Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Du42pXhS6iRBznn-ntDFO4s5Dj0.roa
File: Du42pXhS6iRBznn-ntDFO4s5Dj0.roa (raw, json)
Hash identifier: GlELSh+lLrEHwBClistQxAz7XH/PcnAfPRuT08/O0kU=
Subject key identifier: 0E:EE:36:A5:78:52:EA:24:41:CE:79:FE:9E:D0:C5:3B:8B:39:0E:3D
Certificate issuer: /CN=5a6f9295521df30a158f506ba7cb873ab9529dc3
Certificate serial: 018CC348FB13A41ECB2BCA9CC947891DE56F
Authority key identifier: 5A:6F:92:95:52:1D:F3:0A:15:8F:50:6B:A7:CB:87:3A:B9:52:9D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Du42pXhS6iRBznn-ntDFO4s5Dj0.roa
Signing time: Mon 01 Jan 2024 04:29:49 +0000
ROA not before: Mon 01 Jan 2024 04:29:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199399
IP address blocks: 185.1.123.0/24 maxlen: 24
176.126.38.0/24 maxlen: 24
195.130.66.0/24 maxlen: 24
195.251.247.0/24 maxlen: 24
2001:648:20f0::/48 maxlen: 48
2001:7f8:6e::/48 maxlen: 48
2001:7f8:ce::/48 maxlen: 48
2001:648:2cef::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Wm-SlVId8woVj1Brp8uHOrlSncM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Wm-SlVId8woVj1Brp8uHOrlSncM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 02 Jul 2024 01:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:fb:13:a4:1e:cb:2b:ca:9c:c9:47:89:1d:e5:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a6f9295521df30a158f506ba7cb873ab9529dc3
Validity
Not Before: Jan 1 04:29:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0eee36a57852ea2441ce79fe9ed0c53b8b390e3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:44:53:b9:b0:12:1c:80:6a:d0:14:cb:c6:c2:
a1:09:24:b2:b4:e8:0c:67:54:d4:82:5d:a7:ab:68:
d0:81:c1:f0:ea:bf:71:12:3a:84:f5:57:14:a2:3f:
04:50:01:14:42:a7:88:32:3a:4f:85:65:5f:13:ca:
ea:47:8a:22:17:66:47:4e:41:e9:64:04:81:ff:9f:
7c:01:f2:ef:5d:b5:d9:cd:eb:6c:ae:91:14:56:26:
7c:b4:31:77:e4:f6:7e:f4:63:5a:b6:4f:b5:e9:93:
43:77:56:db:7f:ed:9f:73:68:8e:a4:f2:8b:38:13:
75:9e:fc:f8:d6:aa:a0:bc:c7:65:b5:a7:a7:8d:2e:
e6:8a:db:75:83:fe:04:84:39:8f:38:ae:90:ea:3a:
a7:44:ff:16:b8:97:d3:7c:93:47:fe:06:8a:46:e8:
a5:48:a0:3d:ac:3f:cd:d3:74:52:f5:c7:b8:56:70:
e9:8a:9e:19:c3:3e:b2:5d:3e:10:9d:cb:26:0c:1c:
d7:8f:3c:ee:44:96:11:39:c1:81:d7:64:dd:2b:1d:
cc:9c:34:ea:c0:06:bf:a4:fa:a1:e1:1a:e2:5c:89:
ee:e1:a2:78:cd:59:40:c0:ec:4e:b5:e7:59:ae:c0:
58:0e:1e:cc:48:36:0d:bc:00:e1:53:1c:7f:32:6b:
da:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:EE:36:A5:78:52:EA:24:41:CE:79:FE:9E:D0:C5:3B:8B:39:0E:3D
X509v3 Authority Key Identifier:
keyid:5A:6F:92:95:52:1D:F3:0A:15:8F:50:6B:A7:CB:87:3A:B9:52:9D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Du42pXhS6iRBznn-ntDFO4s5Dj0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Wm-SlVId8woVj1Brp8uHOrlSncM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.126.38.0/24
185.1.123.0/24
195.130.66.0/24
195.251.247.0/24
IPv6:
2001:648:20f0::/48
2001:648:2cef::/48
2001:7f8:6e::/48
2001:7f8:ce::/48
Signature Algorithm: sha256WithRSAEncryption
71:3c:e2:52:a5:d5:54:b5:6b:c1:48:e9:4b:8d:c4:39:f0:5b:
f8:5f:4b:be:e7:e1:21:3d:b9:9c:79:b9:33:68:dd:bc:65:b5:
b7:df:33:43:1f:99:56:0b:ad:f3:b3:66:09:0a:93:7a:a8:01:
b7:94:07:d9:27:f4:04:7a:60:33:01:df:e6:8b:fa:1d:51:75:
26:e3:58:26:17:a7:05:6f:b0:0e:fd:a0:22:79:ee:1f:65:a9:
d6:b5:05:6f:c3:13:9b:e8:05:ce:ff:da:41:b8:8f:df:a3:e0:
21:e8:c3:f9:a8:51:52:eb:7d:87:f8:90:06:08:c4:69:97:aa:
29:39:44:9c:6f:a4:d4:65:df:f3:5a:fa:80:06:6e:5b:42:a0:
91:82:2c:56:62:9f:37:1d:30:7c:04:18:0e:51:e1:14:02:e7:
ba:0f:75:e1:0b:cb:af:38:1a:d5:99:d0:d7:35:a4:f9:64:6d:
93:75:b5:4f:aa:96:dc:1a:18:d2:50:64:f7:f3:f8:18:eb:ab:
d4:5b:cb:b4:36:24:d3:50:2e:78:cf:46:cd:56:28:ae:59:5b:
f0:2e:d8:4b:22:45:cb:8a:b6:53:d5:41:4c:98:76:b2:92:5b:
9e:25:d1:1a:bd:78:8a:f5:23:0c:37:94:bf:5b:c1:1f:18:9c:
a5:04:50:e2
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Jul 1 10:47:43 2024 by rpki-client on console-ams.rpki-client.org