Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/264b78-b25d-47a3-ac55-165c96ff9529/1/ASdw3DhI648UM4opSeUNTz19jhE.roa
File: ASdw3DhI648UM4opSeUNTz19jhE.roa (raw, json)
Hash identifier: p3WRyK0nZll3h9mKKw8Awcs8358sBSJLndxU3Oam/iE=
Subject key identifier: 01:27:70:DC:38:48:EB:8F:14:33:8A:29:49:E5:0D:4F:3D:7D:8E:11
Certificate issuer: /CN=9915558c6897fea224855cf60381857354708411
Certificate serial: 018CC50131245C0CA0DAD5C6E608C684C618
Authority key identifier: 99:15:55:8C:68:97:FE:A2:24:85:5C:F6:03:81:85:73:54:70:84:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mRVVjGiX_qIkhVz2A4GFc1RwhBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/264b78-b25d-47a3-ac55-165c96ff9529/1/ASdw3DhI648UM4opSeUNTz19jhE.roa
Signing time: Mon 01 Jan 2024 12:30:38 +0000
ROA not before: Mon 01 Jan 2024 12:30:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206643
IP address blocks: 185.180.104.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/264b78-b25d-47a3-ac55-165c96ff9529/1/mRVVjGiX_qIkhVz2A4GFc1RwhBE.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/264b78-b25d-47a3-ac55-165c96ff9529/1/mRVVjGiX_qIkhVz2A4GFc1RwhBE.mft
rsync://rpki.ripe.net/repository/DEFAULT/mRVVjGiX_qIkhVz2A4GFc1RwhBE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:31:24:5c:0c:a0:da:d5:c6:e6:08:c6:84:c6:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9915558c6897fea224855cf60381857354708411
Validity
Not Before: Jan 1 12:30:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=012770dc3848eb8f14338a2949e50d4f3d7d8e11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:3e:ce:8d:2e:9a:75:88:1b:80:c1:47:a4:0b:
f9:f6:6b:28:1c:09:7c:f9:c1:9f:f1:55:0f:1d:c8:
04:d2:2a:4b:22:4a:2f:0a:b3:63:97:bd:13:9e:94:
a5:93:44:8b:e0:14:c5:f9:c5:20:4d:76:33:62:d1:
96:a2:33:f9:92:ad:1d:7f:73:a8:09:46:4c:d2:41:
43:e8:8f:00:bb:8c:b5:66:7f:ab:9c:4c:1d:fb:28:
57:14:6d:41:4d:e0:77:9f:50:79:fb:10:bd:fb:c7:
4b:76:34:03:bf:f8:a2:ce:1f:00:ff:dc:74:88:1e:
25:52:63:29:c5:5f:8a:2d:89:5d:ca:4f:75:ab:4a:
08:f2:f2:cf:d3:7f:4a:f7:91:88:68:c2:f6:a0:6f:
78:20:cd:80:90:80:37:f4:6f:bb:4a:f2:3f:8b:dc:
9a:ff:94:27:a5:c2:03:db:cf:b9:b1:10:ef:b6:79:
76:9d:3b:95:ec:f7:17:ba:4e:53:56:bf:80:64:17:
fb:99:ef:13:00:57:c9:1b:57:63:5b:ac:ad:ea:e9:
6c:75:e2:91:98:33:8e:34:c1:38:f6:cb:b8:7d:1b:
68:8a:cd:59:56:34:63:bf:ed:c8:2b:b0:c3:25:4d:
56:84:26:9e:fb:9c:b1:01:2a:5b:df:d6:6a:fc:7c:
a7:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:27:70:DC:38:48:EB:8F:14:33:8A:29:49:E5:0D:4F:3D:7D:8E:11
X509v3 Authority Key Identifier:
keyid:99:15:55:8C:68:97:FE:A2:24:85:5C:F6:03:81:85:73:54:70:84:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mRVVjGiX_qIkhVz2A4GFc1RwhBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/264b78-b25d-47a3-ac55-165c96ff9529/1/ASdw3DhI648UM4opSeUNTz19jhE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/264b78-b25d-47a3-ac55-165c96ff9529/1/mRVVjGiX_qIkhVz2A4GFc1RwhBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.180.104.0/22
Signature Algorithm: sha256WithRSAEncryption
9e:3e:9c:0c:66:8e:22:f4:8b:18:99:fd:36:0a:64:ee:90:9e:
db:3a:89:c9:f5:74:37:86:7a:2b:b6:80:f9:94:2e:91:fb:fe:
38:b1:05:15:39:f2:c1:a6:6c:93:6f:ae:84:10:f8:7c:f5:73:
20:99:ba:c6:92:58:23:a2:55:4e:6d:91:e8:da:24:e5:cc:25:
01:97:63:8f:7c:e7:8c:8c:15:a5:0c:fb:9d:0b:be:84:50:eb:
a1:8f:55:8c:da:ee:6d:fc:07:0f:23:dc:de:c7:50:f2:c1:de:
c7:33:4b:59:d8:58:1e:da:93:19:1c:cf:f1:86:6d:bf:c9:51:
4d:34:0d:59:d4:1f:a6:1a:33:01:01:3d:37:9f:c7:24:0f:f3:
18:2e:c8:3a:b5:61:6c:dd:1b:0d:e5:16:c1:87:0b:14:42:ba:
f7:bf:8d:a2:c5:3a:5a:0e:b7:b1:88:63:96:74:f3:8d:ef:7e:
4e:b4:e1:52:18:54:16:ca:04:4c:e1:f3:dc:36:47:2e:8e:d1:
59:26:db:cb:75:aa:59:76:5b:09:36:b3:69:b9:fd:d1:bf:03:
96:05:86:0a:92:40:e5:06:a5:ab:0f:8c:75:7a:82:1b:92:e7:
3f:0b:ee:c1:51:75:8e:c7:fc:a7:af:37:94:99:39:cb:14:ec:
c3:ed:87:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:37:09 2024 by rpki-client on console-ams.rpki-client.org