Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/dAmRJVd2-fH2hD4jODRdEr7y4XE.roa
File: dAmRJVd2-fH2hD4jODRdEr7y4XE.roa (raw, json)
Hash identifier: H1B9JuYYBAFJBNTh7JYkwlIdTHiwwY8a18ZKI4rqx4k=
Subject key identifier: 74:09:91:25:57:76:F9:F1:F6:84:3E:23:38:34:5D:12:BE:F2:E1:71
Certificate issuer: /CN=82e014f1c8ca3966a93ef39dbc612daac0d83dc0
Certificate serial: 018CC56E9F63E1631DCCAB7EC3B458F28E48
Authority key identifier: 82:E0:14:F1:C8:CA:39:66:A9:3E:F3:9D:BC:61:2D:AA:C0:D8:3D:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/guAU8cjKOWapPvOdvGEtqsDYPcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/dAmRJVd2-fH2hD4jODRdEr7y4XE.roa
Signing time: Mon 01 Jan 2024 14:30:10 +0000
ROA not before: Mon 01 Jan 2024 14:30:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 1299
IP address blocks: 194.56.124.0/23 maxlen: 23
194.56.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/guAU8cjKOWapPvOdvGEtqsDYPcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/guAU8cjKOWapPvOdvGEtqsDYPcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/guAU8cjKOWapPvOdvGEtqsDYPcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 16 May 2024 14:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:9f:63:e1:63:1d:cc:ab:7e:c3:b4:58:f2:8e:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82e014f1c8ca3966a93ef39dbc612daac0d83dc0
Validity
Not Before: Jan 1 14:30:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=740991255776f9f1f6843e2338345d12bef2e171
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:a2:3a:0e:db:3f:cc:57:e4:5e:ce:ff:8d:49:
80:de:35:e3:e3:cf:d7:24:b0:c5:d3:68:d7:77:aa:
22:a7:7d:d6:44:31:48:37:3c:30:a0:b0:26:02:a6:
17:c5:05:88:8c:cd:37:43:4a:22:f0:9c:1c:e9:8d:
c4:65:12:54:bd:5d:a3:30:c9:c8:ea:6e:d5:64:70:
34:ec:df:7f:e1:3b:3c:00:8d:80:5d:27:34:5a:be:
08:44:43:89:93:ff:85:20:40:88:ff:d4:9c:58:1a:
0d:87:37:1a:46:92:b6:01:01:94:10:9c:3a:6b:18:
32:76:67:ab:92:14:70:c0:1c:9a:2c:e3:c7:7e:03:
60:99:8c:1d:b9:29:cd:39:2e:d5:4f:c0:c4:6f:e2:
7b:a0:da:a9:29:a1:b3:37:25:37:0a:d3:f2:91:aa:
f7:84:5c:80:44:3b:8f:5e:34:a4:72:12:90:0d:c5:
66:d3:26:d9:41:10:7f:8d:ff:18:a4:4f:d0:39:6a:
a2:0d:ce:02:c2:3f:8e:ac:5b:8d:76:4d:7d:82:27:
f8:b4:37:35:6e:23:4e:de:2d:d8:1e:14:04:0b:70:
9c:a3:f8:82:47:ba:46:b8:64:16:91:9b:61:8f:ce:
2f:34:97:12:1c:e1:12:ac:e0:18:d8:44:25:57:02:
97:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:09:91:25:57:76:F9:F1:F6:84:3E:23:38:34:5D:12:BE:F2:E1:71
X509v3 Authority Key Identifier:
keyid:82:E0:14:F1:C8:CA:39:66:A9:3E:F3:9D:BC:61:2D:AA:C0:D8:3D:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/guAU8cjKOWapPvOdvGEtqsDYPcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/dAmRJVd2-fH2hD4jODRdEr7y4XE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/guAU8cjKOWapPvOdvGEtqsDYPcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.56.124.0-194.56.126.255
Signature Algorithm: sha256WithRSAEncryption
8d:38:e8:f4:32:7c:0f:c4:0f:5a:0a:a1:cb:25:9a:84:47:20:
65:79:4b:19:2c:8e:60:8d:d0:2a:fe:80:d3:1b:07:2e:4d:1d:
6f:4b:d8:03:ab:30:77:bd:e0:97:73:e1:4c:3a:ff:d2:e1:95:
01:21:e6:b6:12:6a:a2:bb:e6:43:0b:36:12:da:c3:52:48:65:
7b:9f:e7:87:5a:c9:ea:40:3a:97:53:b1:33:be:9d:8d:19:40:
f1:fb:98:6f:b5:9b:8d:24:79:ec:28:86:db:c9:14:d9:59:e8:
84:76:ac:44:d0:50:7e:1d:7d:40:f7:d6:32:3a:5d:10:56:82:
d8:79:6a:d9:6e:d4:4f:38:af:ef:88:d8:d7:12:4c:d1:7d:d1:
4c:a2:8d:97:88:c7:eb:dd:e4:8b:2c:5d:71:20:14:70:53:65:
bc:b8:e0:92:52:7e:5d:dc:fc:55:f6:71:2a:7f:af:20:ef:0a:
93:33:a9:5f:18:ba:6b:c2:c1:34:6f:e2:c1:bb:7c:64:35:71:
5f:6c:0c:f1:5c:83:55:0f:b6:de:d1:04:53:8d:6d:bf:61:61:
5a:18:12:f3:0d:5a:93:7b:98:14:6b:77:ea:1d:be:ee:7e:0d:
58:e4:3f:5b:a8:ad:f7:6c:bb:4c:a8:9b:d3:b1:34:ec:03:59:
f0:6c:72:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 18:15:58 2024 by rpki-client on console-fra.rpki-client.org