Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/tU0mLQ_KNCFRMWt1dZ8BohKte0Y.roa
File: tU0mLQ_KNCFRMWt1dZ8BohKte0Y.roa (raw, json)
Hash identifier: pnGA+eh6zhDl9eoamzHOIdFDfPrPH5QlbhFoK1cq3DQ=
Subject key identifier: B5:4D:26:2D:0F:CA:34:21:51:31:6B:75:75:9F:01:A2:12:AD:7B:46
Certificate issuer: /CN=a7ee182d9c43a5ce7068dfd9ba7aa8ed90e5e0ba
Certificate serial: 018CC80186330FCEBDF43340272403C7C588
Authority key identifier: A7:EE:18:2D:9C:43:A5:CE:70:68:DF:D9:BA:7A:A8:ED:90:E5:E0:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/tU0mLQ_KNCFRMWt1dZ8BohKte0Y.roa
Signing time: Tue 02 Jan 2024 02:29:52 +0000
ROA not before: Tue 02 Jan 2024 02:29:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 196975
IP address blocks: 217.9.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.mft
rsync://rpki.ripe.net/repository/DEFAULT/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 07:02:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:86:33:0f:ce:bd:f4:33:40:27:24:03:c7:c5:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7ee182d9c43a5ce7068dfd9ba7aa8ed90e5e0ba
Validity
Not Before: Jan 2 02:29:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b54d262d0fca342151316b75759f01a212ad7b46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:2a:94:6d:6b:79:d6:97:47:82:37:64:54:56:
9d:0e:a2:f3:28:c0:de:4a:ed:39:f8:03:f1:83:05:
a1:a4:74:32:7b:e1:a9:da:59:c1:e0:0c:d2:63:5c:
d0:c8:d2:f0:f6:2d:7b:a9:43:81:a9:c3:e2:1c:55:
8c:85:16:31:11:db:be:47:47:0b:7e:49:9a:c2:b0:
3c:18:f9:44:63:bb:26:0a:cb:7d:07:1c:45:d3:e1:
93:a2:92:cc:6e:b8:33:78:c5:d9:b9:e7:d0:7a:61:
b8:1e:62:f9:f5:d0:85:78:54:24:a0:bd:0f:9d:fc:
f7:c4:d3:5b:ab:d7:81:a9:59:51:5d:ec:de:90:90:
d9:9e:b0:46:f8:42:b0:8d:0c:ab:57:fb:2d:42:57:
8b:be:f0:12:e2:ad:d8:9e:1a:58:6c:fb:39:bf:24:
84:9d:4c:2e:e3:5b:c9:fb:c4:38:1c:95:01:f7:22:
25:7b:4b:8d:44:3f:67:9a:af:67:d6:37:f0:79:38:
89:28:b8:5d:cb:dc:66:d8:2a:12:45:9c:ec:a3:26:
a0:23:99:71:ea:eb:86:ea:ff:4f:78:71:10:54:25:
5a:cc:60:1b:9b:85:cb:63:8b:cb:84:19:f8:7a:ac:
c2:f5:9b:f2:92:b6:29:57:7a:92:20:eb:19:4f:70:
56:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:4D:26:2D:0F:CA:34:21:51:31:6B:75:75:9F:01:A2:12:AD:7B:46
X509v3 Authority Key Identifier:
keyid:A7:EE:18:2D:9C:43:A5:CE:70:68:DF:D9:BA:7A:A8:ED:90:E5:E0:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/tU0mLQ_KNCFRMWt1dZ8BohKte0Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.9.3.0/24
Signature Algorithm: sha256WithRSAEncryption
80:bc:88:cd:3f:a5:e2:c4:94:01:7d:27:c2:4f:db:ec:73:ec:
4c:09:66:90:2c:72:07:9d:42:a4:9f:7a:2b:cf:2a:9f:c0:06:
09:f9:9f:1b:15:7e:fe:23:ae:14:bb:27:53:23:39:95:a8:a6:
ee:ad:c6:b3:c7:67:8f:00:02:41:63:9c:51:09:67:af:af:23:
b8:4c:c3:88:a7:9c:86:e9:9e:c1:7c:b9:4e:91:47:95:73:61:
0a:a0:ac:d1:1c:4b:47:11:df:99:57:84:79:87:0f:36:19:f0:
63:e6:51:b7:ea:4a:13:49:4e:94:4c:5c:5e:b9:a9:ab:64:8c:
a9:5c:33:cd:2d:91:93:19:72:1c:1e:4e:70:0d:64:47:8d:1b:
17:eb:56:e3:36:c7:c9:a2:84:9c:53:42:21:fb:50:05:a2:bf:
40:b1:d2:9a:f8:73:c3:0b:cc:ae:64:05:f9:43:f3:66:58:98:
97:8c:96:03:89:c6:5e:9f:54:e1:0c:c9:77:f2:e7:2b:7c:d3:
fa:c9:f0:01:d6:30:cc:73:e3:de:b5:df:c5:5b:33:44:c8:ab:
fc:0a:53:1d:55:f7:69:bd:c2:60:5c:00:a1:ee:e8:df:aa:4c:
74:fa:bc:23:c7:80:18:f0:d3:b3:ab:ce:96:2f:4e:b0:b4:40:
9a:c0:27:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 12:35:43 2024 by rpki-client on console-ams.rpki-client.org