Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/ab9012-bfae-4729-b993-09733cb0269e/1/N-8Zk4kO2utmQC-ywwu7AXC8Lbc.roa
File: N-8Zk4kO2utmQC-ywwu7AXC8Lbc.roa (raw, json)
Hash identifier: 9/eImTn4kG133BumR3q8s0OePqsgR4zPHrdf4tz4pQg=
Subject key identifier: 37:EF:19:93:89:0E:DA:EB:66:40:2F:B2:C3:0B:BB:01:70:BC:2D:B7
Certificate issuer: /CN=1ab70e3488dc831d45a75744e2f8bba267fd31d6
Certificate serial: 018CC26D0FC27831D1CCBBFAB9B6765755B5
Authority key identifier: 1A:B7:0E:34:88:DC:83:1D:45:A7:57:44:E2:F8:BB:A2:67:FD:31:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GrcONIjcgx1Fp1dE4vi7omf9MdY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/ab9012-bfae-4729-b993-09733cb0269e/1/N-8Zk4kO2utmQC-ywwu7AXC8Lbc.roa
Signing time: Mon 01 Jan 2024 00:29:36 +0000
ROA not before: Mon 01 Jan 2024 00:29:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198463
IP address blocks: 185.117.104.0/22 maxlen: 24
2a06:8400::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/ab9012-bfae-4729-b993-09733cb0269e/1/GrcONIjcgx1Fp1dE4vi7omf9MdY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/ab9012-bfae-4729-b993-09733cb0269e/1/GrcONIjcgx1Fp1dE4vi7omf9MdY.mft
rsync://rpki.ripe.net/repository/DEFAULT/GrcONIjcgx1Fp1dE4vi7omf9MdY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 20:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:0f:c2:78:31:d1:cc:bb:fa:b9:b6:76:57:55:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ab70e3488dc831d45a75744e2f8bba267fd31d6
Validity
Not Before: Jan 1 00:29:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=37ef1993890edaeb66402fb2c30bbb0170bc2db7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a2:8f:dd:2e:93:39:54:e7:2c:7d:c0:c2:69:
cd:0b:4d:0a:82:61:9c:7e:ca:28:d4:2a:29:b1:b7:
a0:c4:1e:14:62:77:cc:0e:4a:34:8c:bd:b3:a5:9a:
e8:9c:4c:07:3e:20:56:53:70:cb:cd:d9:d0:77:45:
4d:5d:0b:65:f3:b9:2b:73:45:62:76:25:12:c1:fa:
1d:ce:1a:fb:f2:a1:29:4c:5e:20:14:b0:6e:8b:f2:
4e:2f:1a:cf:de:82:dc:56:66:be:da:c9:f6:1e:22:
64:69:72:1e:38:dc:8c:dd:20:99:8c:8b:eb:c9:4c:
91:4e:9a:58:05:59:ed:e1:b7:73:8e:96:fc:43:6d:
ba:dd:5b:1d:a5:8b:ff:c9:88:c9:11:72:56:42:99:
64:4d:ef:4f:40:02:01:73:a5:e7:c1:a8:a7:20:a4:
57:e2:d3:bc:9a:fc:c3:2e:ff:5a:7e:16:11:5a:28:
b5:dd:8a:10:85:8f:d8:24:00:d2:89:aa:c2:3e:ae:
9e:b7:a7:74:0a:f9:5c:76:6b:88:9d:65:ff:fc:65:
de:39:48:56:cc:8a:18:44:a5:7b:10:5b:15:e3:f7:
9e:cf:66:e1:bb:66:6a:64:ca:18:dc:5b:dd:d9:e6:
f6:e8:f1:1d:13:ea:65:a8:d3:17:40:bd:f4:61:14:
d7:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:EF:19:93:89:0E:DA:EB:66:40:2F:B2:C3:0B:BB:01:70:BC:2D:B7
X509v3 Authority Key Identifier:
keyid:1A:B7:0E:34:88:DC:83:1D:45:A7:57:44:E2:F8:BB:A2:67:FD:31:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GrcONIjcgx1Fp1dE4vi7omf9MdY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/ab9012-bfae-4729-b993-09733cb0269e/1/N-8Zk4kO2utmQC-ywwu7AXC8Lbc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/ab9012-bfae-4729-b993-09733cb0269e/1/GrcONIjcgx1Fp1dE4vi7omf9MdY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.117.104.0/22
IPv6:
2a06:8400::/29
Signature Algorithm: sha256WithRSAEncryption
70:9d:92:ac:31:bb:bc:0d:e4:51:a2:81:0c:ca:7a:5a:8c:28:
01:f8:4c:36:fe:b6:6a:fa:ec:90:2f:45:48:46:d8:3e:aa:3e:
9c:fb:e3:74:cf:f4:30:cd:e3:2d:cb:22:55:c1:a2:2e:4b:ff:
8a:f1:ad:a5:ca:8b:d8:5a:85:58:90:8a:88:a8:14:e2:69:77:
a9:8c:b8:4f:6c:52:c8:6c:71:c6:9b:5a:60:06:15:7b:2d:b9:
56:71:01:ac:69:1d:d7:8a:b3:da:51:4a:7a:67:94:3e:1a:98:
cd:01:d0:96:f6:0f:47:59:bb:de:80:eb:56:5a:fd:21:b5:46:
3e:37:ca:70:c4:a0:ae:41:63:f9:be:49:dd:ff:fa:bb:6b:42:
71:e8:d4:db:b0:de:e4:5c:9e:f1:84:ee:b9:1d:be:77:30:e6:
86:72:79:64:29:ae:b7:9c:8a:05:a5:0a:3a:ec:c5:ef:cd:6b:
40:ed:08:95:69:e5:a7:df:66:b6:02:f8:51:f2:04:7a:f4:6b:
50:7b:39:bd:2b:bd:63:5e:8d:bc:68:55:92:2b:b2:1c:05:28:
51:58:05:8b:b1:a3:b4:5e:01:e0:6d:85:3c:8c:06:66:47:4f:
d4:2b:95:2c:2d:66:15:01:4e:46:95:ac:77:28:77:23:d3:44:
c6:b3:16:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 05:24:20 2024 by rpki-client on console-ams.rpki-client.org