Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/d56693-2254-4a3b-acbb-efaaff0a982f/1/nXdgSXUgZDCPCgyJHlSIyqenf5c.roa
File: nXdgSXUgZDCPCgyJHlSIyqenf5c.roa (raw, json)
Hash identifier: EQL858DDukSLJWgDEDN6D3sXERmKOKgoKtQGEejXVc4=
Subject key identifier: 9D:77:60:49:75:20:64:30:8F:0A:0C:89:1E:54:88:CA:A7:A7:7F:97
Certificate issuer: /CN=47d064fb3e541f23563065e48f300f2cfdfe009a
Certificate serial: 018CC348BA7C7FB8619F7440CC9253B085C8
Authority key identifier: 47:D0:64:FB:3E:54:1F:23:56:30:65:E4:8F:30:0F:2C:FD:FE:00:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R9Bk-z5UHyNWMGXkjzAPLP3-AJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/d56693-2254-4a3b-acbb-efaaff0a982f/1/nXdgSXUgZDCPCgyJHlSIyqenf5c.roa
Signing time: Mon 01 Jan 2024 04:29:32 +0000
ROA not before: Mon 01 Jan 2024 04:29:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31708
IP address blocks: 195.244.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/d56693-2254-4a3b-acbb-efaaff0a982f/1/R9Bk-z5UHyNWMGXkjzAPLP3-AJo.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/d56693-2254-4a3b-acbb-efaaff0a982f/1/R9Bk-z5UHyNWMGXkjzAPLP3-AJo.mft
rsync://rpki.ripe.net/repository/DEFAULT/R9Bk-z5UHyNWMGXkjzAPLP3-AJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Jun 2024 22:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:ba:7c:7f:b8:61:9f:74:40:cc:92:53:b0:85:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47d064fb3e541f23563065e48f300f2cfdfe009a
Validity
Not Before: Jan 1 04:29:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9d776049752064308f0a0c891e5488caa7a77f97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:c1:35:2a:c1:f0:6e:b3:72:21:80:ec:3c:20:
ea:ef:34:13:67:ff:9d:44:e5:dd:2a:6d:c4:da:eb:
bb:c8:ec:50:6d:20:5f:13:a3:05:87:b7:61:3d:f9:
80:66:fd:ed:6e:96:9f:16:7e:88:5f:a0:ab:c9:6e:
16:9d:57:76:e0:29:d1:55:87:bc:3a:ab:51:04:f9:
81:62:92:77:e4:a5:12:e0:9c:99:a3:67:f2:de:07:
67:a7:c0:0a:58:b3:4b:12:78:d8:c0:20:92:4c:17:
09:18:b3:8d:eb:1a:0f:ca:9b:99:46:5d:8a:2c:ea:
10:f2:03:b4:e9:d4:bb:45:8b:e7:e7:25:8c:ca:41:
1c:58:b4:7a:a4:1d:3a:f7:17:78:e4:94:04:60:56:
4f:e3:b6:25:5c:f2:d2:f8:13:fa:31:96:a8:5d:95:
47:f3:ed:93:80:fc:13:82:bd:0f:67:d7:7a:06:9a:
dd:cb:1d:a3:de:a3:ae:d6:99:44:8a:b0:e6:d5:de:
4b:51:2b:f1:e3:ef:64:e8:47:a3:4a:74:42:e0:55:
7a:e8:07:5a:c7:43:77:e6:95:11:29:4e:4c:9d:a4:
c5:c3:e4:c5:47:2b:e4:c8:77:9d:c1:75:0d:6f:fc:
3f:c5:72:23:c2:d8:23:12:21:77:24:f0:34:9f:cd:
2f:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:77:60:49:75:20:64:30:8F:0A:0C:89:1E:54:88:CA:A7:A7:7F:97
X509v3 Authority Key Identifier:
keyid:47:D0:64:FB:3E:54:1F:23:56:30:65:E4:8F:30:0F:2C:FD:FE:00:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R9Bk-z5UHyNWMGXkjzAPLP3-AJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d56693-2254-4a3b-acbb-efaaff0a982f/1/nXdgSXUgZDCPCgyJHlSIyqenf5c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d56693-2254-4a3b-acbb-efaaff0a982f/1/R9Bk-z5UHyNWMGXkjzAPLP3-AJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.244.29.0/24
Signature Algorithm: sha256WithRSAEncryption
67:03:e3:4d:d7:ce:61:92:4e:99:6c:7e:35:da:d1:83:9b:32:
3f:6d:43:12:1d:8d:6c:b7:6e:2a:f0:c7:c1:7d:ef:a9:ec:aa:
9f:04:b0:33:50:76:e2:64:bd:b4:06:15:22:a4:57:77:4a:ff:
68:f0:58:c4:3d:bd:a0:22:0d:fe:4d:80:91:50:a0:0f:28:46:
4c:37:dc:fd:91:5a:4a:46:7a:cd:20:43:9c:ae:62:d3:fa:d9:
45:b9:9e:87:04:8f:34:0e:3e:ce:cb:cb:c2:fb:aa:52:ad:eb:
85:7f:3f:8c:51:2b:5e:86:bb:e8:06:b9:2d:a9:76:1c:4b:f7:
a7:07:fe:dd:13:57:1b:8d:28:8d:c8:de:6a:be:c3:f4:d3:11:
cc:a4:29:b7:67:ce:53:de:af:8e:0c:97:ff:95:c6:31:8a:d9:
91:8c:9f:f5:a8:54:9d:fc:44:c5:19:5d:d8:c8:be:40:b0:4e:
61:27:7d:10:14:a7:54:82:2c:af:6c:f9:69:25:71:ea:ad:a5:
1c:ff:75:9b:e4:b7:3f:76:8c:af:89:4c:e4:05:8b:74:d9:8f:
f2:49:a7:08:f9:aa:f9:07:e0:02:ae:9f:61:f3:e2:fb:7e:8b:
f5:e4:27:5f:6d:48:b2:a7:ae:53:1c:2e:17:23:c0:df:f1:a6:
d5:cf:c4:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 23:35:59 2024 by rpki-client on console-ams.rpki-client.org