Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/C4AQmhhVGLNirsyJAmzSPF6oCOQ.roa
File: C4AQmhhVGLNirsyJAmzSPF6oCOQ.roa (raw, json)
Hash identifier: Va1Dp8Kvud16++DyAnRgFX84tBg5PwSpMx95axrRgzo=
Subject key identifier: 0B:80:10:9A:18:55:18:B3:62:AE:CC:89:02:6C:D2:3C:5E:A8:08:E4
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 018CC26D28DC39B29CB53435C19307F2D53B
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/C4AQmhhVGLNirsyJAmzSPF6oCOQ.roa
Signing time: Mon 01 Jan 2024 00:29:42 +0000
ROA not before: Mon 01 Jan 2024 00:29:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60781
IP address blocks: 185.101.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:28:dc:39:b2:9c:b5:34:35:c1:93:07:f2:d5:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Jan 1 00:29:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0b80109a185518b362aecc89026cd23c5ea808e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:4a:73:ab:e1:f5:80:e5:c3:9e:94:50:d1:b3:
ac:0e:15:e5:6a:28:46:15:75:c4:cb:ae:ff:ae:73:
27:37:97:5c:27:af:8f:be:49:06:1d:d7:7f:db:7b:
be:92:64:0f:8f:28:f5:91:3f:7f:7b:3e:6a:7d:49:
d7:a3:00:06:ba:c7:74:81:1d:21:66:69:3e:dd:00:
4a:f8:7f:67:8d:ed:77:e0:d3:05:cf:6a:33:49:7f:
8c:36:f6:e9:33:02:9f:1e:42:21:d5:e9:a3:ec:eb:
85:03:95:c9:55:68:bc:fd:c0:cf:75:61:1e:c6:f7:
3f:09:18:60:b5:55:bf:ca:f5:aa:e9:6f:dc:23:14:
06:da:9d:73:7c:84:50:21:72:a9:96:cb:79:1c:d8:
49:c5:35:fd:d3:59:11:0a:f1:6b:3a:58:8c:01:f3:
33:39:b4:bc:c2:90:31:00:ce:e2:26:94:32:18:34:
93:5d:da:58:59:03:f5:7a:f1:e3:e6:6c:19:ce:71:
91:5a:95:77:99:34:a4:b7:3d:91:d3:1c:55:17:ae:
06:6b:f1:55:ed:a9:09:81:15:6a:6a:bb:f5:ef:ad:
99:d7:43:98:cc:3a:86:89:ad:1e:67:79:0f:7d:21:
5f:b9:5f:d9:ce:e2:cf:8b:89:05:58:18:f0:f7:5d:
3c:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:80:10:9A:18:55:18:B3:62:AE:CC:89:02:6C:D2:3C:5E:A8:08:E4
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/C4AQmhhVGLNirsyJAmzSPF6oCOQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.101.107.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:fc:1e:4f:72:6f:63:dc:42:c3:4f:17:3a:7f:3c:d7:11:b3:
70:f8:5b:70:42:1d:ff:bc:a9:fc:3b:9c:4b:b0:ed:0d:6e:b6:
01:ea:8a:15:63:f4:fa:ec:f7:7a:05:b7:a7:db:06:70:5e:fb:
df:35:11:3d:bc:2c:84:23:57:c2:59:6b:18:15:e0:9e:5c:38:
56:89:3c:f0:2b:b4:da:27:ef:fc:93:c9:15:69:aa:3e:fd:78:
59:5e:fc:0e:0d:6c:f8:b7:40:1a:eb:3a:24:d8:da:f1:96:41:
df:55:1e:16:fe:49:ca:8f:2b:66:52:60:bf:ca:38:41:6c:5a:
43:f7:b1:e0:9f:90:b9:a6:4d:3a:b3:78:4f:3d:12:24:19:12:
16:fb:f1:58:34:2c:e3:27:83:d1:1c:11:fc:c9:f2:07:4c:81:
ca:77:a5:15:02:07:50:0b:87:52:3d:17:c5:07:d1:a5:1f:b9:
95:6a:e4:d8:e0:f7:d1:83:5e:69:03:68:50:6a:c0:28:d0:a6:
55:a9:62:cf:ab:71:ee:4d:0f:c1:4e:25:e3:31:4c:bb:3e:20:
dd:9d:f9:7c:fb:08:4f:ec:dc:ea:82:0d:e2:8b:3f:c8:6c:32:
fb:57:8f:cc:20:2a:1a:c9:e2:c7:40:b5:7e:97:54:fd:61:39:
ad:a3:af:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 21:33:02 2024 by rpki-client on console-ams.rpki-client.org