Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/861c75-dd03-437b-9fc7-890522c6105b/1/cW_MgZcBQDd6ZvJaOHZ41q-9xtY.roa
File: cW_MgZcBQDd6ZvJaOHZ41q-9xtY.roa (raw, json)
Hash identifier: sqztEkR2giMgpo9x7axJnsYFdtWwIP1VN1f1POEIUJs=
Subject key identifier: 71:6F:CC:81:97:01:40:37:7A:66:F2:5A:38:76:78:D6:AF:BD:C6:D6
Certificate issuer: /CN=430a5648e1d46b662f4d1dcc066d39427c65f0d1
Certificate serial: 018CC348A5B6396F147F0E8461E7094F8470
Authority key identifier: 43:0A:56:48:E1:D4:6B:66:2F:4D:1D:CC:06:6D:39:42:7C:65:F0:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwpWSOHUa2YvTR3MBm05Qnxl8NE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/861c75-dd03-437b-9fc7-890522c6105b/1/cW_MgZcBQDd6ZvJaOHZ41q-9xtY.roa
Signing time: Mon 01 Jan 2024 04:29:27 +0000
ROA not before: Mon 01 Jan 2024 04:29:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2200
IP address blocks: 147.215.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/861c75-dd03-437b-9fc7-890522c6105b/1/QwpWSOHUa2YvTR3MBm05Qnxl8NE.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/861c75-dd03-437b-9fc7-890522c6105b/1/QwpWSOHUa2YvTR3MBm05Qnxl8NE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QwpWSOHUa2YvTR3MBm05Qnxl8NE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 09 Jun 2024 04:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:a5:b6:39:6f:14:7f:0e:84:61:e7:09:4f:84:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=430a5648e1d46b662f4d1dcc066d39427c65f0d1
Validity
Not Before: Jan 1 04:29:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=716fcc81970140377a66f25a387678d6afbdc6d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:db:e1:b2:08:37:73:3d:8f:ae:09:e5:0b:f6:
db:ee:55:b5:f4:d8:c2:0d:57:cb:ca:ad:45:05:eb:
bc:6f:27:a0:36:37:18:c5:22:7a:13:c3:b9:23:01:
5e:3c:4b:f8:49:b4:55:98:7b:6e:73:b5:f2:18:ae:
da:83:f1:a0:4a:55:08:77:8e:3d:98:4d:6a:c5:00:
6c:93:50:a9:63:7f:ff:65:2e:bd:1b:9a:d4:4a:5e:
22:91:80:29:02:0d:7e:4b:b9:a2:76:c0:9b:07:19:
77:3c:20:19:70:82:86:5c:6e:34:13:30:6f:d2:f4:
a3:fa:f6:06:1f:54:04:d5:b2:8e:a0:aa:1b:7d:ee:
7f:d3:b8:ef:67:c3:0e:57:ef:c4:35:84:07:97:4e:
8a:57:31:57:54:a4:b9:b3:8e:e0:08:93:98:52:fe:
cc:08:db:5c:62:44:87:15:19:d4:76:97:a7:e1:e9:
f2:b8:f2:7d:ee:9b:0e:7d:af:da:c3:b7:e0:ae:f7:
e7:13:05:11:0d:cc:22:67:73:4c:66:74:91:92:b9:
fe:76:58:36:51:ca:be:35:b5:75:6e:1e:c5:06:7e:
c4:e6:f9:be:40:9c:ae:d2:dc:52:55:d5:4e:46:2f:
c6:64:22:a7:94:38:bc:ea:ab:3d:10:00:d5:9e:ce:
58:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:6F:CC:81:97:01:40:37:7A:66:F2:5A:38:76:78:D6:AF:BD:C6:D6
X509v3 Authority Key Identifier:
keyid:43:0A:56:48:E1:D4:6B:66:2F:4D:1D:CC:06:6D:39:42:7C:65:F0:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwpWSOHUa2YvTR3MBm05Qnxl8NE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/861c75-dd03-437b-9fc7-890522c6105b/1/cW_MgZcBQDd6ZvJaOHZ41q-9xtY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/861c75-dd03-437b-9fc7-890522c6105b/1/QwpWSOHUa2YvTR3MBm05Qnxl8NE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.215.0.0/16
Signature Algorithm: sha256WithRSAEncryption
55:af:7d:52:85:66:b9:e5:10:2a:c1:19:c7:79:51:1a:7e:21:
c1:de:0b:91:0a:9a:ae:61:da:b3:fa:26:af:0c:7e:ad:c7:ac:
9c:75:7b:7a:4c:9d:91:5f:2f:34:5c:61:64:ae:ad:17:b0:dd:
5a:8e:76:82:6d:b5:41:59:d3:ce:02:f3:8e:fb:bb:83:8c:8f:
9c:cd:dc:27:61:5e:c7:e8:76:66:31:01:b4:0e:4f:24:8b:9c:
3a:08:cb:ba:aa:98:df:77:a0:5d:88:3e:0e:40:15:8d:c7:6a:
11:b5:85:e2:a2:dc:eb:32:c2:4d:ad:d6:6c:49:16:43:ab:45:
ee:53:2d:93:42:d9:e8:79:24:88:b9:0c:16:3d:31:8a:f6:0e:
26:45:f2:46:d1:0a:98:0f:fc:ec:89:c8:72:27:d6:6d:54:86:
dc:36:ca:0e:ad:61:e9:ea:4b:0f:74:7b:73:7f:5d:88:3c:5a:
58:1d:d5:c0:ae:81:60:f6:ca:1b:10:1f:12:c2:16:7a:3e:d2:
95:11:8c:95:82:f1:3d:da:55:20:d5:1c:40:03:b8:31:ed:46:
03:be:be:29:05:66:eb:f4:4b:dd:ed:d4:df:f0:aa:dd:bd:73:
10:89:97:ab:c4:07:94:e7:7d:74:55:67:f5:cc:73:fa:57:c5:
ac:97:7b:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 09:45:51 2024 by rpki-client on console-fra.rpki-client.org