Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/6bf5ed-6fe6-4562-b853-9a4ec10607c5/1/0ex17KHt6OqyTPYLDnBxNix3YKw.roa
File: 0ex17KHt6OqyTPYLDnBxNix3YKw.roa (raw, json)
Hash identifier: M24oNxkywDmO+awN1s7X/xBF4qHVy3Pxg7r1TuAtBbA=
Subject key identifier: D1:EC:75:EC:A1:ED:E8:EA:B2:4C:F6:0B:0E:70:71:36:2C:77:60:AC
Certificate issuer: /CN=d32563ed9964e42681a1c5d295b0c6148606e73d
Certificate serial: 018CC4924DBFE054F06A20F96B596EE91B32
Authority key identifier: D3:25:63:ED:99:64:E4:26:81:A1:C5:D2:95:B0:C6:14:86:06:E7:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0yVj7Zlk5CaBocXSlbDGFIYG5z0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/6bf5ed-6fe6-4562-b853-9a4ec10607c5/1/0ex17KHt6OqyTPYLDnBxNix3YKw.roa
Signing time: Mon 01 Jan 2024 10:29:31 +0000
ROA not before: Mon 01 Jan 2024 10:29:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44477
IP address blocks: 194.59.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/6bf5ed-6fe6-4562-b853-9a4ec10607c5/1/0yVj7Zlk5CaBocXSlbDGFIYG5z0.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/6bf5ed-6fe6-4562-b853-9a4ec10607c5/1/0yVj7Zlk5CaBocXSlbDGFIYG5z0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0yVj7Zlk5CaBocXSlbDGFIYG5z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 May 2024 01:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:92:4d:bf:e0:54:f0:6a:20:f9:6b:59:6e:e9:1b:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d32563ed9964e42681a1c5d295b0c6148606e73d
Validity
Not Before: Jan 1 10:29:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d1ec75eca1ede8eab24cf60b0e7071362c7760ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:5d:d8:df:61:ca:23:7a:d8:17:50:4b:bb:f3:
24:aa:cf:50:fa:49:f6:f1:90:d8:2d:66:de:64:08:
92:63:76:08:7a:db:55:ee:08:ce:1a:b4:c8:6e:7d:
cb:19:28:dc:4a:00:26:36:6c:15:91:2f:3f:19:99:
ff:22:79:4b:6d:2a:d0:87:9f:57:0e:59:3d:53:b9:
90:e7:5b:bf:b6:57:ff:93:2a:00:dd:ef:72:83:c4:
f1:e9:0f:37:11:4e:7e:c3:5d:2a:5c:1a:d4:47:24:
5a:1d:eb:bb:5f:3c:8b:48:73:d4:c6:1b:a6:75:da:
70:3f:38:b4:26:9d:fe:89:80:03:6c:8f:8b:20:53:
6f:b8:38:38:96:74:83:72:7a:fb:c7:ac:3d:2a:9e:
08:13:e6:b4:45:d5:22:5d:3d:23:81:a5:7f:20:ee:
e4:0f:35:81:dd:15:01:96:6f:ff:9d:3e:2b:bf:71:
3f:97:59:b1:29:f0:33:45:fc:cc:99:36:e4:7d:a9:
4b:6d:13:cc:a2:9b:30:75:f1:9a:d5:49:d3:78:38:
16:a7:32:74:30:4a:06:55:00:6c:96:65:27:92:65:
de:ed:56:61:b8:18:be:f6:7d:42:9e:0e:49:a4:75:
c1:f0:b0:51:fc:b8:eb:78:df:0d:8e:a6:1b:47:9c:
6a:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:EC:75:EC:A1:ED:E8:EA:B2:4C:F6:0B:0E:70:71:36:2C:77:60:AC
X509v3 Authority Key Identifier:
keyid:D3:25:63:ED:99:64:E4:26:81:A1:C5:D2:95:B0:C6:14:86:06:E7:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0yVj7Zlk5CaBocXSlbDGFIYG5z0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/6bf5ed-6fe6-4562-b853-9a4ec10607c5/1/0ex17KHt6OqyTPYLDnBxNix3YKw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/6bf5ed-6fe6-4562-b853-9a4ec10607c5/1/0yVj7Zlk5CaBocXSlbDGFIYG5z0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.59.247.0/24
Signature Algorithm: sha256WithRSAEncryption
45:9f:0a:91:40:4c:56:6a:02:ee:bf:56:35:80:dc:db:50:94:
ef:d9:64:6f:80:ee:d2:9e:04:3a:13:ca:b3:6d:7d:d6:00:7d:
9f:65:d0:98:0c:bf:39:0a:51:b1:13:dd:6f:74:1c:18:a4:8f:
da:7b:ea:28:dd:26:42:c0:05:2d:b2:4e:a4:44:59:07:d4:2f:
af:7b:06:9b:3b:d3:77:b2:ec:35:32:98:8b:46:15:f2:ad:ac:
48:72:54:cf:57:fe:e2:b6:3e:c4:c0:8b:f1:63:94:bd:bd:86:
f3:c7:73:41:d3:06:2b:f6:52:0b:41:97:ec:9c:50:9b:45:d3:
4f:d5:1a:f6:e3:71:b4:62:bb:65:a6:87:8f:82:b2:a9:d1:86:
f8:52:2e:04:8b:66:01:cc:81:a7:fb:4e:5f:9f:68:c7:5c:19:
d7:7d:71:97:31:17:8a:09:76:ce:0c:05:6e:20:6d:c8:81:e7:
e3:7f:7c:70:e4:ad:7a:8c:0c:45:b3:95:2b:be:d7:7f:b7:44:
bf:f1:c1:ab:4d:09:1a:8d:5b:bb:cb:b9:55:d5:69:fd:34:8d:
47:55:a4:00:df:8b:3a:c8:78:f1:0b:95:c4:9e:0f:8f:00:ae:
4c:53:7c:78:d2:96:f0:ec:22:01:8f:4b:d6:61:50:6a:13:32:
90:e4:14:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 08:54:23 2024 by rpki-client on console-ams.rpki-client.org