Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/1-DfkuSG7UbeZdYlXkZgwJb5opBU.roa
File: 1-DfkuSG7UbeZdYlXkZgwJb5opBU.roa (raw, json)
Hash identifier: iYFV4bw68RmfrhDxwpzxyz/kOza5WLNm37gsOUH5hrM=
Subject key identifier: F8:37:E4:B9:21:BB:51:B7:99:75:89:57:91:98:30:25:BE:68:A4:15
Certificate issuer: /CN=4104a40821c4176cc42e255ef6c1727473c3f00a
Certificate serial: 018CC56F03B4254EA051E3998FF7D1F2D360
Authority key identifier: 41:04:A4:08:21:C4:17:6C:C4:2E:25:5E:F6:C1:72:74:73:C3:F0:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/1-DfkuSG7UbeZdYlXkZgwJb5opBU.roa
Signing time: Mon 01 Jan 2024 14:30:36 +0000
ROA not before: Mon 01 Jan 2024 14:30:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57237
IP address blocks: 194.12.235.0/24 maxlen: 24
194.12.236.0/24 maxlen: 24
194.12.243.0/24 maxlen: 24
194.12.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.mft
rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6f:03:b4:25:4e:a0:51:e3:99:8f:f7:d1:f2:d3:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4104a40821c4176cc42e255ef6c1727473c3f00a
Validity
Not Before: Jan 1 14:30:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f837e4b921bb51b79975895791983025be68a415
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:dc:60:3c:05:92:84:e7:87:b7:fe:ab:22:56:
ab:08:b9:03:8e:e8:da:f5:b9:90:b4:ef:d3:6a:04:
c2:46:e7:30:3e:d7:4f:b6:54:44:46:3d:ae:9d:73:
98:53:2a:93:62:24:8e:0c:4d:86:43:29:b9:60:8d:
1c:21:ea:9e:2c:ff:ee:7a:fe:ba:ab:fb:e3:90:3b:
d3:c3:28:8d:96:c4:fe:c5:d5:66:95:03:cf:c6:10:
80:9b:6e:a2:52:9f:4f:ad:13:ef:17:fb:1b:84:f7:
ef:38:c7:70:41:be:85:58:69:79:12:4b:be:db:97:
86:fb:61:8e:51:ee:4c:0e:b4:15:ad:f9:0d:e6:81:
3c:3f:86:dc:83:66:77:f4:cb:35:1f:4e:da:67:b7:
b5:d1:25:c0:4c:bc:b6:f1:38:7b:14:96:6a:89:e3:
c2:c5:d3:59:58:33:52:f8:9e:49:5e:eb:ff:bb:5e:
43:1b:25:a0:7a:c8:a7:a5:bb:12:1f:6a:f9:d2:ae:
13:03:f0:fb:40:e9:90:28:54:c3:3b:80:5f:25:01:
09:42:33:34:c2:59:97:03:89:80:b3:a4:0f:43:ef:
de:06:4a:49:70:86:3a:72:29:1f:62:d6:41:21:3a:
50:4a:30:ea:94:df:99:e9:fc:1d:a9:35:67:f9:70:
74:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:37:E4:B9:21:BB:51:B7:99:75:89:57:91:98:30:25:BE:68:A4:15
X509v3 Authority Key Identifier:
keyid:41:04:A4:08:21:C4:17:6C:C4:2E:25:5E:F6:C1:72:74:73:C3:F0:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/1-DfkuSG7UbeZdYlXkZgwJb5opBU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.12.235.0-194.12.236.255
194.12.243.0/24
194.12.252.0/24
Signature Algorithm: sha256WithRSAEncryption
95:13:a3:bf:f5:39:7f:2c:21:4d:db:e0:89:72:8a:05:91:a4:
da:26:ac:33:db:c5:3b:9c:17:9c:be:57:95:31:75:cf:8b:b5:
51:98:95:cf:50:ae:54:82:cd:16:1d:b6:6c:3c:7a:cb:82:50:
c1:59:37:46:0b:cf:ba:8a:6c:c5:8f:c7:32:64:1e:38:47:ac:
e1:12:bd:cc:86:0b:76:f6:53:72:28:67:25:e8:02:bc:32:96:
d6:ee:b7:01:35:8a:6d:a7:ec:32:ad:b5:88:1f:31:1b:37:de:
6e:a2:f0:fe:49:42:43:d0:75:dc:3f:25:b1:2d:31:ac:33:b4:
d0:35:97:6b:df:ef:d8:69:db:ea:94:b7:68:19:27:01:ed:fb:
93:ea:a5:ad:87:b3:6d:96:8e:77:4a:fd:73:c0:61:5d:18:09:
1c:77:00:8c:d5:f5:06:52:d2:3c:68:85:00:6b:47:0f:3c:f6:
48:8e:3e:be:c7:db:ab:c1:02:f5:94:a2:72:ca:73:38:96:90:
ae:5d:92:fb:16:e4:46:2d:9d:80:7f:6a:fe:08:f1:de:cf:e7:
bc:1e:0f:9e:62:50:d0:58:7d:72:67:77:45:a5:6e:fd:f8:30:
f7:aa:87:88:46:ef:a8:19:60:fc:98:ab:1b:2d:43:69:9f:5c:
ac:80:1c:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 23:31:29 2024 by rpki-client on console-ams.rpki-client.org