Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/8b01c2-ecbe-4f88-ae37-504c8fc220ea/1/ad1iy2nnmv2cc9OzFpvfFqinCl0.roa
File: ad1iy2nnmv2cc9OzFpvfFqinCl0.roa (raw, json)
Hash identifier: Dev5ngvZGX+jSlm582dyyHHcjXVJO1vIpJNqJQujcgo=
Subject key identifier: 69:DD:62:CB:69:E7:9A:FD:9C:73:D3:B3:16:9B:DF:16:A8:A7:0A:5D
Certificate issuer: /CN=0562d5a67b7a20f865e753163a6ed0e5f347e839
Certificate serial: 018CC7955A4FF089FD700BE04DBCC624432B
Authority key identifier: 05:62:D5:A6:7B:7A:20:F8:65:E7:53:16:3A:6E:D0:E5:F3:47:E8:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/8b01c2-ecbe-4f88-ae37-504c8fc220ea/1/ad1iy2nnmv2cc9OzFpvfFqinCl0.roa
Signing time: Tue 02 Jan 2024 00:31:43 +0000
ROA not before: Tue 02 Jan 2024 00:31:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6658
IP address blocks: 194.1.128.0/24 maxlen: 24
194.1.129.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/8b01c2-ecbe-4f88-ae37-504c8fc220ea/1/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/8b01c2-ecbe-4f88-ae37-504c8fc220ea/1/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.mft
rsync://rpki.ripe.net/repository/DEFAULT/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Jun 2024 01:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:5a:4f:f0:89:fd:70:0b:e0:4d:bc:c6:24:43:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0562d5a67b7a20f865e753163a6ed0e5f347e839
Validity
Not Before: Jan 2 00:31:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=69dd62cb69e79afd9c73d3b3169bdf16a8a70a5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:f5:d3:eb:f8:70:78:46:36:b2:16:2c:d5:03:
55:57:fc:d4:42:c1:e5:04:89:78:2e:24:90:9a:fc:
26:99:11:27:6f:53:b2:57:3d:1d:37:ed:5c:a5:dc:
a7:c5:8b:a3:6c:4f:5f:cc:09:b7:77:9d:60:96:ef:
53:9e:c8:33:f4:43:eb:29:7a:95:bd:bd:81:6d:49:
e7:3f:f7:81:fb:bb:5b:f9:ef:3d:b1:06:3a:34:74:
5b:3b:1b:5b:17:45:f3:db:aa:ac:b0:cf:e8:23:07:
8a:2d:16:73:f6:4c:e2:f9:22:60:f4:ea:0d:00:44:
43:5b:59:14:8f:cd:a6:fd:7f:04:7b:45:f8:70:56:
1b:b1:46:83:bc:a7:a7:03:4c:c8:9c:37:ce:c5:45:
ac:f7:f9:00:83:e6:6f:e8:43:51:80:ef:7f:d4:55:
d2:60:53:fd:17:b4:9f:02:ec:c1:c1:83:a9:e1:37:
26:30:a7:a8:ba:c4:38:2e:de:9d:79:1f:be:22:1d:
e1:0f:dd:1e:39:c4:a0:b7:93:ef:e0:1f:7f:2a:f5:
e5:ee:f5:ab:f2:e3:e2:fb:26:9d:8d:9a:f0:8f:8b:
40:dc:d2:97:68:c9:7d:52:f5:bc:cb:c0:b7:9a:29:
e9:6c:e4:40:da:c0:8e:67:ff:81:3e:6f:b0:c7:51:
31:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:DD:62:CB:69:E7:9A:FD:9C:73:D3:B3:16:9B:DF:16:A8:A7:0A:5D
X509v3 Authority Key Identifier:
keyid:05:62:D5:A6:7B:7A:20:F8:65:E7:53:16:3A:6E:D0:E5:F3:47:E8:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/8b01c2-ecbe-4f88-ae37-504c8fc220ea/1/ad1iy2nnmv2cc9OzFpvfFqinCl0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/8b01c2-ecbe-4f88-ae37-504c8fc220ea/1/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.1.128.0/23
Signature Algorithm: sha256WithRSAEncryption
77:af:03:75:0e:78:84:85:ad:c0:f3:db:4d:2e:9f:da:88:9f:
6b:23:d5:98:95:36:56:c2:2b:40:69:8c:00:4f:a5:95:ae:b8:
8b:38:5b:b4:d8:0a:b2:62:c8:ad:cf:57:ad:32:c3:d7:c5:67:
6a:38:47:17:18:75:6e:54:e9:8e:ec:5e:33:64:8c:8d:83:44:
cb:5d:9d:59:ec:cf:2a:f0:8c:a9:7e:f6:84:da:f1:65:af:8e:
82:1f:9a:a1:1b:e7:9e:9e:dd:4b:fe:09:d4:3c:7f:b0:c7:3e:
17:a1:7a:41:c0:fc:fd:01:dc:6e:41:8f:38:d6:05:f0:04:09:
e3:c8:4a:f3:73:10:1d:7d:20:e5:4d:28:92:dd:b4:40:52:1d:
1e:c4:e8:54:91:fa:57:f8:7d:d7:c7:02:fd:64:a9:16:1e:52:
a5:4d:a8:70:65:f3:d0:fb:9e:28:44:70:5f:3b:26:d9:ac:09:
e3:5c:0c:d8:6e:fa:24:c4:e7:b2:31:c6:23:74:92:70:9d:36:
68:77:3f:d9:69:1b:9d:f4:27:98:70:d7:8c:c9:d8:0d:28:98:
c6:05:86:63:18:78:a8:8c:d6:32:10:12:7f:ab:1a:ef:8a:c5:
f7:5b:25:f8:de:4b:ba:31:34:8e:91:d3:ca:76:84:d2:a9:34:
55:28:61:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 17 10:07:03 2024 by rpki-client on console-fra.rpki-client.org