Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/8fad67-bb6b-4773-b81e-c900a89f20f1/1/m0QDwnAYkcoGIiFJuin_PxuPRG8.roa
File: m0QDwnAYkcoGIiFJuin_PxuPRG8.roa (raw, json)
Hash identifier: /NzmJUXcbdsyAwCE1sS0jgCs1I3Mhu9+6G2AE3z2Vc0=
Subject key identifier: 9B:44:03:C2:70:18:91:CA:06:22:21:49:BA:29:FF:3F:1B:8F:44:6F
Certificate issuer: /CN=541fdc7a2f11a5766d3ad7bdf625ce5e119a8fdf
Certificate serial: 01930AC4F9FA54A0B40E67FA14077DB0A429
Authority key identifier: 54:1F:DC:7A:2F:11:A5:76:6D:3A:D7:BD:F6:25:CE:5E:11:9A:8F:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VB_cei8RpXZtOte99iXOXhGaj98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/8fad67-bb6b-4773-b81e-c900a89f20f1/1/m0QDwnAYkcoGIiFJuin_PxuPRG8.roa
Signing time: Fri 08 Nov 2024 07:55:01 +0000
ROA not before: Fri 08 Nov 2024 07:55:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15353
IP address blocks: 185.101.168.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/8fad67-bb6b-4773-b81e-c900a89f20f1/1/VB_cei8RpXZtOte99iXOXhGaj98.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/8fad67-bb6b-4773-b81e-c900a89f20f1/1/VB_cei8RpXZtOte99iXOXhGaj98.mft
rsync://rpki.ripe.net/repository/DEFAULT/VB_cei8RpXZtOte99iXOXhGaj98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:0a:c4:f9:fa:54:a0:b4:0e:67:fa:14:07:7d:b0:a4:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=541fdc7a2f11a5766d3ad7bdf625ce5e119a8fdf
Validity
Not Before: Nov 8 07:55:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9b4403c2701891ca06222149ba29ff3f1b8f446f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:76:d4:63:5f:29:94:75:9c:9a:84:0b:39:73:
da:9e:f0:50:43:6c:b6:e3:4d:ac:10:bd:70:56:70:
5a:c4:7b:c0:50:a1:cc:c7:2c:ea:e7:17:ca:80:58:
9a:54:f1:e5:c5:74:ca:54:01:d5:19:bc:d8:42:e9:
8c:ed:e0:e5:ba:8b:6d:69:1e:e3:ad:a5:df:33:05:
58:62:f0:2f:a1:18:a6:09:1e:64:29:af:49:59:6a:
71:a0:8b:4d:f3:72:eb:29:01:fc:65:c4:63:bf:07:
0e:1b:d2:e7:18:ed:67:f7:8e:9d:36:d7:98:25:9e:
15:8e:d9:72:2e:df:93:de:df:52:1c:dc:b2:38:ff:
c4:fa:c0:78:a1:aa:78:56:ba:76:34:5a:90:9a:d2:
79:34:2f:91:f1:a7:2d:c2:00:99:38:8b:94:f4:4d:
f2:8b:22:a4:4a:a3:04:d3:b0:51:b0:70:04:5b:f2:
c4:52:c0:d6:fa:aa:41:3d:5e:23:2a:ea:60:de:ae:
aa:11:c4:cb:d3:14:3d:c3:44:91:27:8e:05:4c:9d:
b4:5a:5f:10:d7:4c:1f:e0:15:ea:05:18:06:8f:5d:
c2:c5:fc:26:2e:5b:14:af:13:29:11:36:26:20:94:
d6:51:78:3b:08:6b:73:bd:68:0b:87:c8:19:26:67:
f6:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:44:03:C2:70:18:91:CA:06:22:21:49:BA:29:FF:3F:1B:8F:44:6F
X509v3 Authority Key Identifier:
keyid:54:1F:DC:7A:2F:11:A5:76:6D:3A:D7:BD:F6:25:CE:5E:11:9A:8F:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VB_cei8RpXZtOte99iXOXhGaj98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/8fad67-bb6b-4773-b81e-c900a89f20f1/1/m0QDwnAYkcoGIiFJuin_PxuPRG8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/8fad67-bb6b-4773-b81e-c900a89f20f1/1/VB_cei8RpXZtOte99iXOXhGaj98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.101.168.0/23
Signature Algorithm: sha256WithRSAEncryption
5d:83:dc:6f:f1:9d:9e:94:1e:27:b7:88:d0:ad:e7:a9:56:ba:
55:f4:ef:a5:35:f4:6f:98:74:1b:a0:2e:28:e9:18:50:5d:1f:
8e:98:2e:89:e5:0f:08:0d:71:fb:b7:07:90:61:e8:df:48:d8:
4c:41:f0:cc:4b:55:e7:e1:8a:98:fe:b9:c0:be:3c:17:31:b7:
c4:f5:03:6c:c4:ab:7a:17:c1:70:7a:74:61:06:10:cc:8f:bd:
75:14:93:5c:a3:7f:ba:f3:a6:4e:46:25:1c:5d:c2:a7:32:36:
7b:69:f5:09:28:cc:2c:b3:c9:ee:04:29:de:35:6f:4e:b1:55:
2e:e2:69:04:83:2b:d8:70:33:00:3a:e8:a9:46:46:6e:ca:38:
e1:cb:ba:cb:4e:59:ba:78:c4:78:c1:18:d2:1d:c7:27:d7:da:
13:6f:24:51:d1:7f:28:ec:01:a7:46:6a:d1:04:b4:04:19:59:
9a:6b:3b:81:a1:11:04:f4:8a:4d:c8:84:23:68:e0:32:e7:de:
6c:52:73:58:38:c6:c2:be:fb:3d:f0:e6:0c:16:22:29:98:d2:
8c:07:66:92:10:6d:1e:16:18:d9:50:de:93:5c:8c:94:89:85:
0e:2f:2c:bc:89:ae:cc:99:3b:de:5f:d4:42:f3:0d:b5:8c:ba:
d9:97:0d:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:04:40 2024 by rpki-client on console-ams.rpki-client.org