Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/aDojIrdnZeJN1-3vwkIJmjOknLU.roa
File: aDojIrdnZeJN1-3vwkIJmjOknLU.roa (raw, json)
Hash identifier: 3PjkTD/irKx2kOykKRsXjewpJnXbl07PPP00ffpmH/Y=
Subject key identifier: 68:3A:23:22:B7:67:65:E2:4D:D7:ED:EF:C2:42:09:9A:33:A4:9C:B5
Certificate issuer: /CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
Certificate serial: 018CC9BCB54FC1FD0B494471C830857C9AD2
Authority key identifier: 30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/aDojIrdnZeJN1-3vwkIJmjOknLU.roa
Signing time: Tue 02 Jan 2024 10:33:56 +0000
ROA not before: Tue 02 Jan 2024 10:33:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2134
IP address blocks: 195.76.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.mft
rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:b5:4f:c1:fd:0b:49:44:71:c8:30:85:7c:9a:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
Validity
Not Before: Jan 2 10:33:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=683a2322b76765e24dd7edefc242099a33a49cb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:fd:59:e2:68:0f:62:2d:7b:c8:20:8b:ba:bd:
6f:1c:9a:19:05:eb:ef:cf:50:1d:1e:3a:cd:12:ad:
28:64:d8:9e:11:75:86:8d:0f:2b:75:5f:ef:81:62:
d8:e1:1c:40:e3:0f:da:07:c5:95:04:34:42:f2:28:
ce:45:e7:cf:4d:f4:3c:02:0a:a0:bb:66:c9:6b:8c:
bf:14:9f:0e:ce:10:2d:80:ae:48:02:f2:05:53:40:
e7:39:01:2d:68:d3:d8:8f:6c:dc:f1:15:bf:6c:f5:
0f:53:cf:16:1f:ed:13:4f:bf:8b:07:2a:58:d1:1a:
87:47:31:25:91:b9:93:30:0d:b8:e5:ce:a9:5a:df:
c9:8b:f1:67:e8:89:fa:92:01:b3:fa:fd:22:4a:43:
a1:c2:6c:84:4c:0d:92:73:f1:3e:6a:6f:13:86:ae:
1d:5a:32:f7:f0:74:35:9d:a8:49:46:b9:b0:b7:45:
f5:7f:1d:1c:06:13:16:08:a1:3f:cb:b1:da:f1:59:
de:5d:75:b4:02:1d:78:5f:b5:eb:bd:1c:16:61:71:
bf:e1:43:df:9a:49:3b:05:ec:e7:0c:76:80:e7:08:
2c:a4:ec:f2:7f:95:13:e3:b2:e7:f3:bb:6e:bc:5d:
5c:86:48:58:41:2f:dd:c6:1d:a0:03:60:12:69:e0:
ab:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:3A:23:22:B7:67:65:E2:4D:D7:ED:EF:C2:42:09:9A:33:A4:9C:B5
X509v3 Authority Key Identifier:
keyid:30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/aDojIrdnZeJN1-3vwkIJmjOknLU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.76.19.0/24
Signature Algorithm: sha256WithRSAEncryption
61:64:7f:cb:e6:f7:2c:54:aa:2d:22:61:c4:36:c3:11:5c:13:
93:f6:2c:71:4f:d3:50:d8:2e:95:6c:91:dc:d8:9d:8d:04:23:
82:5e:f3:0e:49:73:7f:f9:bb:13:32:5a:08:29:0e:fb:6a:b3:
e7:4f:60:64:16:a8:94:58:33:f9:89:da:a6:12:40:4b:74:c9:
7c:67:4c:38:63:f1:20:94:0a:07:1e:47:d3:57:62:54:78:39:
fb:dd:6e:d0:33:b4:1a:ed:7e:95:b4:08:65:34:1c:1c:5a:73:
ae:33:0e:18:67:99:99:45:82:2a:e7:37:54:1d:14:4c:a8:e1:
94:39:3c:f4:ec:2e:b4:3e:ae:f6:60:81:8c:55:8a:88:95:61:
25:74:12:2c:e0:8b:7c:b3:60:0e:fc:d9:9a:eb:a3:5f:f1:8f:
9a:b9:1d:c4:2d:96:cc:57:4c:6b:60:c9:b7:bf:3f:3c:bf:3c:
88:b0:fb:cc:42:aa:ef:19:fa:f1:1c:4d:c4:7a:32:f8:35:b3:
00:c7:10:96:fc:cc:f2:6f:43:88:8e:e3:db:8a:7d:d3:64:da:
cf:53:e9:6e:b0:87:32:ac:f8:37:69:78:f2:a6:3e:f2:1a:43:
cf:eb:d2:2b:01:72:91:c7:7c:29:86:9b:3b:37:87:31:6d:02:
68:dd:31:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 16:57:58 2024 by rpki-client on console-ams.rpki-client.org