Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/8c7247-8592-44ae-82b1-100e5b65e672/1/RR_JQeKjYdkmSVLljsuM3hRmqTE.roa
File: RR_JQeKjYdkmSVLljsuM3hRmqTE.roa (raw, json)
Hash identifier: p3V4dUKsCVdXsxiwET9FolTAd/1n/28I5jRXZnWpYa4=
Subject key identifier: 45:1F:C9:41:E2:A3:61:D9:26:49:52:E5:8E:CB:8C:DE:14:66:A9:31
Certificate issuer: /CN=5babcaa10a336072ebc0820a6df0bfa4dc5cfdaa
Certificate serial: 018CC424A00DC9F1EF7BA68DB3A74E2246F8
Authority key identifier: 5B:AB:CA:A1:0A:33:60:72:EB:C0:82:0A:6D:F0:BF:A4:DC:5C:FD:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W6vKoQozYHLrwIIKbfC_pNxc_ao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/8c7247-8592-44ae-82b1-100e5b65e672/1/RR_JQeKjYdkmSVLljsuM3hRmqTE.roa
Signing time: Mon 01 Jan 2024 08:29:43 +0000
ROA not before: Mon 01 Jan 2024 08:29:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15580
IP address blocks: 194.34.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/8c7247-8592-44ae-82b1-100e5b65e672/1/W6vKoQozYHLrwIIKbfC_pNxc_ao.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/8c7247-8592-44ae-82b1-100e5b65e672/1/W6vKoQozYHLrwIIKbfC_pNxc_ao.mft
rsync://rpki.ripe.net/repository/DEFAULT/W6vKoQozYHLrwIIKbfC_pNxc_ao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Jun 2024 13:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:a0:0d:c9:f1:ef:7b:a6:8d:b3:a7:4e:22:46:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5babcaa10a336072ebc0820a6df0bfa4dc5cfdaa
Validity
Not Before: Jan 1 08:29:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=451fc941e2a361d9264952e58ecb8cde1466a931
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:51:19:21:8e:7f:15:5d:4e:71:31:4b:ea:d6:
b1:cd:3b:1f:14:88:7b:6f:9f:73:f0:63:37:c3:1d:
95:43:f8:8a:19:26:c0:a9:88:3d:63:6b:28:9b:70:
0c:0e:6b:eb:8e:e5:b5:40:0f:15:a5:27:e5:af:f9:
b9:17:e0:7e:54:f7:db:ca:2c:39:8a:b3:9a:ed:81:
f9:1e:a0:40:55:ad:79:1c:46:a1:78:5c:9b:63:76:
cb:85:24:63:62:0f:1d:6e:3c:05:09:66:f5:4f:ce:
f0:d8:46:cd:58:f8:83:d7:b7:15:99:80:9e:7b:9b:
48:14:3b:2f:7d:7d:69:95:6e:3c:52:90:f0:f9:4f:
be:6b:b3:48:d4:00:b0:9a:a7:b4:ec:7b:06:8c:6e:
30:4a:39:61:b5:77:e2:46:eb:93:89:4d:9d:49:39:
81:30:26:bd:39:a7:fa:20:8e:b6:13:d1:c8:95:a9:
92:e0:c5:11:37:36:76:f3:7d:0c:de:84:a2:f7:b0:
43:c8:06:cd:29:1b:11:f3:d2:fa:d4:ad:84:7a:39:
41:c8:73:99:68:1b:55:f7:91:71:8f:01:e2:35:c7:
fc:c2:29:ff:fc:95:70:d8:90:a4:c1:50:9c:38:26:
3a:ba:70:03:01:85:07:f7:bd:66:3f:e9:5b:ff:b4:
57:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:1F:C9:41:E2:A3:61:D9:26:49:52:E5:8E:CB:8C:DE:14:66:A9:31
X509v3 Authority Key Identifier:
keyid:5B:AB:CA:A1:0A:33:60:72:EB:C0:82:0A:6D:F0:BF:A4:DC:5C:FD:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W6vKoQozYHLrwIIKbfC_pNxc_ao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/8c7247-8592-44ae-82b1-100e5b65e672/1/RR_JQeKjYdkmSVLljsuM3hRmqTE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/8c7247-8592-44ae-82b1-100e5b65e672/1/W6vKoQozYHLrwIIKbfC_pNxc_ao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.34.174.0/24
Signature Algorithm: sha256WithRSAEncryption
08:7c:5d:fa:ba:de:cf:b9:a2:48:e5:ce:3f:0f:43:38:92:c9:
f4:77:44:53:58:76:c6:5f:d5:12:82:72:29:d0:bd:82:78:22:
ed:31:5d:34:9d:62:7a:c1:22:ff:5d:a2:8b:40:c6:0a:14:01:
bf:ac:2e:f7:d6:c7:1f:e1:82:d9:a0:10:95:e3:f4:52:0e:8f:
6e:d1:4a:5c:37:b7:10:e1:bb:d3:a7:11:d8:1a:e2:39:0e:5d:
17:0b:9f:46:2e:1c:ab:0f:74:89:39:e2:f5:6d:70:f3:a1:95:
6b:9e:85:ac:f3:ec:a6:d7:67:8f:be:4d:13:5a:66:0b:46:32:
e1:27:2f:3c:3f:c3:a8:94:1c:01:24:8b:0f:16:08:4d:80:d0:
f4:17:b3:3f:1d:8b:43:26:77:04:e7:14:c2:e8:52:72:47:01:
13:78:43:4f:b4:cf:91:72:49:4b:01:f1:d4:53:1d:25:5f:c6:
7c:1b:d9:85:ae:81:9c:7b:2e:a1:9c:0c:1f:20:49:43:2d:fb:
ff:5a:88:bd:b1:ac:ab:28:34:f5:50:40:81:cf:60:fb:77:4b:
b0:96:46:bd:ca:79:d2:db:96:45:b8:36:55:65:26:25:f3:63:
17:d6:9c:01:ec:6d:b6:90:7d:76:d9:af:10:68:f4:60:9e:a0:
00:7c:cd:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 20:10:10 2024 by rpki-client on console-fra.rpki-client.org