Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/3a5258-989d-400b-b7b7-454c93c065a0/1/aNw7RphYrcET8rUdg1vnUXMk84I.roa
File: aNw7RphYrcET8rUdg1vnUXMk84I.roa (raw, json)
Hash identifier: Am1nAEsFUi7djWtEscMChAudrTP0klFcSN3TojBdnKo=
Subject key identifier: 68:DC:3B:46:98:58:AD:C1:13:F2:B5:1D:83:5B:E7:51:73:24:F3:82
Certificate issuer: /CN=d4edb5f6de72436148b35a59037f2334150ddb36
Certificate serial: 018CC80111CF0FFD9608E954F8E6EA104AB5
Authority key identifier: D4:ED:B5:F6:DE:72:43:61:48:B3:5A:59:03:7F:23:34:15:0D:DB:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1O219t5yQ2FIs1pZA38jNBUN2zY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/3a5258-989d-400b-b7b7-454c93c065a0/1/aNw7RphYrcET8rUdg1vnUXMk84I.roa
Signing time: Tue 02 Jan 2024 02:29:22 +0000
ROA not before: Tue 02 Jan 2024 02:29:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 559
IP address blocks: 153.109.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/3a5258-989d-400b-b7b7-454c93c065a0/1/1O219t5yQ2FIs1pZA38jNBUN2zY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/3a5258-989d-400b-b7b7-454c93c065a0/1/1O219t5yQ2FIs1pZA38jNBUN2zY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1O219t5yQ2FIs1pZA38jNBUN2zY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 May 2024 22:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:11:cf:0f:fd:96:08:e9:54:f8:e6:ea:10:4a:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4edb5f6de72436148b35a59037f2334150ddb36
Validity
Not Before: Jan 2 02:29:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=68dc3b469858adc113f2b51d835be7517324f382
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b0:1a:47:69:21:d0:ed:a4:fb:a1:f5:c7:cb:
8b:4b:43:77:05:a1:f3:d6:ac:c1:56:b0:c8:2f:e9:
b5:15:88:cb:e7:03:0a:12:73:2a:e5:39:78:fb:ac:
8e:f8:05:2b:52:19:ab:0a:a0:af:50:35:0b:da:63:
62:79:18:90:f0:78:d1:3e:5e:25:92:62:6a:d4:68:
a3:59:ab:ab:c0:86:77:1d:e4:b9:5d:80:0e:0d:fa:
4b:13:93:e5:6c:b0:29:28:a0:98:1e:c8:35:52:ad:
db:55:70:55:a4:9f:8a:91:7c:a9:0a:09:4a:c4:ec:
80:bd:9d:3c:12:b9:cf:59:5c:fb:f9:df:d2:09:d8:
7b:11:66:80:e0:24:3f:01:4f:60:46:cc:f0:c3:8b:
84:86:aa:3e:02:93:c6:7d:2f:70:92:74:57:b8:af:
d1:93:30:94:1d:17:4e:c3:3b:7f:52:e3:13:10:17:
75:2c:18:2e:4b:e9:ea:4d:8d:82:08:66:22:70:e0:
9d:fa:82:6b:ca:ad:bb:b6:e3:00:2f:eb:ce:08:11:
fb:4e:e2:3c:4e:26:60:3b:a2:bd:57:a7:50:8a:be:
86:93:98:2d:39:55:45:ca:54:e7:af:1b:2d:0b:aa:
71:27:e9:48:ad:49:b7:28:2a:a2:11:25:90:21:30:
d0:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:DC:3B:46:98:58:AD:C1:13:F2:B5:1D:83:5B:E7:51:73:24:F3:82
X509v3 Authority Key Identifier:
keyid:D4:ED:B5:F6:DE:72:43:61:48:B3:5A:59:03:7F:23:34:15:0D:DB:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1O219t5yQ2FIs1pZA38jNBUN2zY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3a5258-989d-400b-b7b7-454c93c065a0/1/aNw7RphYrcET8rUdg1vnUXMk84I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3a5258-989d-400b-b7b7-454c93c065a0/1/1O219t5yQ2FIs1pZA38jNBUN2zY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.109.0.0/16
Signature Algorithm: sha256WithRSAEncryption
84:b4:27:f5:bc:03:3b:ad:71:ed:90:f6:2a:5d:91:ed:14:c0:
c8:86:80:f9:5f:ce:81:3d:bf:a4:8f:6c:ab:89:37:15:42:a5:
27:4e:f0:73:b8:85:36:4e:62:b4:1a:01:3b:e6:f8:c5:69:20:
66:ba:2b:a1:ed:d0:48:2a:f2:c8:06:dc:4e:e1:29:a9:f8:54:
85:cd:67:29:28:61:f0:38:b6:bb:4e:93:78:f4:aa:1e:a9:a0:
4d:a6:6f:fd:8e:54:7b:8f:71:ea:17:9d:34:2f:35:fd:8f:ff:
f1:b9:cc:62:9a:19:01:51:a2:be:af:da:3b:11:d1:3d:c6:de:
19:5b:9d:2d:69:41:93:a8:19:c0:29:46:f5:c5:d9:83:28:f7:
bd:de:25:cc:6f:32:ea:d8:a2:ee:67:db:aa:7e:fb:2f:69:8e:
ec:7b:7a:1a:57:d9:79:14:69:4e:d8:bb:53:e0:19:0f:68:bf:
43:75:3c:d7:42:75:fa:a4:7c:83:f1:7d:2b:05:47:16:c4:fc:
32:ca:c9:42:b5:f2:42:42:1f:aa:34:11:49:8c:3a:03:d8:9c:
f1:9e:95:55:ce:b1:c5:bf:1a:fd:fb:3a:83:2a:7f:26:d0:2a:
75:f3:4c:28:0b:c3:35:39:56:b9:8f:ee:4e:9e:36:46:19:f7:
f5:b9:7c:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 29 01:40:44 2024 by rpki-client on console-fra.rpki-client.org