Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/a6f506-6948-4cef-8548-c93c1ee898be/1/Rl_1q5qz3m9RFjpsMeZmsR2LPQg.roa
File: Rl_1q5qz3m9RFjpsMeZmsR2LPQg.roa (raw, json)
Hash identifier: 5NU9Sj/6mUTGwrh8343Sl59ikvqB2Xk1Cj+QIyxmpsk=
Subject key identifier: 46:5F:F5:AB:9A:B3:DE:6F:51:16:3A:6C:31:E6:66:B1:1D:8B:3D:08
Certificate issuer: /CN=ddfd94ebb8cb98a1dbdf50bdcd69dcc29144889e
Certificate serial: 018CC7940A2B5F54CA22EC08365623F31622
Authority key identifier: DD:FD:94:EB:B8:CB:98:A1:DB:DF:50:BD:CD:69:DC:C2:91:44:88:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3f2U67jLmKHb31C9zWncwpFEiJ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/a6f506-6948-4cef-8548-c93c1ee898be/1/Rl_1q5qz3m9RFjpsMeZmsR2LPQg.roa
Signing time: Tue 02 Jan 2024 00:30:17 +0000
ROA not before: Tue 02 Jan 2024 00:30:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3303
IP address blocks: 194.56.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/a6f506-6948-4cef-8548-c93c1ee898be/1/3f2U67jLmKHb31C9zWncwpFEiJ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/a6f506-6948-4cef-8548-c93c1ee898be/1/3f2U67jLmKHb31C9zWncwpFEiJ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/3f2U67jLmKHb31C9zWncwpFEiJ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 13 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:0a:2b:5f:54:ca:22:ec:08:36:56:23:f3:16:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddfd94ebb8cb98a1dbdf50bdcd69dcc29144889e
Validity
Not Before: Jan 2 00:30:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=465ff5ab9ab3de6f51163a6c31e666b11d8b3d08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:5a:ba:37:1b:ce:90:d3:01:4b:08:2b:94:8e:
ad:b3:39:5d:24:8c:7f:63:dc:0d:8c:e3:4b:1d:17:
77:9a:9e:c4:7a:cb:a0:7a:82:c2:2e:ca:62:26:12:
a8:9c:b1:d7:6b:7c:ae:89:9f:f2:86:23:30:1f:86:
52:7a:62:c3:93:0b:f7:b0:36:7d:5e:c3:a8:c0:8f:
cb:57:a9:0b:53:c3:6e:e5:fa:32:f3:ed:65:9b:f7:
a8:00:c2:1d:5f:88:ee:9b:f4:41:de:c7:fd:d9:a0:
a7:17:18:b1:98:9c:8b:0e:1e:39:d1:cc:e1:e8:e9:
fd:11:28:ea:b1:5e:46:60:75:55:b4:29:93:81:2a:
c4:1c:e6:d7:28:50:5f:d8:25:b2:25:c5:c9:22:1f:
81:40:d2:b4:25:5a:0d:1d:a2:41:ad:ef:53:79:84:
77:e8:d1:8e:d6:a6:40:5d:69:6b:1b:15:ad:89:49:
ff:2c:0e:53:22:35:5e:94:e5:ba:83:01:3a:39:71:
54:26:52:29:5b:71:52:fc:35:86:44:d1:1c:b8:66:
aa:93:0b:36:82:67:8f:45:1f:a4:40:b4:f4:bd:28:
46:04:9d:19:78:9d:75:29:fe:e1:2e:f3:98:eb:f3:
24:87:79:fe:25:2e:c2:20:b1:69:65:de:03:8b:de:
ab:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:5F:F5:AB:9A:B3:DE:6F:51:16:3A:6C:31:E6:66:B1:1D:8B:3D:08
X509v3 Authority Key Identifier:
keyid:DD:FD:94:EB:B8:CB:98:A1:DB:DF:50:BD:CD:69:DC:C2:91:44:88:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f2U67jLmKHb31C9zWncwpFEiJ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/a6f506-6948-4cef-8548-c93c1ee898be/1/Rl_1q5qz3m9RFjpsMeZmsR2LPQg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/a6f506-6948-4cef-8548-c93c1ee898be/1/3f2U67jLmKHb31C9zWncwpFEiJ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.56.127.0/24
Signature Algorithm: sha256WithRSAEncryption
91:77:4b:ff:b7:98:30:9d:e5:20:3a:fc:ff:8a:b7:97:70:ce:
2c:77:41:f6:c2:6d:ac:fc:ca:46:6b:36:d3:e4:7e:96:c9:70:
2a:be:fc:d2:da:04:e0:29:90:99:24:64:8e:22:8a:a7:47:35:
6a:83:f6:10:d9:0d:4a:3c:96:53:a5:8f:fd:c9:9d:de:38:be:
57:fe:d5:e2:ea:da:6b:9f:21:3b:e8:8e:9c:17:b1:c1:c8:0b:
df:c7:cd:91:5a:18:bd:f0:53:7a:5b:76:6f:2d:0c:2c:f7:8f:
60:47:f4:49:a2:49:5c:d7:ad:a0:f1:d0:27:01:b1:b0:9d:8c:
f7:18:a4:4f:f9:b2:cc:40:fd:55:bd:b8:e5:74:c4:ea:9f:78:
76:85:9b:f9:42:3c:7f:74:8c:01:e9:7f:3b:a0:f4:14:87:0d:
8f:a8:7d:e1:0a:aa:30:7c:cf:df:3e:92:90:07:15:c4:f7:6f:
34:6f:72:bb:a4:4c:fa:93:62:ab:71:7d:52:e1:2c:e0:b5:58:
ef:bf:ea:ed:67:42:59:59:09:40:18:5b:af:b6:c8:30:fb:5e:
46:d0:d6:4d:f8:4d:b9:be:d3:73:27:b2:1f:4f:ed:53:26:f1:
06:60:af:8a:4b:53:ef:ab:87:33:16:b1:d6:12:54:08:a4:a6:
5f:6f:17:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 07:01:26 2024 by rpki-client on console-fra.rpki-client.org