Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/f94f78-f262-4207-8f18-8df8af3001bc/1/cKi4Su0ZnxWGfMeae5X6_qMLvPY.roa
File: cKi4Su0ZnxWGfMeae5X6_qMLvPY.roa (raw, json)
Hash identifier: ZliTu0vnGmMSraLk6W/Wt9M3KUcyAObs9cpkSJU+FYQ=
Subject key identifier: 70:A8:B8:4A:ED:19:9F:15:86:7C:C7:9A:7B:95:FA:FE:A3:0B:BC:F6
Certificate issuer: /CN=38506d80ab592de7be0a331bbf4fa0068d41408a
Certificate serial: 018CC3495C7A2BB2650DDA245705A12926F0
Authority key identifier: 38:50:6D:80:AB:59:2D:E7:BE:0A:33:1B:BF:4F:A0:06:8D:41:40:8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OFBtgKtZLee-CjMbv0-gBo1BQIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/f94f78-f262-4207-8f18-8df8af3001bc/1/cKi4Su0ZnxWGfMeae5X6_qMLvPY.roa
Signing time: Mon 01 Jan 2024 04:30:13 +0000
ROA not before: Mon 01 Jan 2024 04:30:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34501
IP address blocks: 194.105.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/f94f78-f262-4207-8f18-8df8af3001bc/1/OFBtgKtZLee-CjMbv0-gBo1BQIo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/f94f78-f262-4207-8f18-8df8af3001bc/1/OFBtgKtZLee-CjMbv0-gBo1BQIo.mft
rsync://rpki.ripe.net/repository/DEFAULT/OFBtgKtZLee-CjMbv0-gBo1BQIo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:5c:7a:2b:b2:65:0d:da:24:57:05:a1:29:26:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38506d80ab592de7be0a331bbf4fa0068d41408a
Validity
Not Before: Jan 1 04:30:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=70a8b84aed199f15867cc79a7b95fafea30bbcf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:1d:61:27:bf:98:dc:76:3c:68:a0:1f:3a:6b:
89:7e:aa:ed:d1:0c:fe:fa:bc:97:d3:13:ae:3c:30:
d8:bb:20:3c:27:7c:9f:f4:1b:57:ba:3a:8a:3f:b5:
fe:e5:11:40:96:30:8b:0b:f3:90:59:c9:5d:5a:26:
95:8b:c9:64:cf:d8:b2:2e:4c:72:69:8f:f1:0a:95:
d0:86:2b:db:7a:4f:ff:fc:1f:98:b2:12:62:39:d3:
e7:74:5b:8d:c0:8e:fb:5c:1e:15:83:c8:14:cd:68:
a3:0d:d0:10:fe:b4:40:5c:fa:c8:52:11:ef:41:c4:
9c:8b:cd:a9:c5:30:82:e5:35:4c:b0:68:3a:c0:f5:
ff:47:2e:b4:5c:c6:28:d4:1d:7e:2f:7c:ec:a9:eb:
61:0b:c5:a1:e7:70:ea:4c:67:ce:e6:91:3c:58:6d:
2b:aa:c0:c8:00:1e:b1:c2:fc:93:3f:13:49:4b:2f:
87:cc:79:d8:15:83:4f:8f:50:07:bc:08:9e:73:f5:
52:bf:ed:0d:bb:f2:5a:b8:19:c9:64:0f:ff:81:3d:
e7:3b:c5:6a:68:f2:ec:17:4e:e7:7f:ff:3f:e0:d5:
30:1e:62:e0:14:98:80:1d:f4:66:3c:24:de:30:94:
83:af:76:1c:73:37:c1:ad:9c:d2:19:f1:ea:0a:91:
6f:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:A8:B8:4A:ED:19:9F:15:86:7C:C7:9A:7B:95:FA:FE:A3:0B:BC:F6
X509v3 Authority Key Identifier:
keyid:38:50:6D:80:AB:59:2D:E7:BE:0A:33:1B:BF:4F:A0:06:8D:41:40:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OFBtgKtZLee-CjMbv0-gBo1BQIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/f94f78-f262-4207-8f18-8df8af3001bc/1/cKi4Su0ZnxWGfMeae5X6_qMLvPY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/f94f78-f262-4207-8f18-8df8af3001bc/1/OFBtgKtZLee-CjMbv0-gBo1BQIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.105.142.0/24
Signature Algorithm: sha256WithRSAEncryption
30:ed:a1:3b:28:16:e5:1a:1b:7e:01:66:f5:ef:af:be:02:e3:
61:97:05:87:2b:5c:6a:c0:9f:27:db:d9:9a:ce:bc:ca:96:36:
c9:af:6b:e9:34:5c:d2:ec:46:0f:9a:40:9f:ac:0d:af:78:f3:
2d:e3:6e:40:f1:05:61:44:2e:2e:c2:1e:62:99:35:4f:05:a2:
d4:13:f8:3b:70:30:59:8d:32:10:a8:24:4f:9a:50:f4:64:62:
c2:26:85:1c:9e:0c:8f:ca:04:29:da:3d:29:b9:9f:e7:96:00:
81:c5:5a:92:1c:f3:6f:01:11:1f:95:09:51:dd:04:f2:c7:3b:
88:87:37:75:62:b1:8e:b7:fb:f9:ac:eb:d0:f9:e3:a5:21:bc:
ea:d6:20:99:27:de:f1:28:8b:08:c1:85:d8:9c:46:74:bd:a4:
6e:e9:2d:98:45:e6:58:2c:5d:c5:c5:2b:df:c1:cd:33:98:ac:
71:0a:7a:b9:77:c0:f7:df:af:f5:61:eb:88:d3:3b:2c:ae:b9:
c8:bd:13:99:db:e6:8c:37:da:88:91:c3:ba:00:ed:b4:61:e5:
ac:b2:4a:89:d4:d8:b2:ad:e9:03:da:87:74:13:a2:e6:89:44:
8e:31:93:e3:00:2b:b3:59:17:39:8e:be:03:27:80:b6:dd:9f:
65:5d:8f:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:15:29 2024 by rpki-client on console-ams.rpki-client.org