Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/rrRrLoCijQawjBxHhApFskKz-pw.roa
File: rrRrLoCijQawjBxHhApFskKz-pw.roa (raw, json)
Hash identifier: D9JcjRIMAPvZPjTeZWh/GUj+VhGQZ0Eu6pbMZ7wTbrk=
Subject key identifier: AE:B4:6B:2E:80:A2:8D:06:B0:8C:1C:47:84:0A:45:B2:42:B3:FA:9C
Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d
Certificate serial: 018D6575D0E4CF615426BC82BAFF84D34A30
Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/rrRrLoCijQawjBxHhApFskKz-pw.roa
Signing time: Thu 01 Feb 2024 16:17:16 +0000
ROA not before: Thu 01 Feb 2024 16:17:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215891
IP address blocks: 194.6.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 19:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:65:75:d0:e4:cf:61:54:26:bc:82:ba:ff:84:d3:4a:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d
Validity
Not Before: Feb 1 16:17:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=aeb46b2e80a28d06b08c1c47840a45b242b3fa9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:ea:ce:54:00:77:8a:f9:6a:8a:13:9c:cc:52:
37:fd:58:a6:8b:b5:1b:ca:07:f1:a4:42:46:8f:90:
c0:ba:bb:65:34:d3:e4:f4:75:64:78:b2:ef:84:a5:
6c:06:8f:dc:9e:6b:98:77:e4:39:6b:20:1d:df:6c:
92:71:74:e7:31:0d:08:2d:ec:36:2b:d5:4d:30:e9:
5c:90:ac:0e:74:57:13:78:a6:e8:68:fe:36:7c:87:
ce:c7:53:e7:36:61:6f:89:de:28:11:11:b2:7f:d3:
6a:fb:bd:57:82:ce:b0:10:9e:c6:27:01:b5:ad:95:
20:f2:f7:e1:e4:9d:b6:0e:d5:f4:15:5e:51:b6:b2:
c5:3b:15:72:6a:1d:22:55:0f:f0:84:fd:14:38:59:
08:40:89:b8:91:99:36:76:0c:cc:aa:ef:c0:61:5f:
05:5b:08:d0:2e:7a:1e:87:44:b7:2e:c1:81:86:f4:
79:fa:c2:a1:bc:77:b1:8a:61:3e:d8:d5:4a:d5:ca:
5d:0b:ea:d3:b8:2d:1f:74:c2:a6:a0:76:26:4a:b8:
f4:4d:7b:97:d7:7c:9d:1c:d6:69:36:9c:ce:23:a4:
c4:00:d8:18:37:70:61:a7:4b:23:b1:4c:f0:03:1d:
b1:04:52:30:70:d7:13:16:72:d0:b2:13:1b:06:20:
63:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:B4:6B:2E:80:A2:8D:06:B0:8C:1C:47:84:0A:45:B2:42:B3:FA:9C
X509v3 Authority Key Identifier:
keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/rrRrLoCijQawjBxHhApFskKz-pw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.6.174.0/24
Signature Algorithm: sha256WithRSAEncryption
93:8b:19:fc:71:14:00:93:23:d9:f6:ad:56:b2:39:da:71:f8:
51:a6:f5:24:17:c4:44:a8:b6:0f:ee:98:bd:78:2b:e0:d5:9f:
84:3d:23:5a:73:0d:f8:6b:fc:8e:7a:d9:8e:71:ca:ae:d1:c7:
d3:26:3b:99:2b:c0:93:a3:b2:2c:9b:de:49:98:cd:f8:2b:56:
57:8c:89:b4:9b:d4:ed:0f:f2:c4:ba:54:a9:86:d5:3d:5c:be:
c5:fc:f4:53:24:63:e0:04:97:c3:2f:df:ef:08:e3:98:26:c0:
5d:0f:b8:da:ec:2e:7f:5a:7e:55:35:d7:1d:27:eb:d3:37:84:
26:5e:b5:dc:9b:99:f4:69:f1:e2:dc:1f:1f:91:72:e8:f8:49:
3b:a2:eb:7a:9f:fb:8e:bc:a8:1b:6c:79:a5:fa:a5:4a:6a:66:
af:03:14:c6:c5:8c:87:9e:cd:08:06:e0:82:6f:ed:22:35:01:
5b:2a:d2:fc:c8:37:a2:b7:1f:e9:2b:2e:bc:a9:58:d8:2f:84:
75:1d:60:3e:5b:d4:90:e7:35:52:6b:87:66:ad:5e:1d:c9:9d:
3d:77:e3:bd:70:8e:e0:75:1e:8c:38:05:cb:d1:07:ef:cf:89:
ef:97:13:de:3a:a4:4a:da:89:66:f2:6e:4f:e1:af:2c:fa:dc:
9d:b4:89:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:01:16 2024 by rpki-client on console-ams.rpki-client.org