Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/DqcjcKl6dm5ywICzUJzxEgP5pnY.roa
File: DqcjcKl6dm5ywICzUJzxEgP5pnY.roa (raw, json)
Hash identifier: X70bJsFT2ae+IchS2c8+ElmUpkbyeRwwGDtIcMYEpeI=
Subject key identifier: 0E:A7:23:70:A9:7A:76:6E:72:C0:80:B3:50:9C:F1:12:03:F9:A6:76
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 018CC348C1159B29980EB3B8B3D3D2D32BDE
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/DqcjcKl6dm5ywICzUJzxEgP5pnY.roa
Signing time: Mon 01 Jan 2024 04:29:34 +0000
ROA not before: Mon 01 Jan 2024 04:29:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 400039
IP address blocks: 46.37.106.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Apr 2024 20:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:c1:15:9b:29:98:0e:b3:b8:b3:d3:d2:d3:2b:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Jan 1 04:29:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0ea72370a97a766e72c080b3509cf11203f9a676
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:cb:5c:f6:96:a4:e9:92:4c:80:2c:47:17:e4:
5c:25:b1:e5:9e:d8:7d:a9:eb:4a:de:9c:13:8b:6d:
2c:3e:93:5e:b3:2e:a7:92:2c:e8:82:44:3c:5b:f9:
d8:51:1b:2b:28:da:7f:ef:d3:cc:74:56:ad:ec:78:
01:0a:47:a2:ca:40:8d:dd:61:79:54:41:83:5b:77:
34:3e:e0:0b:01:88:ca:67:16:4a:f0:7d:13:fc:3b:
3b:de:b6:c6:e1:5a:84:59:1c:04:4d:95:ce:96:5d:
7c:f0:ef:e4:5c:6b:fe:ee:5a:7e:68:60:1a:fd:ce:
a4:35:eb:a1:90:9e:b0:44:48:67:aa:b0:fd:bf:00:
79:d9:5e:a9:32:9f:63:f3:c6:89:60:00:56:70:01:
da:3a:7d:c4:7a:35:30:51:fb:ed:4f:22:14:f8:04:
a2:e1:f3:7e:36:ea:36:db:4d:1d:3b:5c:42:7b:69:
4d:de:8c:64:05:22:8c:47:f6:1c:8d:ee:6d:a0:62:
ea:98:62:b6:80:ea:43:22:6e:0c:26:a4:69:d4:61:
d8:62:cd:78:ea:ca:b1:d7:f0:7f:1d:ca:20:7e:a1:
ae:32:02:3c:c2:d0:4f:12:65:3f:1f:ab:59:96:13:
70:30:91:49:66:e7:ff:de:98:81:a3:3b:51:d5:ed:
64:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:A7:23:70:A9:7A:76:6E:72:C0:80:B3:50:9C:F1:12:03:F9:A6:76
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/DqcjcKl6dm5ywICzUJzxEgP5pnY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.106.0/24
Signature Algorithm: sha256WithRSAEncryption
91:15:00:fb:47:57:cc:8b:dc:cf:d7:bc:c4:e1:3d:20:d9:32:
89:2e:a7:4b:40:6e:e4:35:db:05:8b:e3:f5:0d:19:6b:d6:c3:
02:fa:6e:7c:11:a0:88:50:21:35:ed:70:ec:e6:c0:0a:f4:10:
c8:2b:fc:d4:c5:1d:63:64:ee:14:e8:ef:13:ed:22:66:17:67:
e2:b2:1c:94:43:ea:8d:28:7d:53:b9:4d:28:0b:df:a1:0c:64:
a7:c0:08:67:a5:34:d5:27:c6:2e:95:21:83:49:cc:14:a1:14:
da:3f:31:4d:e5:c1:1a:fd:38:ea:7d:dd:fe:40:ad:f3:4b:07:
91:b7:cd:38:f8:17:38:1c:c1:88:5c:78:a7:cc:c1:52:b6:0d:
ca:1a:9a:da:5f:e8:f3:20:40:37:f4:eb:ed:98:5e:f5:35:c3:
bb:60:ad:eb:27:88:6c:71:24:6d:60:73:03:3e:08:d0:a1:98:
49:f0:35:91:04:0b:03:84:8e:09:8a:0f:90:68:08:1c:68:c3:
9c:e8:f6:e7:35:d6:43:ff:49:69:4d:a3:8a:23:4f:df:c0:1c:
ca:2f:d7:43:b2:8a:6b:a6:71:28:b3:dc:17:05:5b:76:97:bc:
00:2d:75:12:3d:5d:71:40:c4:2c:e3:d1:f2:d7:34:67:46:33:
50:2c:1f:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 05:50:25 2024 by rpki-client on console-ams.rpki-client.org