Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/6c59cb-84ef-4218-8d7b-ff41d817b443/1/RDFwD01gpaL6kSpbNQqDQy-qgwQ.roa
File: RDFwD01gpaL6kSpbNQqDQy-qgwQ.roa (raw, json)
Hash identifier: GDm2IlsXAuFZpZZV60hAK1k0sWYi/zt4tiET/Ye2rQ4=
Subject key identifier: 44:31:70:0F:4D:60:A5:A2:FA:91:2A:5B:35:0A:83:43:2F:AA:83:04
Certificate issuer: /CN=d1c7581439a3aa12fea1cd587ec84b7509a3fc7a
Certificate serial: 018CC56E6920018F70C4B16953FE944C57E3
Authority key identifier: D1:C7:58:14:39:A3:AA:12:FE:A1:CD:58:7E:C8:4B:75:09:A3:FC:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0cdYFDmjqhL-oc1YfshLdQmj_Ho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/6c59cb-84ef-4218-8d7b-ff41d817b443/1/RDFwD01gpaL6kSpbNQqDQy-qgwQ.roa
Signing time: Mon 01 Jan 2024 14:29:56 +0000
ROA not before: Mon 01 Jan 2024 14:29:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48152
IP address blocks: 194.116.128.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/6c59cb-84ef-4218-8d7b-ff41d817b443/1/0cdYFDmjqhL-oc1YfshLdQmj_Ho.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/6c59cb-84ef-4218-8d7b-ff41d817b443/1/0cdYFDmjqhL-oc1YfshLdQmj_Ho.mft
rsync://rpki.ripe.net/repository/DEFAULT/0cdYFDmjqhL-oc1YfshLdQmj_Ho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Sep 2024 13:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:69:20:01:8f:70:c4:b1:69:53:fe:94:4c:57:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1c7581439a3aa12fea1cd587ec84b7509a3fc7a
Validity
Not Before: Jan 1 14:29:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4431700f4d60a5a2fa912a5b350a83432faa8304
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:3c:2b:c5:9c:0a:84:0b:9c:f4:64:35:18:d8:
ca:b9:8b:d8:04:c0:b2:93:6c:0e:d8:6e:8f:6b:47:
35:92:5d:c8:bc:8a:06:4e:1e:17:fe:0b:eb:fe:6e:
58:e9:14:d9:e6:1d:e0:91:2e:76:fc:15:57:ef:21:
3b:14:44:15:78:6c:9c:ba:99:bc:24:ae:62:35:55:
50:6c:98:a0:66:33:76:b5:0f:b1:26:79:ba:ea:67:
9d:24:e9:d1:38:de:61:d5:ce:51:2e:b5:84:21:10:
7f:aa:e0:c9:af:eb:bf:2a:c9:ea:78:26:8e:65:8d:
0f:63:51:9a:e0:a8:e9:bb:18:40:17:6d:43:43:d7:
8d:c0:67:ca:32:5c:cb:43:d4:a8:45:31:6a:b5:00:
d2:09:7d:6b:de:f6:e7:f1:e3:8e:a7:02:a0:cb:a4:
a2:eb:0d:49:b9:83:76:a7:bb:c6:ed:5e:d4:75:19:
cc:71:9a:03:f8:9f:b4:97:3e:40:d6:83:c5:8e:b4:
9d:d8:15:51:62:e6:90:ea:09:1d:b9:31:7c:f8:b2:
be:9a:dd:ab:52:69:92:5e:69:7c:34:7e:ff:b3:0d:
4d:14:d3:1a:3a:3d:f9:7a:00:75:e9:45:0c:61:f1:
46:2d:77:52:26:fa:53:1a:79:0a:86:af:9d:fb:d5:
93:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:31:70:0F:4D:60:A5:A2:FA:91:2A:5B:35:0A:83:43:2F:AA:83:04
X509v3 Authority Key Identifier:
keyid:D1:C7:58:14:39:A3:AA:12:FE:A1:CD:58:7E:C8:4B:75:09:A3:FC:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0cdYFDmjqhL-oc1YfshLdQmj_Ho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/6c59cb-84ef-4218-8d7b-ff41d817b443/1/RDFwD01gpaL6kSpbNQqDQy-qgwQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/6c59cb-84ef-4218-8d7b-ff41d817b443/1/0cdYFDmjqhL-oc1YfshLdQmj_Ho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.116.128.0/23
Signature Algorithm: sha256WithRSAEncryption
0a:b8:91:62:8c:d2:8a:a2:a3:2a:a2:90:48:a6:b2:89:d6:b6:
f7:c8:b0:fb:88:ca:e6:45:f4:85:c7:83:01:c4:b5:9e:c2:2f:
02:db:1c:00:3d:d7:25:fc:76:09:bc:c2:1b:3b:f1:ce:eb:dc:
b2:9f:d5:bb:78:d6:c7:44:c9:65:b8:1a:1c:f5:9b:4e:5a:9e:
e1:04:84:34:7f:b9:ac:8c:d1:9a:fc:d8:a3:9b:2d:92:10:e3:
14:fe:5e:ea:49:fb:78:82:da:3c:51:39:19:f4:8c:c0:fe:7a:
c2:29:57:d8:88:52:b1:5b:7e:49:5f:26:07:14:80:d2:c3:02:
56:01:a2:8a:5b:8c:45:08:b4:b8:dc:5a:38:01:30:28:7e:15:
45:3b:f6:17:b7:dd:91:a1:ce:0d:1e:8f:bd:2e:b3:8a:2a:79:
63:0e:74:81:71:5f:1d:65:56:34:34:a6:5b:7d:4b:7e:aa:00:
89:4b:a1:fb:8c:5e:bd:a6:5d:10:1b:dd:ec:15:fc:3c:82:db:
8a:61:90:be:3b:ae:41:27:27:f6:48:c3:11:67:3a:01:0c:a4:
1e:47:d2:b8:3f:64:28:27:b9:88:3e:c3:fb:07:04:70:87:19:
04:e8:fa:56:5e:e7:7d:99:0a:82:dc:45:e0:a3:55:6b:71:28:
b0:40:bc:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 22:15:07 2024 by rpki-client on console-ams.rpki-client.org