Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/ClM8BBlcSfOEIJEW6B2bFlcdFtI.roa
File: ClM8BBlcSfOEIJEW6B2bFlcdFtI.roa (raw, json)
Hash identifier: 0tYWznCDvmHGBoUhdxe1z5ox8EgWu8jKLO+Kf+ar6vk=
Subject key identifier: 0A:53:3C:04:19:5C:49:F3:84:20:91:16:E8:1D:9B:16:57:1D:16:D2
Certificate issuer: /CN=1c7ad7754795ddd605f28838bb7cc359df7a266a
Certificate serial: 018F0FAF2A83081F91421725EC56AEE4A07A
Authority key identifier: 1C:7A:D7:75:47:95:DD:D6:05:F2:88:38:BB:7C:C3:59:DF:7A:26:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/ClM8BBlcSfOEIJEW6B2bFlcdFtI.roa
Signing time: Wed 24 Apr 2024 10:38:08 +0000
ROA not before: Wed 24 Apr 2024 10:38:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 400909
IP address blocks: 194.59.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.mft
rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 May 2024 11:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:0f:af:2a:83:08:1f:91:42:17:25:ec:56:ae:e4:a0:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c7ad7754795ddd605f28838bb7cc359df7a266a
Validity
Not Before: Apr 24 10:38:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0a533c04195c49f384209116e81d9b16571d16d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:d0:01:70:fb:b6:05:96:c3:a9:6f:29:70:68:
8f:17:7e:ea:98:c8:42:57:29:59:3f:5a:11:28:e9:
73:e2:a4:d5:32:df:13:07:21:2b:41:b3:61:aa:3c:
6e:34:41:6d:4a:5a:09:fd:59:d7:8b:e2:e3:bf:ec:
5e:f9:85:78:c5:92:d2:ce:8b:e8:6b:18:d9:a1:3f:
d9:93:bd:4b:66:3b:74:ad:e4:f5:26:ca:51:c5:8f:
c4:11:c2:f7:7d:f8:c9:ea:18:da:99:bb:83:5d:d4:
31:b1:b4:37:68:0b:b1:72:cc:94:4a:b4:17:c7:d4:
5d:bc:07:38:aa:7d:e0:5b:d2:dc:f0:80:de:99:13:
10:58:45:4b:cf:97:e3:fc:9f:54:1d:9d:a6:36:c9:
89:40:4e:ba:95:d3:65:97:c2:d6:3d:73:11:f1:21:
16:2e:2d:7a:22:b9:0b:d9:c0:8a:a3:e1:1a:63:19:
a5:bc:ad:39:03:64:f7:df:34:2a:b1:00:48:fb:c5:
f2:3f:ec:a2:40:04:c8:d9:89:49:9e:5e:10:87:ef:
f0:4e:ad:79:54:38:73:08:c2:c0:af:2c:13:db:43:
0a:cd:9a:66:2d:d7:fb:23:23:d8:26:57:93:a4:26:
52:0c:a7:fe:0f:42:8c:e2:7d:41:69:b8:90:82:10:
0d:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:53:3C:04:19:5C:49:F3:84:20:91:16:E8:1D:9B:16:57:1D:16:D2
X509v3 Authority Key Identifier:
keyid:1C:7A:D7:75:47:95:DD:D6:05:F2:88:38:BB:7C:C3:59:DF:7A:26:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/ClM8BBlcSfOEIJEW6B2bFlcdFtI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.59.9.0/24
Signature Algorithm: sha256WithRSAEncryption
25:0f:3d:40:60:2b:a0:f9:dd:7b:0e:b8:52:1d:2e:1c:5e:d1:
fb:d5:6a:b6:98:5d:23:ad:6c:30:44:f5:b7:59:ed:97:d9:a3:
b9:5b:ba:25:ed:cd:27:32:9d:d3:90:56:7b:43:32:2c:ed:a1:
3e:5c:ce:bc:a0:1e:d9:a1:20:a7:d3:cf:dc:33:c6:20:e6:58:
5a:cf:c9:59:6c:2f:98:4f:0a:be:e7:40:90:f1:63:69:b0:49:
b7:ae:92:6a:a3:a5:e8:2a:35:07:55:8d:dc:32:ac:66:16:7c:
82:f2:d3:d9:e4:1e:18:40:e2:43:45:46:23:49:55:71:c9:7e:
c6:97:1f:c2:d7:cb:fa:dd:c7:bd:2f:87:23:00:09:d0:a9:11:
0d:03:63:b6:0e:d2:d1:cb:78:eb:82:f8:4e:ce:07:14:0e:3d:
69:19:df:47:99:f9:26:89:b7:43:52:cb:e5:b3:99:8e:92:cf:
6a:cf:b1:f6:86:82:b8:13:37:86:bd:47:fb:46:11:3c:b5:30:
46:aa:02:80:03:47:19:1f:ff:17:1e:1e:61:33:90:4b:0f:8b:
c1:2d:67:e6:59:9c:a4:16:09:ff:11:16:9a:6c:0d:a4:36:56:
3c:cf:da:d1:51:70:6a:0e:1d:a5:f4:c2:a2:f7:79:7c:d6:53:
cc:8f:7e:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 14:41:36 2024 by rpki-client on console-ams.rpki-client.org