Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/4b419c-cf8f-4c9a-94d7-bb4b65b6a0d1/1/pq3uI46A3ssn7QjtIVfczIFVI-U.roa
File: pq3uI46A3ssn7QjtIVfczIFVI-U.roa (raw, json)
Hash identifier: /FGr7V/hTX5Efc5KOT7w0kB6yR7b4DR6OhSirzVKf8Y=
Subject key identifier: A6:AD:EE:23:8E:80:DE:CB:27:ED:08:ED:21:57:DC:CC:81:55:23:E5
Certificate issuer: /CN=5833294a1cdc1358afc439c0a72733b065a86f8b
Certificate serial: 018CC6B7A095597C36ED80D8D54513D1DD17
Authority key identifier: 58:33:29:4A:1C:DC:13:58:AF:C4:39:C0:A7:27:33:B0:65:A8:6F:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WDMpShzcE1ivxDnApyczsGWob4s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/4b419c-cf8f-4c9a-94d7-bb4b65b6a0d1/1/pq3uI46A3ssn7QjtIVfczIFVI-U.roa
Signing time: Mon 01 Jan 2024 20:29:31 +0000
ROA not before: Mon 01 Jan 2024 20:29:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39561
IP address blocks: 194.67.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/4b419c-cf8f-4c9a-94d7-bb4b65b6a0d1/1/WDMpShzcE1ivxDnApyczsGWob4s.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/4b419c-cf8f-4c9a-94d7-bb4b65b6a0d1/1/WDMpShzcE1ivxDnApyczsGWob4s.mft
rsync://rpki.ripe.net/repository/DEFAULT/WDMpShzcE1ivxDnApyczsGWob4s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 08:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:a0:95:59:7c:36:ed:80:d8:d5:45:13:d1:dd:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5833294a1cdc1358afc439c0a72733b065a86f8b
Validity
Not Before: Jan 1 20:29:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a6adee238e80decb27ed08ed2157dccc815523e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:be:91:3a:52:22:74:f9:14:77:c7:cb:98:71:
a4:3a:cb:98:cf:d6:05:11:d0:0f:bd:51:10:3a:79:
dc:2f:0f:29:ca:59:c7:f5:bc:d3:c4:87:30:7e:5d:
a8:49:7f:43:54:c5:c1:f0:98:68:28:ae:72:fc:0e:
7c:7a:21:fc:a5:99:50:69:c6:fb:d2:11:ae:24:c9:
e4:d2:52:37:61:3a:f3:86:c7:77:b7:d9:80:eb:a8:
56:9a:b9:ce:b8:a4:a9:d0:40:35:9a:f4:02:ca:87:
7b:fe:b0:21:b0:26:2a:0b:0f:c4:6d:89:b4:01:ac:
6a:ba:23:b2:3c:f4:1a:dd:81:96:21:c9:56:cb:1f:
27:38:42:5c:f5:20:40:8a:1a:2b:1d:b2:ec:e0:6a:
f0:04:25:c9:ca:68:2b:bf:f3:8b:7a:51:cf:53:f8:
6a:70:03:dd:12:39:6f:06:59:6f:6b:5f:9f:38:9b:
87:f5:51:00:d8:76:02:41:83:c0:2c:b7:df:31:b6:
27:15:e7:34:f9:64:ac:12:07:11:dd:01:40:72:a3:
26:37:14:90:ab:f6:0d:f0:5b:1a:83:1b:22:a1:a0:
c5:be:97:3f:b1:d7:18:c9:89:1f:ad:b0:c2:29:d6:
6b:de:74:5f:62:29:e4:e9:85:89:da:6c:82:f0:aa:
d9:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:AD:EE:23:8E:80:DE:CB:27:ED:08:ED:21:57:DC:CC:81:55:23:E5
X509v3 Authority Key Identifier:
keyid:58:33:29:4A:1C:DC:13:58:AF:C4:39:C0:A7:27:33:B0:65:A8:6F:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WDMpShzcE1ivxDnApyczsGWob4s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/4b419c-cf8f-4c9a-94d7-bb4b65b6a0d1/1/pq3uI46A3ssn7QjtIVfczIFVI-U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/4b419c-cf8f-4c9a-94d7-bb4b65b6a0d1/1/WDMpShzcE1ivxDnApyczsGWob4s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.67.73.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:0b:7c:d6:d1:28:4d:25:73:0a:d8:7f:a5:67:97:ff:58:f4:
95:0f:4a:6c:e7:35:f7:d1:24:24:39:00:eb:54:f9:a4:10:ca:
81:9b:13:9e:80:ce:1e:44:a5:49:43:8c:94:16:3a:12:80:f4:
55:12:b1:5c:d1:ee:62:86:00:11:f2:d1:12:c5:5c:d4:30:e1:
7c:af:1d:27:df:94:d6:62:40:07:19:8b:f3:b1:32:1e:03:4b:
23:48:56:e0:b4:d9:a7:ba:be:cf:99:0b:8b:dc:a1:45:71:3e:
4b:b5:ef:51:0c:a0:ff:e3:ef:08:ed:86:b2:f4:c8:65:c9:8f:
82:3f:7d:12:a5:d3:4a:5d:fe:1d:18:5b:5c:00:8d:d2:28:ce:
18:bf:e5:34:b6:d0:83:51:f9:4a:88:22:0d:bc:5a:92:e9:67:
d5:43:d8:d5:1a:5b:bc:49:6a:a1:a9:ee:fd:0d:2e:15:98:9a:
1f:b5:6a:74:31:59:5f:cd:14:b3:c2:95:f0:c5:3f:20:1e:11:
ab:f9:72:a4:36:3a:91:83:ba:ff:20:4e:20:b5:bf:de:33:6d:
83:85:01:ce:5d:ce:5f:36:06:73:5e:01:6c:50:6a:57:13:7b:
58:2b:a5:3f:37:43:dc:77:99:8a:0c:6c:aa:e7:19:7b:9d:8c:
a7:63:89:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:54:59 2024 by rpki-client on console-ams.rpki-client.org