Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/3UPpWAeUBmq1En5mRom4nA1JLgE.roa
File: 3UPpWAeUBmq1En5mRom4nA1JLgE.roa (raw, json)
Hash identifier: 71oULW4RfTdRSQj5VOIZHxSaDuz1MZdGRkBC0muzg0E=
Subject key identifier: DD:43:E9:58:07:94:06:6A:B5:12:7E:66:46:89:B8:9C:0D:49:2E:01
Certificate issuer: /CN=27a39e4794c34612e7f22569b1a6a81710260ae5
Certificate serial: 018CC794560E69E7493DA8FFCDDFE0C5425D
Authority key identifier: 27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/3UPpWAeUBmq1En5mRom4nA1JLgE.roa
Signing time: Tue 02 Jan 2024 00:30:36 +0000
ROA not before: Tue 02 Jan 2024 00:30:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197343
IP address blocks: 2.189.128.0/20 maxlen: 24
2.189.144.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.mft
rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:56:0e:69:e7:49:3d:a8:ff:cd:df:e0:c5:42:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27a39e4794c34612e7f22569b1a6a81710260ae5
Validity
Not Before: Jan 2 00:30:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dd43e9580794066ab5127e664689b89c0d492e01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:4c:1f:98:ed:43:a7:5c:d0:17:8e:29:91:1d:
10:79:31:b7:c0:f9:e1:e0:ec:0d:dc:c2:57:b4:4a:
ff:85:5d:6e:f8:46:76:e3:3a:bc:c2:a1:56:b0:7d:
7b:8f:48:02:b7:62:a2:34:14:75:16:0d:fb:66:1b:
80:0e:23:1e:a6:ed:ac:29:eb:43:30:e0:28:9a:68:
b3:02:46:4a:74:92:35:64:5d:6e:2f:4c:87:f9:b8:
30:7e:54:6d:17:3e:e5:7c:d1:1a:fc:6d:6e:74:d2:
f0:86:29:ae:c1:15:d9:93:04:f9:e5:10:10:f8:b7:
9c:0b:9d:be:6d:55:5a:04:b8:8e:0f:72:0e:76:29:
84:bb:ee:dc:ca:92:6b:84:3a:c2:3e:52:09:ad:c2:
5e:73:3c:1a:0e:6a:d6:94:b3:5e:59:ec:2d:fa:ee:
41:f5:69:e9:93:7c:39:6a:9f:7d:21:34:b7:8f:a4:
7d:46:84:85:d7:6d:f6:06:58:6a:0e:14:29:12:6d:
d3:e8:07:45:7e:c8:cb:13:00:23:a7:c4:4a:77:50:
3b:e4:f4:a6:2c:e0:06:0a:59:57:dc:1f:80:e3:c4:
47:d3:02:c4:13:0f:5c:f1:4f:3f:04:05:67:fc:c4:
1f:01:77:9f:3c:69:29:1f:3f:8d:11:4d:2b:80:ff:
67:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:43:E9:58:07:94:06:6A:B5:12:7E:66:46:89:B8:9C:0D:49:2E:01
X509v3 Authority Key Identifier:
keyid:27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/3UPpWAeUBmq1En5mRom4nA1JLgE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.189.128.0/19
Signature Algorithm: sha256WithRSAEncryption
29:d3:c1:79:ac:91:c1:fe:1c:48:bd:0d:36:6b:6c:10:27:8f:
8b:a6:a2:1b:8f:e2:67:71:94:cc:6a:5e:e0:c4:5c:48:e7:4f:
69:00:4e:e3:52:73:69:2d:c7:7a:0a:26:6b:79:52:2f:15:d9:
ff:de:9d:e0:32:52:11:b6:5f:38:3b:26:a6:78:d9:94:35:ac:
5e:81:1a:af:ab:f0:fb:87:d8:e6:6c:b0:fb:78:06:9b:9c:ff:
9e:96:b2:42:3a:f4:fb:b3:ab:58:82:eb:3b:58:51:b7:15:34:
65:41:45:90:a8:84:4d:90:6d:2d:f0:a9:62:dd:64:4d:ef:b3:
88:2a:8c:b8:09:71:03:bd:f5:34:86:94:c3:8a:9a:09:f6:41:
cd:eb:be:34:00:6a:82:cb:a4:a8:06:51:6e:04:4d:f4:46:05:
12:55:6c:91:ca:48:98:95:11:12:53:99:eb:24:a9:7b:04:77:
d2:77:ce:c6:bd:27:2e:02:87:25:5a:0c:16:19:26:c4:25:5a:
f6:84:9b:e4:85:8d:96:02:e1:91:ee:a5:56:e2:7b:9d:c5:8d:
68:af:b3:86:15:2c:94:ba:aa:e0:0b:cc:f0:63:d7:17:cf:94:
72:37:11:db:ba:f0:e7:9c:58:96:e0:ac:be:d1:87:f4:66:cf:
c5:8d:a3:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 16:48:27 2024 by rpki-client on console-ams.rpki-client.org