Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/c5427b-5990-42ac-bc54-c740e2fe30d3/1/PdZHy0a79AuT5zTcbhbeLwtkOc8.roa
File: PdZHy0a79AuT5zTcbhbeLwtkOc8.roa (raw, json)
Hash identifier: 9juH/dX1M+blT6wCcJee9KpgeIkyjMv0kJzFPDuFNYI=
Subject key identifier: 3D:D6:47:CB:46:BB:F4:0B:93:E7:34:DC:6E:16:DE:2F:0B:64:39:CF
Certificate issuer: /CN=457aa1c78f6ccabc47b55121a35ff30d99827ee9
Certificate serial: 018CC26D2F290B50AB87C06AA65F049E34B8
Authority key identifier: 45:7A:A1:C7:8F:6C:CA:BC:47:B5:51:21:A3:5F:F3:0D:99:82:7E:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RXqhx49syrxHtVEho1_zDZmCfuk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/c5427b-5990-42ac-bc54-c740e2fe30d3/1/PdZHy0a79AuT5zTcbhbeLwtkOc8.roa
Signing time: Mon 01 Jan 2024 00:29:44 +0000
ROA not before: Mon 01 Jan 2024 00:29:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44599
IP address blocks: 193.242.181.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/c5427b-5990-42ac-bc54-c740e2fe30d3/1/RXqhx49syrxHtVEho1_zDZmCfuk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/c5427b-5990-42ac-bc54-c740e2fe30d3/1/RXqhx49syrxHtVEho1_zDZmCfuk.mft
rsync://rpki.ripe.net/repository/DEFAULT/RXqhx49syrxHtVEho1_zDZmCfuk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 07:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:2f:29:0b:50:ab:87:c0:6a:a6:5f:04:9e:34:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=457aa1c78f6ccabc47b55121a35ff30d99827ee9
Validity
Not Before: Jan 1 00:29:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3dd647cb46bbf40b93e734dc6e16de2f0b6439cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:6f:4a:0f:42:d0:da:a1:b0:02:09:1e:ad:3f:
48:c9:8c:fb:86:af:ee:16:a9:6d:77:2f:b3:f3:0a:
bb:47:d2:e8:61:5b:b3:a8:ce:c4:43:95:36:73:6c:
c7:ea:fa:32:1d:7a:b8:96:0f:f9:34:6f:cd:ba:35:
c4:5e:07:80:e7:96:1a:e0:32:d1:a1:e0:6f:ea:06:
8f:e5:1f:ff:d8:f1:36:49:b5:66:ec:13:d9:c2:37:
de:97:a9:37:06:75:ce:f6:06:76:7d:05:06:eb:73:
4c:bf:01:e0:e7:ad:c5:55:39:8e:94:24:4f:e2:ac:
48:f2:24:35:e5:79:1b:60:93:23:13:7f:2b:0e:11:
96:a6:7a:ab:1e:8f:ca:13:80:f3:e1:57:24:7d:53:
42:c9:7c:a6:48:63:53:74:8e:46:7a:9f:a9:aa:09:
71:76:48:a5:3a:fe:ed:99:ca:2a:a0:21:1c:6a:52:
b9:44:78:8f:51:09:43:e6:3d:c8:39:e5:a9:86:ac:
d7:bf:90:43:cd:2c:d5:49:5e:6c:cf:20:80:cf:f3:
4f:4b:c7:48:e4:8c:4e:4c:d5:eb:c8:d0:68:e7:40:
65:f1:f7:3a:86:9f:d9:82:04:45:36:84:89:e9:c3:
e1:64:36:8b:e5:6d:9a:48:5c:e0:96:b2:bc:a5:7c:
13:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:D6:47:CB:46:BB:F4:0B:93:E7:34:DC:6E:16:DE:2F:0B:64:39:CF
X509v3 Authority Key Identifier:
keyid:45:7A:A1:C7:8F:6C:CA:BC:47:B5:51:21:A3:5F:F3:0D:99:82:7E:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RXqhx49syrxHtVEho1_zDZmCfuk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/c5427b-5990-42ac-bc54-c740e2fe30d3/1/PdZHy0a79AuT5zTcbhbeLwtkOc8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/c5427b-5990-42ac-bc54-c740e2fe30d3/1/RXqhx49syrxHtVEho1_zDZmCfuk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.242.181.0/24
Signature Algorithm: sha256WithRSAEncryption
45:6a:bf:f0:90:1e:77:4e:af:c3:31:77:9d:fd:ed:10:05:12:
83:a9:79:44:c0:e3:25:d2:01:10:81:ed:32:18:52:09:a8:82:
fb:33:99:51:09:62:6b:bc:ad:e9:4a:e0:7d:ee:4e:57:04:3c:
f1:ed:c9:b1:5e:05:4c:d7:44:0d:df:65:33:af:7c:3d:bd:72:
b8:16:4f:64:3e:ef:45:49:b7:b9:59:1b:2e:0c:7f:c5:79:4f:
54:b7:c1:7d:04:e8:fd:6d:f4:4f:b8:90:9e:22:a4:3e:a4:c4:
dc:6a:3e:a8:25:a6:ff:44:96:ac:df:46:2d:8f:50:65:5f:76:
cf:10:83:49:3f:d3:1a:79:f1:ee:ba:bf:cf:2e:84:3d:68:7b:
08:cc:4c:1d:33:63:9d:5f:12:ff:7b:b6:ac:31:ba:af:d8:a7:
9c:2f:fe:84:7f:6a:2d:55:06:dc:90:67:1a:f1:2a:98:1c:43:
75:ac:75:58:d4:27:2f:6b:4d:dd:78:46:33:91:b3:f6:3e:9c:
93:0c:67:c1:30:f2:18:42:7d:5e:06:66:42:b2:39:f0:3c:7d:
16:6c:62:38:99:1d:c5:2d:57:20:e0:f9:ee:35:57:e5:14:a1:
12:a6:70:0c:a7:b3:46:6d:a2:a2:db:51:5b:9b:81:67:6e:6c:
c8:b1:2f:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 16:48:14 2024 by rpki-client on console-ams.rpki-client.org