Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/70c477-a8cd-4a72-b669-1f93c239a012/1/1qYTN_wDHrjUeD-rRp5Pv9Kmh-w.roa
File: 1qYTN_wDHrjUeD-rRp5Pv9Kmh-w.roa (raw, json)
Hash identifier: 7A2/V1rFRQM/cUQaD6Hq6Q/iJqb0/iaIWIrI4i1rFQg=
Subject key identifier: D6:A6:13:37:FC:03:1E:B8:D4:78:3F:AB:46:9E:4F:BF:D2:A6:87:EC
Certificate issuer: /CN=1bd2d463ae15346d5edd7937b8bfa8e09b14376d
Certificate serial: 018CC649B232EEAA8A4D9FB6AED77DE2DAB4
Authority key identifier: 1B:D2:D4:63:AE:15:34:6D:5E:DD:79:37:B8:BF:A8:E0:9B:14:37:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G9LUY64VNG1e3Xk3uL-o4JsUN20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/70c477-a8cd-4a72-b669-1f93c239a012/1/1qYTN_wDHrjUeD-rRp5Pv9Kmh-w.roa
Signing time: Mon 01 Jan 2024 18:29:27 +0000
ROA not before: Mon 01 Jan 2024 18:29:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211270
IP address blocks: 194.61.34.0/23 maxlen: 23
194.61.34.0/24 maxlen: 24
194.61.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/70c477-a8cd-4a72-b669-1f93c239a012/1/G9LUY64VNG1e3Xk3uL-o4JsUN20.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/70c477-a8cd-4a72-b669-1f93c239a012/1/G9LUY64VNG1e3Xk3uL-o4JsUN20.mft
rsync://rpki.ripe.net/repository/DEFAULT/G9LUY64VNG1e3Xk3uL-o4JsUN20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:49:b2:32:ee:aa:8a:4d:9f:b6:ae:d7:7d:e2:da:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bd2d463ae15346d5edd7937b8bfa8e09b14376d
Validity
Not Before: Jan 1 18:29:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d6a61337fc031eb8d4783fab469e4fbfd2a687ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:05:0a:76:02:17:59:45:86:78:8e:8e:c7:b2:
53:36:5a:0b:86:2e:bc:8e:e7:87:47:e4:67:da:a9:
00:fb:5b:bc:e2:ef:1b:b4:d4:c6:cd:3a:14:2b:82:
02:65:53:e1:c4:66:bd:b7:79:d2:58:bc:bb:3c:c1:
f8:f8:97:f1:bf:9b:29:06:8d:7f:22:b3:92:a3:ee:
9d:1f:7b:27:6e:63:e6:c5:7c:69:b6:5f:86:9c:eb:
db:8e:6f:04:48:19:a2:55:0f:5a:3f:dc:41:26:25:
2b:38:8a:35:e9:58:8b:f4:8b:7d:04:73:fc:1f:7f:
2d:9f:54:ae:ab:7a:d0:23:d9:fb:d6:a9:67:a6:53:
4b:f9:c1:17:ae:6c:3a:40:69:a3:b6:60:bd:f0:63:
1f:70:a0:0d:a8:ca:dc:aa:94:48:f3:74:13:59:80:
70:1a:a1:9e:84:a1:d3:e4:67:fa:34:96:54:e8:39:
9b:f8:d1:e4:90:6c:4a:33:ac:6e:10:d0:ad:f9:05:
8f:a6:ac:ba:5d:28:c0:af:c8:ea:e2:a6:ca:59:62:
c5:fe:23:db:b1:98:a9:b6:d5:0e:d4:e2:7c:ae:b6:
72:60:24:1b:02:bc:81:aa:53:12:69:31:44:47:fa:
92:99:36:e4:78:da:01:19:cb:2b:05:ad:bc:8e:c1:
bb:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:A6:13:37:FC:03:1E:B8:D4:78:3F:AB:46:9E:4F:BF:D2:A6:87:EC
X509v3 Authority Key Identifier:
keyid:1B:D2:D4:63:AE:15:34:6D:5E:DD:79:37:B8:BF:A8:E0:9B:14:37:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G9LUY64VNG1e3Xk3uL-o4JsUN20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/70c477-a8cd-4a72-b669-1f93c239a012/1/1qYTN_wDHrjUeD-rRp5Pv9Kmh-w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/70c477-a8cd-4a72-b669-1f93c239a012/1/G9LUY64VNG1e3Xk3uL-o4JsUN20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.61.34.0/23
Signature Algorithm: sha256WithRSAEncryption
66:24:3b:ce:78:ca:87:cb:59:41:bb:81:b3:1a:d1:43:12:95:
b1:3e:f7:fc:ed:58:0e:1d:10:ad:38:37:1b:12:c8:2a:65:73:
9c:e2:a1:8d:d5:fc:b0:3b:a4:34:d3:be:93:a8:03:48:62:58:
a1:32:55:42:d3:2d:61:11:4f:ab:53:02:10:6f:c1:9d:23:a3:
2a:79:5d:b2:ea:1d:97:64:35:49:88:01:67:68:f4:83:20:36:
2b:20:bb:f7:02:83:00:54:85:97:9f:ca:08:77:c1:6a:0f:6b:
79:e6:e4:90:d8:05:f0:68:16:67:40:c1:06:da:a8:c8:0f:9a:
0e:f5:05:3c:4f:52:97:ae:56:cd:b9:ea:a2:ae:f9:2e:b2:86:
63:e6:3f:29:b3:3a:86:6f:ad:cb:d2:ed:f0:c4:a3:3f:13:d1:
bd:28:93:52:55:b0:96:ef:69:b2:5a:b8:7e:3a:03:2b:8d:a8:
6d:c7:bd:7d:e2:6e:19:ee:a6:43:c7:90:5b:73:d6:97:b6:8a:
d3:ad:5b:58:d6:77:74:ea:6c:06:d2:0f:80:95:a6:fb:3e:e8:
cd:f7:19:4a:6b:43:ab:bc:63:d2:b9:89:25:c5:2c:b0:1b:e6:
d1:8d:98:a8:d7:73:c5:75:f7:29:a7:af:f0:d4:24:44:82:92:
b6:94:ae:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 15:10:22 2024 by rpki-client on console-fra.rpki-client.org