Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/afe373-e5bc-4010-8ad6-6aab2b1b922c/1/JDoi2wvcJ5jpxfzWAziL_QG9_1E.roa
File: JDoi2wvcJ5jpxfzWAziL_QG9_1E.roa (raw, json)
Hash identifier: cV6raQ+lqWJ2zuWqmq3bL4K1p1kt1zZFxeNFNGsxvJ8=
Subject key identifier: 24:3A:22:DB:0B:DC:27:98:E9:C5:FC:D6:03:38:8B:FD:01:BD:FF:51
Certificate issuer: /CN=6fa86d1c1676a59a46acf37336192e985cff0e5b
Certificate serial: 018CC5DC2ACFEA17367BA9F3888CB63819B4
Authority key identifier: 6F:A8:6D:1C:16:76:A5:9A:46:AC:F3:73:36:19:2E:98:5C:FF:0E:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b6htHBZ2pZpGrPNzNhkumFz_Dls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/afe373-e5bc-4010-8ad6-6aab2b1b922c/1/JDoi2wvcJ5jpxfzWAziL_QG9_1E.roa
Signing time: Mon 01 Jan 2024 16:29:49 +0000
ROA not before: Mon 01 Jan 2024 16:29:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208924
IP address blocks: 45.14.172.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/afe373-e5bc-4010-8ad6-6aab2b1b922c/1/b6htHBZ2pZpGrPNzNhkumFz_Dls.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/afe373-e5bc-4010-8ad6-6aab2b1b922c/1/b6htHBZ2pZpGrPNzNhkumFz_Dls.mft
rsync://rpki.ripe.net/repository/DEFAULT/b6htHBZ2pZpGrPNzNhkumFz_Dls.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Jun 2024 22:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:2a:cf:ea:17:36:7b:a9:f3:88:8c:b6:38:19:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fa86d1c1676a59a46acf37336192e985cff0e5b
Validity
Not Before: Jan 1 16:29:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=243a22db0bdc2798e9c5fcd603388bfd01bdff51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:4e:10:ad:a5:8f:59:f8:15:83:25:4f:da:0b:
b2:89:e0:81:ce:2e:24:0d:d1:1c:d3:b6:9e:e6:9d:
54:29:17:b3:40:6b:f9:c7:e7:94:f2:03:66:63:3b:
98:00:ed:11:e3:00:ec:26:eb:28:2f:c4:68:91:f0:
c2:1d:07:bf:22:4e:82:f5:3f:18:72:f6:9e:7d:70:
f5:46:32:61:88:4d:9c:b3:0a:4f:24:0b:e3:51:6c:
77:69:1c:55:96:a5:11:54:0c:89:30:56:db:1d:9e:
1a:69:72:79:cc:fc:80:1e:b3:50:2f:b5:b1:f9:b9:
fa:c4:d4:17:68:10:e8:b9:fd:58:2a:07:ca:6c:70:
9f:3c:d2:91:d8:50:e8:43:76:e9:97:7c:68:e9:30:
f8:69:3f:9a:e3:3f:6b:78:7d:66:eb:ff:79:41:49:
ff:11:74:d4:53:3c:50:fb:6a:eb:46:e7:68:04:c4:
0d:67:d6:06:d7:f1:76:cb:01:2b:1d:a5:96:f6:59:
ea:ee:5d:17:48:57:d6:d9:54:77:22:00:56:90:0b:
59:e8:0b:67:75:f7:81:9c:2d:ac:b6:fd:de:10:33:
85:e6:3f:ab:d1:ff:36:81:c1:df:a5:2a:3d:08:1f:
2d:f1:97:f6:23:1c:6a:73:1a:e0:e9:eb:8e:ed:ca:
ec:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:3A:22:DB:0B:DC:27:98:E9:C5:FC:D6:03:38:8B:FD:01:BD:FF:51
X509v3 Authority Key Identifier:
keyid:6F:A8:6D:1C:16:76:A5:9A:46:AC:F3:73:36:19:2E:98:5C:FF:0E:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6htHBZ2pZpGrPNzNhkumFz_Dls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/afe373-e5bc-4010-8ad6-6aab2b1b922c/1/JDoi2wvcJ5jpxfzWAziL_QG9_1E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/afe373-e5bc-4010-8ad6-6aab2b1b922c/1/b6htHBZ2pZpGrPNzNhkumFz_Dls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.14.172.0/24
Signature Algorithm: sha256WithRSAEncryption
90:a6:d6:ab:19:79:09:0b:5c:37:ad:4e:4d:5f:7c:cc:ed:d9:
40:f5:b0:ee:d8:1d:62:27:40:c0:68:9b:c8:d1:10:3a:ef:d2:
df:2f:ae:5c:b9:bc:a0:57:9d:1b:66:31:0b:c3:88:46:0f:f9:
66:01:3b:c5:29:29:f1:0d:59:b5:75:6c:04:92:fa:20:12:16:
ed:29:60:3e:be:c7:90:85:d6:02:4f:33:8d:07:ee:b8:49:1d:
dd:ea:90:01:51:20:bc:e8:6c:d6:b7:8b:68:c1:bc:0b:79:a9:
b4:30:2b:5a:58:e5:c5:f1:a4:c0:c4:59:c5:22:98:ac:35:a0:
07:9f:b9:f3:ac:2b:be:68:2f:a6:8a:db:aa:21:08:ec:db:1e:
dd:ae:c3:ab:7b:f5:87:ce:c7:7b:a1:03:0e:9b:32:54:95:94:
dd:44:5a:64:85:61:06:bf:86:29:81:c9:0d:87:10:91:b0:e3:
6e:48:f1:81:c9:c3:e5:30:31:31:b0:a9:14:86:f3:5e:90:79:
02:7e:d7:5a:6a:1e:e3:b4:d3:e5:a6:46:ef:ba:55:1c:a0:2c:
0c:30:c6:36:53:53:48:06:e2:cd:f4:39:4b:73:c4:67:3a:48:
18:7b:38:51:47:bc:0d:48:b3:88:c1:66:28:e3:0f:7c:11:98:
fd:e2:2f:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 18 04:48:22 2024 by rpki-client on console-fra.rpki-client.org