Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/81f76f-d878-44a1-82c7-2ccb5f0c5f6b/1/g3wiDdTjBfWA47qMLCSn-ixRljk.roa
File: g3wiDdTjBfWA47qMLCSn-ixRljk.roa (raw, json)
Hash identifier: twjvZlgPPNur+Huco3xZ2NeLYCUnOHH1TSaWxdeT2VM=
Subject key identifier: 83:7C:22:0D:D4:E3:05:F5:80:E3:BA:8C:2C:24:A7:FA:2C:51:96:39
Certificate issuer: /CN=5ab25a6c392b8e67a3ad21f60fd3311d6b7f1e5c
Certificate serial: 019217D6D723D49CD1EE653673F903A0E618
Authority key identifier: 5A:B2:5A:6C:39:2B:8E:67:A3:AD:21:F6:0F:D3:31:1D:6B:7F:1E:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WrJabDkrjmejrSH2D9MxHWt_Hlw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/81f76f-d878-44a1-82c7-2ccb5f0c5f6b/1/g3wiDdTjBfWA47qMLCSn-ixRljk.roa
Signing time: Sun 22 Sep 2024 03:46:48 +0000
ROA not before: Sun 22 Sep 2024 03:46:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41737
IP address blocks: 194.145.220.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/81f76f-d878-44a1-82c7-2ccb5f0c5f6b/1/WrJabDkrjmejrSH2D9MxHWt_Hlw.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/81f76f-d878-44a1-82c7-2ccb5f0c5f6b/1/WrJabDkrjmejrSH2D9MxHWt_Hlw.mft
rsync://rpki.ripe.net/repository/DEFAULT/WrJabDkrjmejrSH2D9MxHWt_Hlw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:17:d6:d7:23:d4:9c:d1:ee:65:36:73:f9:03:a0:e6:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ab25a6c392b8e67a3ad21f60fd3311d6b7f1e5c
Validity
Not Before: Sep 22 03:46:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=837c220dd4e305f580e3ba8c2c24a7fa2c519639
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:a2:be:17:c8:f2:65:43:2c:d3:8a:23:0f:e4:
af:69:65:16:17:70:2e:5f:7b:04:50:c8:21:d8:8e:
fd:c2:4b:cd:ab:2e:e4:c9:cc:5e:57:78:7c:64:b2:
bb:63:60:30:f5:11:cb:f4:c6:06:33:c2:77:35:c0:
00:22:cd:90:7d:f4:4a:34:d6:f4:6d:7a:ad:66:11:
0d:d4:a3:97:b6:71:5c:35:00:f2:36:33:c4:05:72:
ad:36:ad:0c:c2:3f:d1:84:b0:0e:a7:e7:78:f1:56:
be:a9:a9:f5:81:94:81:08:0f:cc:df:85:0d:6c:a9:
4a:be:8e:52:b9:ad:02:fe:2a:71:09:61:1b:48:df:
62:3f:d8:75:b0:f3:85:dd:df:2c:e4:35:25:92:3a:
56:56:ff:6d:76:10:7b:17:bc:be:de:ce:c3:87:32:
67:34:38:70:58:51:f9:74:a9:9e:9e:96:a6:76:44:
78:00:14:3d:f0:9b:d4:85:88:7b:e2:25:0a:86:bb:
6e:86:fb:72:24:a0:7d:74:c0:22:c4:c4:84:1d:97:
cb:f0:6d:3f:a9:95:05:ec:94:67:aa:9b:ed:33:00:
02:4b:f6:23:ac:16:58:33:a3:fc:82:41:9d:3b:66:
b6:c5:fe:74:49:8b:be:82:68:80:53:6c:aa:60:30:
49:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:7C:22:0D:D4:E3:05:F5:80:E3:BA:8C:2C:24:A7:FA:2C:51:96:39
X509v3 Authority Key Identifier:
keyid:5A:B2:5A:6C:39:2B:8E:67:A3:AD:21:F6:0F:D3:31:1D:6B:7F:1E:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WrJabDkrjmejrSH2D9MxHWt_Hlw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/81f76f-d878-44a1-82c7-2ccb5f0c5f6b/1/g3wiDdTjBfWA47qMLCSn-ixRljk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/81f76f-d878-44a1-82c7-2ccb5f0c5f6b/1/WrJabDkrjmejrSH2D9MxHWt_Hlw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.145.220.0/23
Signature Algorithm: sha256WithRSAEncryption
04:41:12:40:5e:bb:b0:51:53:72:90:42:da:8d:68:d0:d6:72:
8b:a8:fd:fd:21:71:ad:9f:37:b7:e3:b0:3f:fd:ad:07:60:d3:
c5:91:14:2b:e0:fa:b3:f7:3d:2f:34:70:94:35:05:f6:b0:cd:
25:5a:ea:6b:01:2f:58:68:d7:31:50:02:df:66:67:03:3b:d7:
bb:24:76:ae:00:8d:b0:7d:61:be:51:3d:81:d7:b7:4f:33:d1:
84:5c:eb:50:41:06:8a:4d:db:f4:a4:36:92:76:0f:23:03:ed:
2f:4b:b9:ee:94:62:a3:0c:d9:a5:51:f9:3d:78:c0:57:4f:30:
1e:7e:ac:4c:86:5c:d7:16:ea:91:1b:01:5b:73:a3:44:d2:2a:
02:e6:1c:88:c5:50:e6:0d:15:bc:d5:89:e4:1e:d3:46:da:1a:
ff:e1:0a:b8:22:b2:be:a9:77:86:8a:9a:68:ca:c3:08:cf:13:
04:77:1c:fd:31:21:67:de:49:3a:f6:ec:2a:14:f8:9b:a3:9b:
1e:26:f0:ab:cc:74:3f:8b:75:9f:90:47:2b:65:fa:d4:cd:e5:
1a:7d:1e:bf:8f:98:46:f1:37:a7:07:0f:70:30:4b:e7:d2:1b:
6d:e9:84:3e:ec:85:12:fb:ae:de:ec:83:52:d4:b1:55:92:a6:
c9:34:ca:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:41:30 2024 by rpki-client on console-ams.rpki-client.org