Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/3e6687-7a44-40d8-993f-895a5a392438/1/Am-Mq_jh6QaSQCkQIgDeBlKVMZk.roa
File: Am-Mq_jh6QaSQCkQIgDeBlKVMZk.roa (raw, json)
Hash identifier: iLZ/Yo3/X17+ae1J+Er5MSikvV8W7Atz10feP/Rkqrw=
Subject key identifier: 02:6F:8C:AB:F8:E1:E9:06:92:40:29:10:22:00:DE:06:52:95:31:99
Certificate issuer: /CN=3df8a40c6a2c6993c9fbe81df3ea7dd372f96dec
Certificate serial: 018CC49395027A32F81D6D0D4141DE35BF78
Authority key identifier: 3D:F8:A4:0C:6A:2C:69:93:C9:FB:E8:1D:F3:EA:7D:D3:72:F9:6D:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PfikDGosaZPJ--gd8-p903L5bew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/3e6687-7a44-40d8-993f-895a5a392438/1/Am-Mq_jh6QaSQCkQIgDeBlKVMZk.roa
Signing time: Mon 01 Jan 2024 10:30:55 +0000
ROA not before: Mon 01 Jan 2024 10:30:55 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7029
IP address blocks: 195.238.128.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/3e6687-7a44-40d8-993f-895a5a392438/1/PfikDGosaZPJ--gd8-p903L5bew.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/3e6687-7a44-40d8-993f-895a5a392438/1/PfikDGosaZPJ--gd8-p903L5bew.mft
rsync://rpki.ripe.net/repository/DEFAULT/PfikDGosaZPJ--gd8-p903L5bew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:95:02:7a:32:f8:1d:6d:0d:41:41:de:35:bf:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3df8a40c6a2c6993c9fbe81df3ea7dd372f96dec
Validity
Not Before: Jan 1 10:30:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=026f8cabf8e1e906924029102200de0652953199
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:42:44:e6:08:09:05:79:66:6f:d0:6c:32:c6:
2d:89:b8:90:fc:3b:03:b7:fa:34:e2:1e:d0:f5:01:
72:a4:1a:ad:0a:96:68:d7:2a:a3:58:38:2c:12:16:
c3:f8:7c:19:38:22:3c:47:9c:89:9d:2b:4e:f0:19:
9c:92:39:fa:0e:bc:29:52:e1:d1:6d:c8:47:06:c9:
c0:a2:eb:2b:da:5d:3a:d3:fa:10:67:72:31:fc:ea:
33:50:ce:1f:cb:d8:7b:8f:bd:f5:47:33:53:f6:36:
1b:4e:19:c5:41:ca:c8:a0:4e:2a:36:3b:1a:30:63:
29:9d:c6:d8:f0:cc:78:b3:87:24:b5:55:74:f2:0f:
66:e4:2c:df:8d:26:5f:16:0b:78:71:bc:ab:67:6e:
4b:bd:2e:be:58:36:6a:b2:35:fe:d5:04:ba:0d:15:
27:25:a6:92:e9:bd:dc:f3:ed:3d:01:8c:3f:1e:92:
6e:ac:4f:23:92:32:9c:25:d6:43:b6:fd:ab:0c:68:
b4:2d:5e:09:90:51:31:cc:9b:87:31:19:29:42:de:
5c:1d:93:ab:5c:f6:45:f9:dc:96:56:4d:ce:c4:6a:
17:71:26:3a:cb:fd:34:d2:d5:9a:87:05:31:5f:4a:
70:72:30:ca:9d:94:ee:07:54:41:ce:ae:82:ea:d0:
fe:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:6F:8C:AB:F8:E1:E9:06:92:40:29:10:22:00:DE:06:52:95:31:99
X509v3 Authority Key Identifier:
keyid:3D:F8:A4:0C:6A:2C:69:93:C9:FB:E8:1D:F3:EA:7D:D3:72:F9:6D:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PfikDGosaZPJ--gd8-p903L5bew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/3e6687-7a44-40d8-993f-895a5a392438/1/Am-Mq_jh6QaSQCkQIgDeBlKVMZk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/3e6687-7a44-40d8-993f-895a5a392438/1/PfikDGosaZPJ--gd8-p903L5bew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.238.128.0/20
Signature Algorithm: sha256WithRSAEncryption
2a:fc:b1:05:5f:ed:e1:88:d8:83:5b:56:33:d5:d7:2b:08:67:
ed:f0:04:3b:f6:b6:40:4f:94:83:d4:aa:51:68:0a:df:5e:58:
50:94:af:f5:70:58:8f:cc:7d:1d:20:eb:b4:c0:21:db:b4:32:
05:25:53:c5:94:d2:07:8f:37:84:44:f2:2f:ac:51:4f:29:1c:
fd:e0:57:cd:46:ce:5b:e8:e7:20:e4:54:b9:c1:d2:8b:a9:4f:
3f:4f:80:00:16:92:24:f9:9f:ce:db:9f:ad:ad:2e:c9:e1:0f:
82:47:98:06:b5:c0:ff:f9:db:7e:14:88:9b:36:10:94:6f:8b:
04:76:c8:d2:b6:db:75:49:d7:48:00:71:25:52:1a:eb:76:45:
4d:0d:57:e4:5e:29:08:de:df:bc:05:b3:05:8b:01:de:d2:46:
cf:f1:86:26:78:7c:18:3d:08:7c:6a:fe:61:d3:4e:87:0a:f7:
f6:15:14:22:b6:f7:cd:1d:60:5f:fa:66:f3:cb:df:30:c7:e8:
40:0f:1b:bc:59:30:b9:4d:d4:aa:5c:48:58:9a:d3:c4:b2:13:
5b:6c:1d:4d:6b:ff:fc:f8:84:fe:fa:c6:c2:14:35:38:71:3e:
ec:25:d2:b7:95:4e:9c:7e:f9:78:15:8f:a2:a6:af:e9:7d:74:
e2:51:ee:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 23:24:50 2024 by rpki-client on console-ams.rpki-client.org