Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/03a0aa-2b69-4a98-a61b-60b988c95230/1/d6d0orQtdfpzC97zOI4Tz7_PQLM.roa
File: d6d0orQtdfpzC97zOI4Tz7_PQLM.roa (raw, json)
Hash identifier: cdsZX7DUTVA5G8yz4/pfX88zyI+GklbTRRrzpgLEwnw=
Subject key identifier: 77:A7:74:A2:B4:2D:75:FA:73:0B:DE:F3:38:8E:13:CF:BF:CF:40:B3
Certificate issuer: /CN=f454f84f78085f8ea03a49689cbe372e74ac153c
Certificate serial: 018CC64B3746D942C488ACE30E8C45A1D6B0
Authority key identifier: F4:54:F8:4F:78:08:5F:8E:A0:3A:49:68:9C:BE:37:2E:74:AC:15:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9FT4T3gIX46gOklonL43LnSsFTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/03a0aa-2b69-4a98-a61b-60b988c95230/1/d6d0orQtdfpzC97zOI4Tz7_PQLM.roa
Signing time: Mon 01 Jan 2024 18:31:07 +0000
ROA not before: Mon 01 Jan 2024 18:31:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39647
IP address blocks: 194.30.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/03a0aa-2b69-4a98-a61b-60b988c95230/1/9FT4T3gIX46gOklonL43LnSsFTw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/03a0aa-2b69-4a98-a61b-60b988c95230/1/9FT4T3gIX46gOklonL43LnSsFTw.mft
rsync://rpki.ripe.net/repository/DEFAULT/9FT4T3gIX46gOklonL43LnSsFTw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Jun 2024 16:02:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:37:46:d9:42:c4:88:ac:e3:0e:8c:45:a1:d6:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f454f84f78085f8ea03a49689cbe372e74ac153c
Validity
Not Before: Jan 1 18:31:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=77a774a2b42d75fa730bdef3388e13cfbfcf40b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:2a:4d:88:b9:90:0f:c4:c0:e8:63:1b:8d:1f:
bf:62:0f:68:4d:c3:48:3c:ac:bf:4a:eb:cf:38:d6:
2e:3d:ff:45:05:74:fc:f2:51:98:48:6d:e1:5f:cb:
c4:72:ed:a4:1f:72:03:ff:66:23:e5:4a:9c:03:90:
b6:9a:bf:ff:8b:94:d1:19:32:c7:34:6d:11:b1:47:
66:3b:9f:57:fa:d6:db:2f:37:00:5c:0f:5d:66:31:
30:19:ab:b2:fd:f9:b3:b5:a6:ac:5a:02:4c:6e:27:
72:50:d0:01:e9:4a:54:72:97:51:40:f3:1d:99:75:
be:24:ac:c0:c5:65:50:ce:99:59:6f:de:cb:6d:56:
0f:eb:83:cc:f8:89:ef:fb:11:95:2b:29:12:16:38:
dd:75:8c:db:84:11:9f:ae:31:0f:36:84:e7:9d:7b:
6e:6a:e8:15:4d:3e:d4:11:92:f8:07:8d:61:2f:8f:
69:51:09:6c:47:b5:01:ba:21:2d:41:95:d7:0f:e8:
51:01:d9:5a:15:d3:8a:9c:a1:d8:a3:56:c2:9c:f3:
d9:33:65:1f:3a:c7:a6:7a:fe:c5:81:40:6b:0a:6c:
f3:4b:78:eb:7a:f8:2a:19:e5:0a:1c:ab:9e:81:0a:
7b:4f:2c:42:23:df:b8:27:e6:03:77:e3:eb:7d:a8:
17:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:A7:74:A2:B4:2D:75:FA:73:0B:DE:F3:38:8E:13:CF:BF:CF:40:B3
X509v3 Authority Key Identifier:
keyid:F4:54:F8:4F:78:08:5F:8E:A0:3A:49:68:9C:BE:37:2E:74:AC:15:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9FT4T3gIX46gOklonL43LnSsFTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/03a0aa-2b69-4a98-a61b-60b988c95230/1/d6d0orQtdfpzC97zOI4Tz7_PQLM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/03a0aa-2b69-4a98-a61b-60b988c95230/1/9FT4T3gIX46gOklonL43LnSsFTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.30.175.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:28:1b:a3:2e:4d:ca:b2:61:6b:6f:20:cb:fa:90:ad:58:93:
0a:fe:e3:04:16:a0:64:1a:4c:28:af:73:fc:b7:bd:e3:8b:39:
a5:c6:d7:fd:a3:6f:3b:9e:45:57:ce:ae:6f:2f:2e:e8:ba:44:
4c:fb:48:e0:6a:cb:54:1c:5d:c1:6b:cd:72:5e:0f:4d:46:98:
6d:b7:5d:24:ab:ca:07:a6:30:d7:f0:78:fc:48:23:c4:57:68:
42:10:e9:8b:d4:31:ce:59:bc:03:68:6f:66:62:db:06:69:31:
12:a1:03:b2:20:59:51:6c:01:64:36:87:68:23:37:2b:06:29:
b5:41:b8:0c:1d:9a:44:7c:b1:95:32:1f:04:39:af:99:d6:5a:
b7:d3:37:33:8a:72:0e:de:7a:4d:3f:1b:f5:c9:d8:c8:82:b4:
8c:a1:78:e4:21:5c:23:37:0f:e2:89:d0:65:a4:2c:fa:0f:e0:
06:41:8b:40:03:bf:7d:ea:51:8c:04:a6:11:bc:aa:b7:84:b2:
78:ed:63:fc:13:4e:d4:5f:a5:5b:90:85:37:ab:b0:45:f7:46:
94:1d:67:cd:52:a6:56:d1:4b:6c:f9:b9:bd:77:93:55:1e:4e:
7a:ec:c2:b7:cc:cd:63:4c:2f:b6:f0:0d:c8:70:b3:4b:d9:4f:
b1:4c:cb:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 13 19:55:29 2024 by rpki-client on console-ams.rpki-client.org