Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/dalkQoR5yWN0bj6Rv4PS5E6TTuU.roa
File: dalkQoR5yWN0bj6Rv4PS5E6TTuU.roa (raw, json)
Hash identifier: lc3j/nGT+80agSUi8VPGfdjqrhxAZtHrC8wAloMiTmI=
Subject key identifier: 75:A9:64:42:84:79:C9:63:74:6E:3E:91:BF:83:D2:E4:4E:93:4E:E5
Certificate issuer: /CN=8f3818554a51808eefb829ec7465a3222f270123
Certificate serial: 018CC801A7347F31F116F7377173C8E1C723
Authority key identifier: 8F:38:18:55:4A:51:80:8E:EF:B8:29:EC:74:65:A3:22:2F:27:01:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/dalkQoR5yWN0bj6Rv4PS5E6TTuU.roa
Signing time: Tue 02 Jan 2024 02:30:00 +0000
ROA not before: Tue 02 Jan 2024 02:30:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198294
IP address blocks: 84.47.181.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.mft
rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:a7:34:7f:31:f1:16:f7:37:71:73:c8:e1:c7:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f3818554a51808eefb829ec7465a3222f270123
Validity
Not Before: Jan 2 02:30:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=75a964428479c963746e3e91bf83d2e44e934ee5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:49:59:ee:3d:2c:3d:6b:f5:0f:c1:ed:93:c3:
73:4d:7b:21:15:8d:5a:31:9e:52:d8:b5:ec:1b:f8:
78:ef:2f:54:c0:f9:eb:f5:a0:3a:7a:ba:0a:74:d4:
4b:1b:9b:c5:0e:16:6e:0f:b2:ad:43:4d:ad:7c:38:
a2:19:2d:ce:24:b9:b1:e7:e5:e6:d7:7a:88:1b:f6:
04:48:f4:15:6b:62:3d:3b:a0:58:9a:d2:aa:41:fa:
45:4d:7f:61:d5:2b:74:60:c2:ed:fe:6e:63:31:d4:
aa:60:40:3e:14:0e:e2:ce:e8:96:26:4d:de:1e:62:
83:2a:af:83:5e:1c:93:5a:6f:ad:a5:c1:f5:b1:84:
e4:17:3a:e8:68:2f:c9:ba:13:a5:cc:28:36:b2:7d:
04:1b:31:09:3f:7e:4e:9c:22:e5:83:c0:41:60:c6:
0a:4d:8f:11:92:80:fb:91:09:7a:d0:02:18:75:4b:
59:33:8a:d8:13:a4:d4:f1:e6:f4:bd:47:6a:ea:31:
16:30:c4:e0:73:11:94:47:11:63:76:5c:a9:d7:86:
71:c6:48:21:d3:06:8b:4f:a4:ad:f8:1b:39:93:db:
0f:dc:2c:7f:b8:d3:a5:25:1f:d6:fd:c7:ba:1c:42:
de:c6:82:0e:5f:ed:63:44:47:8c:d6:a1:b7:bb:d5:
f1:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:A9:64:42:84:79:C9:63:74:6E:3E:91:BF:83:D2:E4:4E:93:4E:E5
X509v3 Authority Key Identifier:
keyid:8F:38:18:55:4A:51:80:8E:EF:B8:29:EC:74:65:A3:22:2F:27:01:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/dalkQoR5yWN0bj6Rv4PS5E6TTuU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.47.181.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:ee:d9:8e:19:7b:ed:5d:d1:9e:59:75:b7:2a:48:a7:09:50:
f2:0c:8b:27:73:de:99:c2:92:a1:91:3a:54:40:3e:30:16:b7:
48:19:68:27:01:4b:00:c8:d8:36:dd:f6:5f:68:28:f1:2f:d2:
4d:37:fd:6c:c0:7c:fb:2c:50:7e:7a:66:af:20:a4:6c:bd:8d:
ce:ee:be:93:d0:ff:38:d8:f0:ff:47:13:72:76:48:4f:89:0d:
cc:58:fb:89:fa:a1:e3:7c:17:f9:25:2e:0a:83:79:51:d7:3a:
34:6d:1a:3d:5d:dd:db:93:03:1c:d0:2e:eb:e7:08:17:62:c3:
93:88:f0:69:87:92:c0:5b:1d:79:c2:fa:52:0a:2e:0f:ab:af:
1f:8b:09:c6:83:6a:a4:9c:43:35:91:45:5c:21:eb:9b:0f:18:
b3:4f:76:c9:cf:a0:26:1e:b0:73:57:c6:97:66:62:98:34:55:
63:03:8e:37:18:16:91:76:79:5b:9e:5f:d6:47:bc:23:ac:ea:
82:01:d9:07:13:f2:74:d4:fd:f0:a5:f7:9d:c3:1b:64:ae:fa:
92:74:75:43:76:8b:0d:f4:d2:31:89:17:eb:31:01:5a:d0:03:
bb:1b:5b:47:de:2f:81:d7:d9:66:9e:bd:8e:b8:c0:cb:23:66:
d9:5c:c0:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:03:57 2024 by rpki-client on console-ams.rpki-client.org