Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/47f445-5ea9-437d-a59a-5900a5947b8d/1/rdW_Uwi1zywbRu9qjW5gmE-XhqQ.roa
File: rdW_Uwi1zywbRu9qjW5gmE-XhqQ.roa (raw, json)
Hash identifier: a3iBQ2w14uNmI0u4+5wRX/6K/QJ3ekSsmQctNl8Ueik=
Subject key identifier: AD:D5:BF:53:08:B5:CF:2C:1B:46:EF:6A:8D:6E:60:98:4F:97:86:A4
Certificate issuer: /CN=2864bb34fb5d16ca9d1fa3f9794cb48d4bed8473
Certificate serial: 018CC4922A4E72AB9F72D533CEBD1D4D8DE4
Authority key identifier: 28:64:BB:34:FB:5D:16:CA:9D:1F:A3:F9:79:4C:B4:8D:4B:ED:84:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KGS7NPtdFsqdH6P5eUy0jUvthHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/47f445-5ea9-437d-a59a-5900a5947b8d/1/rdW_Uwi1zywbRu9qjW5gmE-XhqQ.roa
Signing time: Mon 01 Jan 2024 10:29:22 +0000
ROA not before: Mon 01 Jan 2024 10:29:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 46071
IP address blocks: 194.99.58.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/47f445-5ea9-437d-a59a-5900a5947b8d/1/KGS7NPtdFsqdH6P5eUy0jUvthHM.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/47f445-5ea9-437d-a59a-5900a5947b8d/1/KGS7NPtdFsqdH6P5eUy0jUvthHM.mft
rsync://rpki.ripe.net/repository/DEFAULT/KGS7NPtdFsqdH6P5eUy0jUvthHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Jun 2024 07:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:92:2a:4e:72:ab:9f:72:d5:33:ce:bd:1d:4d:8d:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2864bb34fb5d16ca9d1fa3f9794cb48d4bed8473
Validity
Not Before: Jan 1 10:29:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=add5bf5308b5cf2c1b46ef6a8d6e60984f9786a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:91:07:8d:4a:2d:e0:7b:8b:a0:65:40:8d:32:
ba:de:fa:c7:3f:54:9e:84:08:a0:8e:7d:25:7b:65:
e3:cb:78:d0:0d:72:17:a4:1c:78:66:91:96:8e:63:
e5:c2:5f:68:9f:5c:0c:59:3e:e4:b6:28:42:1f:a9:
9f:72:4e:b1:5a:d3:b0:c4:16:44:37:fd:56:1c:7e:
34:c1:ca:1d:9d:5d:1a:93:cc:32:46:6f:1d:23:6d:
d9:21:02:b3:17:83:47:ad:15:9c:69:59:d0:c5:91:
63:bc:f8:e3:11:3a:91:01:03:e0:28:88:28:7c:b0:
fc:00:35:59:1f:f0:e5:5c:37:08:06:e0:0a:23:6b:
8b:9f:eb:fd:08:a7:7e:80:d1:08:e6:7c:6e:9e:4a:
b8:dd:f9:1e:c1:3a:ff:6c:76:db:3a:17:d4:29:28:
99:ee:2a:ca:82:3a:52:57:e2:ff:c4:f1:be:be:7c:
7a:19:ff:3d:65:cb:3b:08:d1:20:42:40:64:ac:5e:
f2:02:1d:76:d9:36:2e:fa:8a:9c:21:d2:9f:48:20:
e0:f6:55:80:fe:a8:b8:e8:16:0f:1a:26:f2:bf:24:
53:e5:b7:6f:ad:fa:37:59:87:2a:37:ab:b6:b8:cf:
a1:2b:07:3d:1a:6b:e7:00:fc:f1:d7:9c:5b:cf:c7:
f8:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:D5:BF:53:08:B5:CF:2C:1B:46:EF:6A:8D:6E:60:98:4F:97:86:A4
X509v3 Authority Key Identifier:
keyid:28:64:BB:34:FB:5D:16:CA:9D:1F:A3:F9:79:4C:B4:8D:4B:ED:84:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KGS7NPtdFsqdH6P5eUy0jUvthHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/47f445-5ea9-437d-a59a-5900a5947b8d/1/rdW_Uwi1zywbRu9qjW5gmE-XhqQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/47f445-5ea9-437d-a59a-5900a5947b8d/1/KGS7NPtdFsqdH6P5eUy0jUvthHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.99.58.0/23
Signature Algorithm: sha256WithRSAEncryption
27:a7:94:e8:33:48:65:1f:6b:65:ab:33:61:81:86:ea:d4:f3:
30:5b:55:2e:f1:f9:9f:4b:68:fc:ca:d6:c7:bf:8f:2a:a8:87:
56:6e:ce:6b:69:52:13:6b:2d:0a:5f:8d:b5:56:cc:13:35:b6:
0c:af:1b:89:f2:d3:c4:1d:01:f5:b7:02:33:f6:bf:ef:d1:31:
74:85:89:a9:91:2f:1a:90:ac:dc:c2:a0:ed:1d:b0:6e:23:cf:
43:54:30:bc:7c:57:d0:da:ac:75:4f:20:f7:93:42:d0:06:2d:
4b:6c:93:5c:74:40:19:f2:84:91:c7:05:a4:a9:f2:ba:fc:7f:
c7:c9:fb:f1:79:d8:62:6f:15:51:76:f3:11:74:86:a5:b8:7f:
d8:60:65:d6:c9:7a:75:f8:ac:24:50:b8:9d:86:4e:b7:a2:c3:
3f:8f:eb:7c:18:47:06:69:58:78:0e:fd:a9:d6:8b:16:61:3d:
16:dc:a6:d6:67:28:60:f0:7e:f2:d8:db:36:d9:b8:17:78:41:
ac:fe:76:58:d0:28:fb:4f:3e:1a:99:0e:17:d1:76:a7:b4:48:
ea:76:88:ec:91:87:72:68:ef:a6:22:f2:c3:93:62:9c:87:ca:
c9:19:05:d0:69:1f:90:d2:f7:8c:7d:2d:bc:61:44:0f:af:88:
f5:f9:4e:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 13:56:38 2024 by rpki-client on console-ams.rpki-client.org