Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/7c9G0GQJYG-3YOy2JdgPC5rbXOE.roa
File: 7c9G0GQJYG-3YOy2JdgPC5rbXOE.roa (raw, json)
Hash identifier: x1PB6tJTCd6Xpwia6jLWqx+tukloXQvhfkKqPZ6Cp0Y=
Subject key identifier: ED:CF:46:D0:64:09:60:6F:B7:60:EC:B6:25:D8:0F:0B:9A:DB:5C:E1
Certificate issuer: /CN=a4ce9640a3ef2fea19374ad8f99f423d7aa7c76b
Certificate serial: 018CC794DBBB65455493E8D581B214F50E6E
Authority key identifier: A4:CE:96:40:A3:EF:2F:EA:19:37:4A:D8:F9:9F:42:3D:7A:A7:C7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/7c9G0GQJYG-3YOy2JdgPC5rbXOE.roa
Signing time: Tue 02 Jan 2024 00:31:10 +0000
ROA not before: Tue 02 Jan 2024 00:31:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34665
IP address blocks: 81.19.133.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 08:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:db:bb:65:45:54:93:e8:d5:81:b2:14:f5:0e:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4ce9640a3ef2fea19374ad8f99f423d7aa7c76b
Validity
Not Before: Jan 2 00:31:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=edcf46d06409606fb760ecb625d80f0b9adb5ce1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:ff:51:82:9d:01:1c:2f:b2:07:e1:39:04:3f:
af:ed:21:5f:f5:17:bf:08:8b:cc:ca:ff:80:2a:ce:
d1:b2:40:95:9e:11:a4:88:c5:47:fc:c7:17:dd:5e:
ba:e3:9a:a8:19:c5:11:1b:2e:83:aa:0d:06:dc:a3:
97:bf:03:7e:a9:3f:d5:2d:b0:e4:18:d0:d2:c7:7b:
cb:cd:63:c8:cd:4b:8a:8d:46:72:43:80:98:5a:4a:
09:7b:10:31:a7:7a:b3:79:cb:1e:36:0f:f8:1a:e2:
7f:74:e6:a3:72:0a:bb:50:5a:da:cf:1e:52:a9:64:
91:9e:0b:74:ef:0d:76:78:e5:9e:0d:08:3c:3f:34:
6d:3b:f2:0f:9d:5c:10:e1:fb:52:29:a9:c8:ed:15:
72:c5:09:48:4c:d1:d0:15:f1:82:e4:e7:91:4b:e1:
71:4a:f8:ee:df:e5:9e:d4:2d:6d:07:cb:56:79:6d:
ca:c6:6b:01:ad:00:b3:3c:4c:18:28:80:9d:b1:d2:
7a:e2:8a:74:24:f0:0a:73:b0:43:fe:02:b1:52:62:
7c:db:12:41:b9:c8:5a:a2:71:94:f1:ce:3c:17:ba:
de:0f:f8:67:84:38:75:62:b1:e7:74:5d:65:6d:7b:
ed:9f:47:03:9d:6e:75:90:c9:eb:d1:85:dd:6c:46:
98:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:CF:46:D0:64:09:60:6F:B7:60:EC:B6:25:D8:0F:0B:9A:DB:5C:E1
X509v3 Authority Key Identifier:
keyid:A4:CE:96:40:A3:EF:2F:EA:19:37:4A:D8:F9:9F:42:3D:7A:A7:C7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/7c9G0GQJYG-3YOy2JdgPC5rbXOE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.133.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:f2:e6:d6:be:a7:0f:c4:f7:06:da:f1:75:62:74:4a:6d:0f:
2f:a8:eb:66:0b:72:34:dd:60:be:66:bd:c1:50:ea:05:0c:5e:
34:c5:e9:de:8f:b0:a6:de:37:02:41:27:a0:1c:55:a2:e2:1c:
17:68:22:d5:5a:06:1a:a0:45:24:1c:e2:e5:6c:67:d4:93:13:
40:a9:07:a6:ea:a6:f9:54:eb:68:cd:91:25:2b:3c:cc:d2:0a:
7f:9f:22:05:83:b8:d6:29:5e:2f:c8:29:60:f0:af:61:b7:86:
8f:09:fd:d7:22:fd:26:6a:f7:b9:80:16:c9:56:73:0c:74:b3:
d0:e8:64:e4:44:6e:be:46:09:b7:e4:cc:e7:84:28:27:a0:b1:
2d:56:a4:6a:25:d3:33:78:97:c6:ed:4d:a0:aa:97:40:9d:f5:
dc:3c:1d:1b:96:e2:77:5f:d2:8f:d5:04:91:51:ba:e6:46:d5:
4b:f9:2d:6f:0f:fe:d2:17:9a:76:f1:14:32:15:1b:8c:9b:30:
26:9b:cc:86:c1:20:a4:51:25:21:36:fb:55:5e:5d:16:77:a9:
ef:42:7f:0e:22:70:5a:25:c9:c9:d7:01:9b:5b:3f:d6:24:39:
ff:4e:9c:ed:f0:ad:95:01:cc:9b:c1:19:19:6c:54:77:eb:63:
f8:e9:92:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:44:57 2024 by rpki-client on console-ams.rpki-client.org