Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/B409D_kT1Ungzb11RF3T1bL5IoU.roa
File: B409D_kT1Ungzb11RF3T1bL5IoU.roa (raw, json)
Hash identifier: rG8KLWXZHJF60puM8Xqwj3biByiMaCS1IRa6k34OTuY=
Subject key identifier: 07:8D:3D:0F:F9:13:D5:49:E0:CD:BD:75:44:5D:D3:D5:B2:F9:22:85
Certificate issuer: /CN=dee623e2aff7b03afeb94260348c1633b54d9056
Certificate serial: 018CC3491D34F9575F794443245F8BBB8E76
Authority key identifier: DE:E6:23:E2:AF:F7:B0:3A:FE:B9:42:60:34:8C:16:33:B5:4D:90:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3uYj4q_3sDr-uUJgNIwWM7VNkFY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/B409D_kT1Ungzb11RF3T1bL5IoU.roa
Signing time: Mon 01 Jan 2024 04:29:57 +0000
ROA not before: Mon 01 Jan 2024 04:29:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202354
IP address blocks: 194.127.110.0/24 maxlen: 24
194.127.111.0/24 maxlen: 24
194.127.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/3uYj4q_3sDr-uUJgNIwWM7VNkFY.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/3uYj4q_3sDr-uUJgNIwWM7VNkFY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3uYj4q_3sDr-uUJgNIwWM7VNkFY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 07:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:1d:34:f9:57:5f:79:44:43:24:5f:8b:bb:8e:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dee623e2aff7b03afeb94260348c1633b54d9056
Validity
Not Before: Jan 1 04:29:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=078d3d0ff913d549e0cdbd75445dd3d5b2f92285
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e7:22:ab:ec:2a:e5:23:a8:6b:90:71:5d:95:
8b:fb:96:23:7b:4c:77:40:ae:42:a8:68:66:12:74:
ae:80:c3:6c:44:f7:f1:89:6b:4b:ca:12:2d:bf:05:
ae:02:15:98:6e:9c:82:46:69:58:02:36:ea:6d:91:
21:e4:07:f7:2b:2c:eb:9f:5c:94:d3:6c:c7:30:7c:
34:de:46:1b:bc:eb:25:58:6c:6c:54:b6:c5:57:9d:
e9:6a:c6:8f:55:45:1f:8f:d2:22:88:ca:6f:f5:71:
7a:09:8d:9b:26:ef:c3:7b:fa:3e:80:cd:28:63:1e:
21:5b:f2:f7:f7:dd:d2:b9:80:dc:27:5a:bc:77:0a:
72:22:c0:5e:55:83:a6:0c:ba:8b:7b:47:2b:a4:f2:
bb:5b:de:c1:66:f8:b8:a2:33:e6:74:ab:6f:81:67:
0d:c4:22:77:d1:62:70:42:2b:a4:29:61:b1:8f:b4:
75:71:3a:ff:a1:0b:62:43:ee:a7:09:0b:f3:69:cf:
6d:37:36:37:86:e9:a9:4a:32:83:c1:61:81:62:11:
5c:42:3e:21:6d:1d:a1:ba:2d:4e:55:41:2e:e3:6c:
a9:5e:5b:c6:8d:71:91:15:f1:f1:1a:41:45:88:ab:
af:ec:91:02:07:ed:c5:24:2f:d0:ce:5f:54:09:38:
ac:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:8D:3D:0F:F9:13:D5:49:E0:CD:BD:75:44:5D:D3:D5:B2:F9:22:85
X509v3 Authority Key Identifier:
keyid:DE:E6:23:E2:AF:F7:B0:3A:FE:B9:42:60:34:8C:16:33:B5:4D:90:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3uYj4q_3sDr-uUJgNIwWM7VNkFY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/B409D_kT1Ungzb11RF3T1bL5IoU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/3uYj4q_3sDr-uUJgNIwWM7VNkFY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.127.108.0/24
194.127.110.0/23
Signature Algorithm: sha256WithRSAEncryption
2c:04:5b:07:26:53:7f:4c:4a:34:01:a8:6c:ae:6c:84:65:41:
45:a0:53:ec:6f:a9:fe:e8:ca:ef:05:57:6d:2d:60:a0:13:fd:
e7:2b:95:50:42:01:ac:d5:1d:03:38:0d:a7:a6:cc:d3:b6:2e:
38:41:8f:99:2f:3a:8d:29:c1:f9:39:45:a3:cb:68:68:ac:d9:
f1:3b:4f:56:40:20:8d:81:b5:62:4c:43:f2:ba:10:97:e8:41:
1c:e3:46:41:cf:4b:0e:91:9f:d2:15:fa:0c:a2:bc:eb:ef:b8:
58:45:2b:99:9c:97:d5:c2:18:3b:42:9e:72:9a:40:d0:b1:12:
56:d4:57:65:b7:8f:eb:21:31:bf:5b:e7:ce:e9:48:d6:aa:1a:
b5:ff:eb:83:21:55:57:0c:89:70:39:17:d2:5f:07:f9:fa:84:
35:6a:8f:dd:a4:7a:db:4c:38:b1:f3:61:2d:da:a1:59:83:72:
82:34:99:07:10:a2:64:ee:5f:85:d0:2f:50:4c:fd:57:87:cd:
11:f4:4b:06:2f:9a:73:1d:e2:df:62:2d:52:99:7c:f0:c2:a9:
7f:44:61:18:6e:e0:a5:d1:cc:8a:59:d9:b1:69:42:cb:f9:92:
34:fc:fe:76:a8:aa:60:88:b8:ee:6a:72:48:86:98:9a:ab:05:
0b:c3:50:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:58:51 2024 by rpki-client on console-ams.rpki-client.org