Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/4040ee-07bd-43c4-8508-0583941eea71/1/3IO0DjWIjN2_fM8CJP-ojUVynfQ.roa
File: 3IO0DjWIjN2_fM8CJP-ojUVynfQ.roa (raw, json)
Hash identifier: Kd2BvN9smka8KBqmwAAS/5i1BthruxBYKf/X6z3Om14=
Subject key identifier: DC:83:B4:0E:35:88:8C:DD:BF:7C:CF:02:24:FF:A8:8D:45:72:9D:F4
Certificate issuer: /CN=bf5ebfe458c8990700f04c01b1132e3a37623de5
Certificate serial: 018CC5008027194920D2EC71D11ED893D121
Authority key identifier: BF:5E:BF:E4:58:C8:99:07:00:F0:4C:01:B1:13:2E:3A:37:62:3D:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v16_5FjImQcA8EwBsRMuOjdiPeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/4040ee-07bd-43c4-8508-0583941eea71/1/3IO0DjWIjN2_fM8CJP-ojUVynfQ.roa
Signing time: Mon 01 Jan 2024 12:29:53 +0000
ROA not before: Mon 01 Jan 2024 12:29:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 1103
IP address blocks: 131.224.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/4040ee-07bd-43c4-8508-0583941eea71/1/v16_5FjImQcA8EwBsRMuOjdiPeU.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/4040ee-07bd-43c4-8508-0583941eea71/1/v16_5FjImQcA8EwBsRMuOjdiPeU.mft
rsync://rpki.ripe.net/repository/DEFAULT/v16_5FjImQcA8EwBsRMuOjdiPeU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:80:27:19:49:20:d2:ec:71:d1:1e:d8:93:d1:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf5ebfe458c8990700f04c01b1132e3a37623de5
Validity
Not Before: Jan 1 12:29:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dc83b40e35888cddbf7ccf0224ffa88d45729df4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:1f:b3:46:e6:39:c5:2e:a2:2a:ed:be:63:22:
44:8e:bf:85:8d:9a:93:13:cb:57:c2:f6:da:32:32:
59:87:64:ad:2f:40:d6:f1:81:8f:37:96:47:20:e3:
81:e1:f2:8d:6c:4e:82:59:dc:24:5e:e6:8e:c2:0b:
26:9d:a7:e4:6b:ed:e7:0a:a5:d2:01:1b:29:d6:a4:
cf:79:36:f3:77:4e:52:7e:21:dd:08:5f:a6:ce:3c:
6d:2e:00:90:8d:d7:72:1d:0c:b8:13:61:07:45:46:
59:c2:86:87:e6:80:a1:be:0e:98:30:18:25:55:5f:
d3:9c:88:03:04:3e:42:08:47:e6:69:3e:35:ba:cf:
f7:5b:4a:c9:da:3d:0e:ec:e5:97:0a:cd:61:ac:5f:
a0:1f:4f:0e:41:e4:17:ad:f4:93:15:4e:68:01:35:
5d:ff:14:85:55:0d:55:3e:ee:58:14:19:4e:7c:c8:
50:f8:cc:08:ce:90:6e:a1:4b:90:6b:b2:9f:e6:50:
04:47:71:84:03:5c:53:e2:1a:58:8d:aa:2c:62:65:
a9:b4:a7:7e:0c:45:60:a7:fa:30:68:42:23:0e:9c:
27:92:1c:ff:1f:ea:d6:6b:f3:4d:c6:9d:c8:4b:8a:
f4:9a:40:9f:b1:19:42:27:16:f4:ff:ef:db:85:05:
7d:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:83:B4:0E:35:88:8C:DD:BF:7C:CF:02:24:FF:A8:8D:45:72:9D:F4
X509v3 Authority Key Identifier:
keyid:BF:5E:BF:E4:58:C8:99:07:00:F0:4C:01:B1:13:2E:3A:37:62:3D:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v16_5FjImQcA8EwBsRMuOjdiPeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/4040ee-07bd-43c4-8508-0583941eea71/1/3IO0DjWIjN2_fM8CJP-ojUVynfQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/4040ee-07bd-43c4-8508-0583941eea71/1/v16_5FjImQcA8EwBsRMuOjdiPeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.224.0.0/16
Signature Algorithm: sha256WithRSAEncryption
56:22:86:c0:69:a7:22:a9:1f:96:99:40:75:f2:6d:95:9f:a2:
92:de:c6:de:be:46:62:0e:cf:3a:b1:58:4c:b6:43:ef:5f:b3:
45:06:79:0a:3f:c8:f3:8e:8d:cb:1d:25:d7:15:d6:6e:96:6f:
c2:b3:2f:23:ed:a9:e0:be:ce:10:0d:45:bd:df:6b:cd:f3:dc:
ca:89:20:db:5a:48:bd:86:56:92:fd:4e:8f:7d:64:8c:1d:c4:
05:7e:80:f0:58:6d:13:c0:dc:36:51:d6:cd:5b:12:b7:c7:7e:
db:03:dd:59:07:b1:2c:bc:3d:aa:32:f2:52:2d:77:3d:8e:4e:
89:48:34:8e:10:0f:e6:a4:27:97:72:7e:30:36:69:35:72:3b:
ab:d4:47:b7:e4:23:5c:45:00:0e:23:cf:b5:03:0b:84:f0:d7:
1c:ed:72:42:26:ea:67:4f:8f:0f:3b:25:de:a4:12:79:fb:b4:
8a:ac:6b:4b:76:aa:cc:01:5f:a7:1b:1c:ae:34:44:08:8a:60:
6f:9d:b9:86:89:95:74:fc:12:54:70:c9:6b:0f:1f:53:48:6b:
87:34:cc:1d:1f:c0:77:f8:55:10:1f:86:12:29:77:c7:ba:b4:
3d:fd:64:be:6e:cd:7e:58:a7:b8:1c:ea:07:bb:4b:c6:88:d4:
4c:a6:32:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 20:12:46 2024 by rpki-client on console-ams.rpki-client.org