7b:8d:4b:21:0e:1f:db:b0:
9f:26:6f:89:56:b5:02:50:a2:cb:a1:ce:3d:d9:0c:c0:5b:4b:
ea:91:eb:ea:26:23:3e:7b:8d:a0:3d:17:68:58:4a:f4:32:85:
92:18:e1:76:c5:a2:39:d0:ee:e5:c7:a6:e5:24:08:ec:0f:19:
5a:3c:91:eb:c7:fd:43:05:40:78:11:15:d6:2d:d5:6e:bc:22:
bb:06:3b:4e:d9:2c:80:06:87:55:67:c1:3a:62:8a:3e:8f:33:
09:3a:fa:2a:bc:da:2f:11:93:5a:ea:cb:d6:48:ec:24:64:94:
de:3c:b8:54:24:ea:5c:30:2c:47:64:5b:6b:5d:8d:94:5f:cd:
e7:0a:14:24:30:a7:59:59:98:8f:ef:76:1a:e5:d5:76:68:c3:
f4:ba:2b:06:1d:42:16:ee:55:7e:64:77:40:20:61:0a:52:c6:
7a:10:65:48:18:10:7a:a8:99:db:56:81:29:d9:c0:2b:64:09:
6c:fc:f8:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:44:46 2024 by rpki-client on console-ams.rpki-client.org