Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/cc8bfa-2b13-4674-a984-a5fdb570fe9a/1/g1_1DJnYO4bOWIQtBDY_J-k7xFk.roa
File: g1_1DJnYO4bOWIQtBDY_J-k7xFk.roa (raw, json)
Hash identifier: jWrUiduLF5hvuATStlPCBqYHsCAY3ClQMUx0iX5toHc=
Subject key identifier: 83:5F:F5:0C:99:D8:3B:86:CE:58:84:2D:04:36:3F:27:E9:3B:C4:59
Certificate issuer: /CN=0620eadb2e1562b4e2e4f480772c36887a777f24
Certificate serial: 018CC26D1063ACA3BC21DF8628EBEC5A548A
Authority key identifier: 06:20:EA:DB:2E:15:62:B4:E2:E4:F4:80:77:2C:36:88:7A:77:7F:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BiDq2y4VYrTi5PSAdyw2iHp3fyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/cc8bfa-2b13-4674-a984-a5fdb570fe9a/1/g1_1DJnYO4bOWIQtBDY_J-k7xFk.roa
Signing time: Mon 01 Jan 2024 00:29:36 +0000
ROA not before: Mon 01 Jan 2024 00:29:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42910
IP address blocks: 217.195.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/cc8bfa-2b13-4674-a984-a5fdb570fe9a/1/BiDq2y4VYrTi5PSAdyw2iHp3fyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/cc8bfa-2b13-4674-a984-a5fdb570fe9a/1/BiDq2y4VYrTi5PSAdyw2iHp3fyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/BiDq2y4VYrTi5PSAdyw2iHp3fyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:10:63:ac:a3:bc:21:df:86:28:eb:ec:5a:54:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0620eadb2e1562b4e2e4f480772c36887a777f24
Validity
Not Before: Jan 1 00:29:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=835ff50c99d83b86ce58842d04363f27e93bc459
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:45:54:f3:fe:0f:97:95:f2:49:58:b2:8c:51:
15:00:d9:d6:b0:06:86:1e:ad:ec:48:86:48:ed:d4:
62:b7:05:98:39:e6:66:38:d3:69:4d:dd:b5:df:6f:
38:18:66:c7:2b:96:1c:af:3e:0a:06:ba:1a:9e:88:
ff:82:b5:84:66:b5:1f:63:77:09:af:15:a9:96:19:
f5:61:58:1c:7a:7a:e2:a6:37:e9:be:71:ae:a1:e1:
57:3e:ef:b7:1b:dd:db:e1:c4:c5:f8:d4:fe:0f:46:
2e:c7:d7:53:10:5b:d7:38:c1:c7:e9:10:5c:86:76:
d6:9a:a9:78:d3:cd:d3:a7:2c:c7:ca:f9:0f:43:69:
9f:21:b9:c3:e0:b5:81:58:6e:8d:89:65:d3:f1:2d:
02:77:e9:df:da:8f:7a:fc:9a:ec:57:c8:b1:ec:af:
35:85:a1:f6:48:f5:72:c6:a8:6d:81:a1:5f:3f:36:
0d:c4:bf:df:e3:32:d2:57:fe:aa:90:40:91:38:18:
f7:4c:44:3a:2e:3c:b7:c9:c4:d6:68:f7:f2:c2:ee:
32:3f:d2:a0:aa:dc:78:11:cd:2f:65:67:4e:60:10:
29:b0:75:a3:e3:27:73:3c:e1:47:8a:96:4f:3d:00:
f1:05:15:e8:2f:58:fd:0d:74:38:f4:20:ab:ce:ad:
b8:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:5F:F5:0C:99:D8:3B:86:CE:58:84:2D:04:36:3F:27:E9:3B:C4:59
X509v3 Authority Key Identifier:
keyid:06:20:EA:DB:2E:15:62:B4:E2:E4:F4:80:77:2C:36:88:7A:77:7F:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BiDq2y4VYrTi5PSAdyw2iHp3fyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/cc8bfa-2b13-4674-a984-a5fdb570fe9a/1/g1_1DJnYO4bOWIQtBDY_J-k7xFk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/cc8bfa-2b13-4674-a984-a5fdb570fe9a/1/BiDq2y4VYrTi5PSAdyw2iHp3fyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.195.199.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:32:76:79:20:e6:9f:d5:74:5a:56:96:bb:13:5a:fb:f6:73:
de:cb:4b:9c:09:b8:bf:bd:3c:45:60:86:31:d7:89:b1:fd:fd:
28:3d:70:5f:4e:79:09:77:d2:ba:4f:ef:2c:48:2f:f1:45:1b:
68:a0:23:bf:f7:3f:f0:45:dc:6a:df:71:6a:62:4b:72:f1:bf:
08:7b:c8:3b:d1:a3:73:9a:c3:4f:87:3c:9a:ab:44:cb:1f:65:
b4:57:fd:58:cb:20:93:38:a0:a1:cb:b8:d6:d0:ca:29:5b:02:
df:67:6c:be:16:26:e9:76:87:9b:43:58:12:51:b6:e7:e3:e4:
b1:c2:fa:64:b1:90:c8:dd:2f:01:ef:0f:7c:90:88:e4:cf:0f:
cf:29:b2:a1:67:b2:6a:df:36:67:c6:be:a8:13:20:fc:f0:c6:
2a:df:da:b3:4a:11:c2:d0:a1:c6:9f:b3:ab:81:97:93:c6:7e:
a8:bc:ea:94:49:20:c7:ca:0e:c9:94:bd:d6:bd:ba:9a:ae:fd:
66:f5:16:b2:be:94:6c:cd:c7:9e:77:a8:32:ac:ad:24:a6:9e:
e0:bf:8a:0c:a2:38:80:68:23:df:ed:e1:86:22:4e:88:69:25:
c9:6e:a1:7d:3b:e7:71:a7:2f:0b:22:16:ea:88:84:0d:6c:04:
94:b9:ad:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 07:26:02 2024 by rpki-client on console-ams.rpki-client.org