Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/45be32-821f-4514-aa31-bc75466047c9/1/DWTwLCXHo-c4UzzhD5f_6WGVkD8.roa
File: DWTwLCXHo-c4UzzhD5f_6WGVkD8.roa (raw, json)
Hash identifier: vLLItiJAXzGQcC5exNFvV5WIi54J4lwzl/C7QTkbPNU=
Subject key identifier: 0D:64:F0:2C:25:C7:A3:E7:38:53:3C:E1:0F:97:FF:E9:61:95:90:3F
Certificate issuer: /CN=d422367433765b541a37390a998997b737c46472
Certificate serial: 018CC3B68249754FF2F88D877D404457E3B9
Authority key identifier: D4:22:36:74:33:76:5B:54:1A:37:39:0A:99:89:97:B7:37:C4:64:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1CI2dDN2W1QaNzkKmYmXtzfEZHI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/45be32-821f-4514-aa31-bc75466047c9/1/DWTwLCXHo-c4UzzhD5f_6WGVkD8.roa
Signing time: Mon 01 Jan 2024 06:29:27 +0000
ROA not before: Mon 01 Jan 2024 06:29:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 137
IP address blocks: 151.100.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/45be32-821f-4514-aa31-bc75466047c9/1/1CI2dDN2W1QaNzkKmYmXtzfEZHI.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/45be32-821f-4514-aa31-bc75466047c9/1/1CI2dDN2W1QaNzkKmYmXtzfEZHI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1CI2dDN2W1QaNzkKmYmXtzfEZHI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 20:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:82:49:75:4f:f2:f8:8d:87:7d:40:44:57:e3:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d422367433765b541a37390a998997b737c46472
Validity
Not Before: Jan 1 06:29:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0d64f02c25c7a3e738533ce10f97ffe96195903f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:30:47:fe:53:b5:3d:f9:e3:64:12:df:00:e0:
d0:5e:b3:f2:41:0c:17:95:03:98:cb:8a:be:93:50:
eb:ec:61:3a:13:e3:c5:5b:cf:fe:e3:2e:51:d3:72:
4d:57:4b:3e:ce:73:86:31:15:47:f2:c7:fc:1c:0f:
1c:13:f1:64:ef:b9:8c:e8:83:6d:b1:82:67:c5:c3:
ae:a6:ae:da:e8:70:74:ed:2f:ca:ea:33:75:9c:44:
ea:2f:53:5d:7a:5d:7f:e2:22:96:cc:32:97:cc:c2:
c5:67:bb:5d:01:3a:85:fe:0b:c8:a4:4f:94:b7:fc:
92:34:92:e2:4a:1a:2a:6b:4e:f0:20:86:5f:3d:e1:
4f:a7:f7:7e:b3:14:52:0b:3a:45:44:8e:42:b5:ed:
a9:05:e6:a3:d2:73:b1:4b:da:d4:25:04:55:fb:cc:
71:14:4b:e8:7a:c0:2e:c9:ab:82:d6:b9:0e:77:00:
0c:8c:ec:db:dc:69:c3:91:eb:2c:ee:68:ce:7a:e7:
13:a2:b0:02:fe:d9:28:9d:2a:f5:60:56:82:9c:10:
d0:c2:ee:95:35:67:71:6c:3c:5e:06:77:fd:e0:ce:
2b:0a:10:bf:02:2b:d9:ef:50:bc:c6:e6:60:0c:88:
a7:e5:ea:9e:eb:74:77:72:f5:bc:c5:b9:28:2f:08:
7b:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:64:F0:2C:25:C7:A3:E7:38:53:3C:E1:0F:97:FF:E9:61:95:90:3F
X509v3 Authority Key Identifier:
keyid:D4:22:36:74:33:76:5B:54:1A:37:39:0A:99:89:97:B7:37:C4:64:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1CI2dDN2W1QaNzkKmYmXtzfEZHI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/45be32-821f-4514-aa31-bc75466047c9/1/DWTwLCXHo-c4UzzhD5f_6WGVkD8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/45be32-821f-4514-aa31-bc75466047c9/1/1CI2dDN2W1QaNzkKmYmXtzfEZHI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.100.0.0/16
Signature Algorithm: sha256WithRSAEncryption
46:78:74:54:5c:a4:24:7d:f9:00:a9:8a:2c:57:59:46:80:13:
ec:4f:58:81:23:6a:2a:02:97:b9:9a:cb:51:7b:83:ab:18:8b:
45:c8:a8:2a:ce:b4:a3:d9:b2:03:11:11:e8:1c:1f:9f:89:2e:
d8:40:8f:53:e2:66:a9:21:12:a8:f7:32:fa:6e:bf:ab:fc:ea:
30:2a:1c:44:6a:f4:06:b9:82:39:1a:5f:13:48:e6:79:42:ca:
6e:b6:52:3e:0a:24:57:e9:73:f4:0e:6e:df:70:3c:30:82:8a:
0d:bc:90:54:6f:9c:c5:8a:8e:5c:5d:bf:c5:7f:14:ef:7b:fd:
a9:6e:8c:fe:79:1c:cc:b3:56:07:66:51:45:1d:37:bc:97:d3:
c2:30:c4:1d:7e:29:d3:54:f5:9a:34:c8:45:93:3a:91:5a:9e:
c6:5d:fd:01:a3:93:ec:59:20:42:45:09:c9:4e:c2:86:75:54:
aa:eb:77:56:70:d0:9a:01:3d:f1:5d:7e:eb:8b:d3:42:a4:a2:
05:9d:6e:35:0d:40:cc:28:ca:97:37:84:64:8d:6b:5d:58:50:
e2:70:ef:3f:11:c9:a1:69:44:6a:13:35:ff:f2:e3:58:4c:08:
5a:46:e8:80:ab:5c:f6:00:34:3e:06:f4:8a:7e:80:93:25:8a:
2c:62:1e:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 00:49:57 2024 by rpki-client on console-ams.rpki-client.org