Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/JD7qqSlETTih7CpgOICwdI3mlSM.roa
File: JD7qqSlETTih7CpgOICwdI3mlSM.roa (raw, json)
Hash identifier: Ux+beEXh74k8b44mOn/cRwnpXbQLWXrka72JkHiC7pw=
Subject key identifier: 24:3E:EA:A9:29:44:4D:38:A1:EC:2A:60:38:80:B0:74:8D:E6:95:23
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 018CC348B7249599B7BF3E172E8F4A63DEBA
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/JD7qqSlETTih7CpgOICwdI3mlSM.roa
Signing time: Mon 01 Jan 2024 04:29:31 +0000
ROA not before: Mon 01 Jan 2024 04:29:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9009
IP address blocks: 46.37.116.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Apr 2024 11:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:b7:24:95:99:b7:bf:3e:17:2e:8f:4a:63:de:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Jan 1 04:29:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=243eeaa929444d38a1ec2a603880b0748de69523
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:9d:5f:3c:e7:65:41:fe:45:59:6f:c6:f6:20:
ad:86:b4:7a:c0:5c:2c:7d:8b:3f:27:04:0d:f4:26:
3d:58:00:48:ee:e5:1c:20:14:52:6f:ce:83:fd:a6:
df:1e:30:04:3b:73:9d:42:67:01:1b:c9:73:a9:b5:
1e:2d:cd:6d:e4:86:01:89:68:a6:66:38:df:be:25:
76:38:87:44:16:5d:bf:7e:59:81:5c:6d:44:1b:72:
e3:15:d8:f9:fb:bd:0d:f0:fc:93:83:07:69:ab:97:
74:69:09:8d:86:a5:1e:cf:4e:31:c0:68:6d:05:2b:
5d:f7:93:b4:bf:09:dc:ec:63:03:52:a8:aa:0c:fe:
31:bf:d7:24:0c:e3:40:fc:e5:76:7a:01:1e:f3:97:
5b:ff:c6:68:3e:a3:dd:db:9b:cb:7f:bb:67:ec:7c:
6b:52:1a:91:17:60:47:3a:e6:49:f8:08:18:63:5e:
27:97:35:0e:fe:8f:7a:e5:82:25:62:0a:e5:59:4d:
1c:bb:70:bb:28:96:96:a7:53:87:20:95:74:db:af:
5c:af:5e:15:1c:78:4d:1d:bc:2a:ff:84:0b:99:48:
eb:ca:f5:a6:a4:14:e0:4b:62:4a:48:44:49:76:8b:
34:36:26:0c:d9:53:98:b7:c5:8b:be:ac:46:c0:3e:
44:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:3E:EA:A9:29:44:4D:38:A1:EC:2A:60:38:80:B0:74:8D:E6:95:23
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/JD7qqSlETTih7CpgOICwdI3mlSM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.116.0/24
Signature Algorithm: sha256WithRSAEncryption
70:fa:63:c6:8e:4d:0f:3f:3d:96:92:6c:cc:a4:49:08:c3:04:
dd:36:0d:b2:c7:fe:a8:b1:89:fd:53:f0:ab:5e:de:91:78:85:
16:52:95:84:ae:40:e2:fa:9b:37:3d:36:a7:c6:e1:bb:52:cb:
a8:2f:33:f3:c5:a7:50:f9:88:58:7f:2a:23:8e:94:dd:ba:0f:
73:3e:b7:41:60:94:b0:ec:f3:d6:61:83:a5:3a:bb:f0:25:79:
24:d6:75:2d:33:19:4f:31:24:e3:28:6e:1a:97:01:71:36:c0:
31:6d:09:dd:51:3b:70:54:e1:11:64:93:b2:e5:fe:bc:8f:31:
1f:e1:5b:bc:91:7d:52:50:e4:e5:02:fe:4d:b7:15:6d:e3:02:
8f:5d:72:e0:90:fd:f8:13:f8:51:73:66:13:cf:cb:a1:1f:1d:
09:bd:4b:7e:99:25:70:b6:07:da:b9:56:47:d6:ab:a5:de:e8:
41:04:95:b3:62:5b:06:16:89:26:5a:9a:a6:2a:86:c5:37:9f:
3e:02:44:0c:41:15:57:6f:85:2d:04:72:e4:48:0e:47:87:77:
7a:4d:77:3c:77:b7:8c:7d:89:6f:3d:8b:96:8e:2b:99:4a:d0:
19:14:db:ad:de:b4:44:e3:cb:b4:b6:bb:da:ff:e5:78:73:36:
2f:cc:19:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 20:41:01 2024 by rpki-client on console-ams.rpki-client.org