Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/34wKC6qczoShaiF9v8M-QbITZWE.roa
File: 34wKC6qczoShaiF9v8M-QbITZWE.roa (raw, json)
Hash identifier: ayMvOsqoK+2LKCrBjo+2GY7/OO0O/vklIbEh+D/6SPE=
Subject key identifier: DF:8C:0A:0B:AA:9C:CE:84:A1:6A:21:7D:BF:C3:3E:41:B2:13:65:61
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01931C344D551BCF52199F3D7807BF7A4F92
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/34wKC6qczoShaiF9v8M-QbITZWE.roa
Signing time: Mon 11 Nov 2024 17:10:09 +0000
ROA not before: Mon 11 Nov 2024 17:10:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213877
IP address blocks: 150.241.105.0/24 maxlen: 24
150.241.108.0/24 maxlen: 24
150.241.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 11:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:1c:34:4d:55:1b:cf:52:19:9f:3d:78:07:bf:7a:4f:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Nov 11 17:10:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=df8c0a0baa9cce84a16a217dbfc33e41b2136561
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:97:e9:3c:91:c9:55:81:eb:c2:5d:22:de:ee:
d4:b3:4b:f5:cd:eb:5d:d5:d1:1a:5c:f9:ad:69:c0:
21:3a:48:54:08:b9:85:8b:b0:4f:3b:b2:a8:c1:dd:
a8:c5:4f:95:7f:14:4b:19:c8:15:a6:94:ac:4c:eb:
4a:ce:24:56:8e:2a:2e:de:11:cf:d2:6e:08:f3:b3:
d2:4c:f4:22:0c:cb:73:90:bd:3b:a7:d0:c1:b8:5f:
43:91:c7:b9:3f:c8:33:c6:07:5d:c4:01:32:d4:47:
69:b8:89:56:9d:8e:40:12:6c:47:28:ca:22:66:c9:
dd:d6:1a:c4:c9:45:e4:96:5a:e5:f4:d9:80:44:53:
8f:b4:11:d0:02:24:f5:c1:48:a6:fb:35:12:08:9e:
27:9a:58:59:26:3c:82:6d:91:c3:73:f9:a8:31:e6:
62:79:71:7c:3d:ae:70:33:6b:4b:64:8d:e5:cf:1f:
12:ee:4a:5f:42:eb:3b:dc:dc:30:71:17:62:29:1e:
10:17:59:32:e4:b0:a1:58:84:03:29:18:05:c9:2f:
e2:a4:03:9f:a1:9c:fe:57:12:d7:61:48:64:d7:37:
1e:03:6a:fb:e2:49:8f:7d:6d:a2:a6:56:c2:03:c6:
c3:18:8b:44:e7:9e:30:eb:43:f5:60:1f:07:c0:34:
2c:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:8C:0A:0B:AA:9C:CE:84:A1:6A:21:7D:BF:C3:3E:41:B2:13:65:61
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/34wKC6qczoShaiF9v8M-QbITZWE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.241.105.0/24
150.241.108.0/24
150.241.123.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:6b:ab:d0:a3:62:6d:6e:0d:f7:90:84:f4:bf:ac:36:45:18:
c7:53:7e:58:cf:ff:a1:f2:30:26:78:2d:e5:9a:c5:a4:9f:c4:
4e:2c:ba:80:9b:8a:dd:ca:95:21:7c:cd:93:95:e6:06:90:4c:
dc:83:06:cf:88:b4:34:6e:26:e8:3c:54:a5:04:f5:88:62:a5:
40:ab:ab:8e:fa:f6:73:d9:7a:4b:9e:ec:bf:83:11:1b:48:90:
53:70:86:47:5f:ab:78:e4:d4:52:7b:88:b6:ac:c1:12:32:bc:
fb:eb:5b:77:b4:31:99:f6:e3:7e:9b:44:9c:02:a0:87:8f:c0:
25:ce:f1:e8:46:17:23:b2:7c:82:7c:b8:34:cd:98:50:2e:24:
91:dd:f8:6f:43:23:0c:98:b8:ae:8e:b0:cb:5d:39:34:cb:09:
e0:50:25:70:20:a3:ce:60:22:a3:c2:34:a8:d0:09:cb:4d:ec:
62:35:02:cb:b9:93:1a:b7:4b:78:14:af:e8:7e:fe:67:2a:21:
1a:37:6d:bc:76:e2:74:75:48:1f:cc:0b:16:ed:d9:1e:db:c2:
50:d5:1f:ea:01:58:18:43:81:a0:20:76:f8:c0:ed:6c:77:ff:
ed:65:2d:b0:17:5f:6f:6b:fe:b5:f7:be:ff:9b:32:18:fd:2d:
16:a4:14:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:57:42 2024 by rpki-client on console-ams.rpki-client.org