Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/6e8444-8da5-466b-8400-7bd96d9c6286/1/AfUGdNix6Up009F8-QXtvXLae2k.roa
File: AfUGdNix6Up009F8-QXtvXLae2k.roa (raw, json)
Hash identifier: qCVY+yYOexIzOGMoB1CuYA1zNQ3UHA1ezNz3vclywVY=
Subject key identifier: 01:F5:06:74:D8:B1:E9:4A:74:D3:D1:7C:F9:05:ED:BD:72:DA:7B:69
Certificate issuer: /CN=9d17d9388e7631a6d19afb2b2642795a24c84081
Certificate serial: 018CC5013BD956549C108D4579F8CD99D271
Authority key identifier: 9D:17:D9:38:8E:76:31:A6:D1:9A:FB:2B:26:42:79:5A:24:C8:40:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nRfZOI52MabRmvsrJkJ5WiTIQIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/6e8444-8da5-466b-8400-7bd96d9c6286/1/AfUGdNix6Up009F8-QXtvXLae2k.roa
Signing time: Mon 01 Jan 2024 12:30:41 +0000
ROA not before: Mon 01 Jan 2024 12:30:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203927
IP address blocks: 185.119.204.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/6e8444-8da5-466b-8400-7bd96d9c6286/1/nRfZOI52MabRmvsrJkJ5WiTIQIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/6e8444-8da5-466b-8400-7bd96d9c6286/1/nRfZOI52MabRmvsrJkJ5WiTIQIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nRfZOI52MabRmvsrJkJ5WiTIQIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:3b:d9:56:54:9c:10:8d:45:79:f8:cd:99:d2:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d17d9388e7631a6d19afb2b2642795a24c84081
Validity
Not Before: Jan 1 12:30:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=01f50674d8b1e94a74d3d17cf905edbd72da7b69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:eb:39:e2:d9:2d:ac:3e:09:9c:a7:2b:0a:9b:
97:62:ba:09:ad:58:94:c6:a8:81:71:68:a0:97:b2:
ff:d8:fd:6c:90:9a:7c:79:27:a4:5f:3a:49:64:15:
3d:aa:87:9d:a6:7c:c8:be:a8:70:db:85:76:1c:9d:
fb:4f:2f:94:25:a3:32:8a:14:80:3e:7e:92:bf:54:
93:f1:aa:f5:1f:f1:36:41:4f:14:6e:2c:be:79:00:
c5:f3:cf:9a:7f:91:d8:f3:7a:ae:86:47:16:55:30:
f3:d1:38:ab:be:e3:bf:5c:75:51:c0:e5:6c:8f:32:
ca:db:35:0b:11:3c:62:76:95:0d:ab:49:90:1b:ce:
bb:fe:84:0c:80:5b:70:60:68:c0:ad:0e:b9:bb:bd:
ba:05:b6:46:1e:63:44:cd:99:c4:8a:58:56:33:96:
cb:72:6c:92:c7:f9:66:9f:66:07:81:9f:88:62:ce:
b4:9b:e3:5c:f7:52:8b:1d:52:0d:f3:8b:14:32:32:
18:d8:20:65:fb:da:5a:c1:e2:61:8d:ca:e7:de:fc:
dc:4c:8c:6f:67:0f:19:ad:40:5d:65:bd:0b:60:47:
6f:59:6a:4e:5a:86:c9:18:5e:df:ea:74:eb:9c:43:
04:e1:e1:6c:bf:b1:e3:db:5c:80:c5:7e:58:38:88:
d3:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:F5:06:74:D8:B1:E9:4A:74:D3:D1:7C:F9:05:ED:BD:72:DA:7B:69
X509v3 Authority Key Identifier:
keyid:9D:17:D9:38:8E:76:31:A6:D1:9A:FB:2B:26:42:79:5A:24:C8:40:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nRfZOI52MabRmvsrJkJ5WiTIQIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6e8444-8da5-466b-8400-7bd96d9c6286/1/AfUGdNix6Up009F8-QXtvXLae2k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6e8444-8da5-466b-8400-7bd96d9c6286/1/nRfZOI52MabRmvsrJkJ5WiTIQIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.119.204.0/22
Signature Algorithm: sha256WithRSAEncryption
8d:06:67:06:73:64:ce:0a:85:b7:51:7d:0a:fd:2d:af:bf:3d:
ee:ef:06:a2:1d:f5:be:bc:fb:7c:bc:c0:12:7f:a8:c5:30:51:
6d:6e:8d:74:0e:f0:24:1f:3f:f7:df:b8:34:e0:9a:de:73:0c:
4a:11:f8:3d:5a:c9:ed:88:7b:81:2a:3d:43:bc:b9:95:41:eb:
3f:f5:95:b6:e0:99:71:22:4c:b9:62:68:d9:09:9d:68:bd:15:
e2:bf:08:b8:f5:20:1c:b0:fa:db:98:84:c2:7b:8f:ba:9d:7d:
3a:ac:4e:cc:4c:8f:10:9e:43:47:a6:5b:11:4b:a7:e3:d3:6a:
2e:aa:ac:65:45:41:eb:0e:fc:e5:ed:14:fc:f5:b3:b0:4a:33:
4a:23:49:2c:9d:14:51:e1:e8:18:7b:f7:5c:4b:4b:28:14:2f:
74:3b:14:cd:02:ca:1f:9d:5b:11:67:98:b3:81:14:a0:b3:0f:
80:33:f4:69:69:1d:82:9f:1d:bd:6b:e4:bb:c4:2d:db:6d:fc:
b1:4b:9f:7e:93:2d:9f:6d:11:ad:fe:fe:3e:87:69:74:86:36:
1d:cb:91:95:95:45:82:d3:24:6e:0b:93:d1:3b:1f:f8:f3:5f:
6c:a9:0a:89:40:88:4f:c2:81:1f:d8:c0:b8:8f:6d:a9:f4:dc:
4a:3a:22:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 07:26:40 2024 by rpki-client on console-ams.rpki-client.org