Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/329968-247c-4dea-99d2-60107b4ea4eb/1/RRtn066IoJzSiQccXlc4HhNjXQw.roa
File: RRtn066IoJzSiQccXlc4HhNjXQw.roa (raw, json)
Hash identifier: tk4kYIkXyjLAYaYiy0wPYF6Z9sJ/F26DmqH9uc5jgg4=
Subject key identifier: 45:1B:67:D3:AE:88:A0:9C:D2:89:07:1C:5E:57:38:1E:13:63:5D:0C
Certificate issuer: /CN=1a79a0ac3312c1653f300b04510d9bf2c9c2a55f
Certificate serial: 018CC6B7AD85923AD2F9C4CBD5F74360F6A7
Authority key identifier: 1A:79:A0:AC:33:12:C1:65:3F:30:0B:04:51:0D:9B:F2:C9:C2:A5:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GnmgrDMSwWU_MAsEUQ2b8snCpV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/329968-247c-4dea-99d2-60107b4ea4eb/1/RRtn066IoJzSiQccXlc4HhNjXQw.roa
Signing time: Mon 01 Jan 2024 20:29:35 +0000
ROA not before: Mon 01 Jan 2024 20:29:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 680
IP address blocks: 194.76.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/329968-247c-4dea-99d2-60107b4ea4eb/1/GnmgrDMSwWU_MAsEUQ2b8snCpV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/329968-247c-4dea-99d2-60107b4ea4eb/1/GnmgrDMSwWU_MAsEUQ2b8snCpV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/GnmgrDMSwWU_MAsEUQ2b8snCpV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 May 2024 23:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:ad:85:92:3a:d2:f9:c4:cb:d5:f7:43:60:f6:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a79a0ac3312c1653f300b04510d9bf2c9c2a55f
Validity
Not Before: Jan 1 20:29:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=451b67d3ae88a09cd289071c5e57381e13635d0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a8:cb:97:68:fe:29:76:12:45:3c:58:c0:b7:
c8:c6:b0:b7:34:10:22:5b:53:50:40:08:c7:5b:d0:
46:a6:49:58:02:36:19:20:51:19:02:05:69:b6:e5:
f6:b9:8d:7d:92:9f:be:73:87:f8:d6:d8:10:c7:96:
7f:12:db:31:2c:51:d3:d8:fc:51:48:6c:87:b4:cf:
8e:e7:97:01:40:96:15:32:b8:54:f6:a8:b0:11:23:
69:43:1a:e2:58:a3:89:57:bc:a5:bd:e0:37:dc:10:
5f:1a:c1:7d:b5:62:e1:08:a1:db:0b:2d:5f:c9:d0:
9f:4f:3e:2e:e3:10:06:35:0d:d6:c5:5c:86:61:01:
0c:f5:08:30:22:68:6d:e5:01:ed:51:49:bb:ff:2e:
a5:b8:86:7f:cd:12:76:59:63:52:49:05:c2:5c:12:
c6:76:cf:1f:4b:24:fe:9a:ee:a8:29:6f:ea:d6:c2:
64:07:3e:8e:97:26:a7:b0:21:ec:a8:4a:51:53:4d:
bf:44:31:63:b9:e6:cb:1d:0a:11:fc:31:39:60:df:
e6:a6:d3:2d:8a:bc:71:ee:92:ba:2a:bb:dc:1a:43:
5e:c0:26:66:b5:8d:f6:04:2c:e7:12:87:23:ae:bc:
bc:d8:28:45:c5:84:cb:bc:61:09:04:06:83:be:42:
95:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:1B:67:D3:AE:88:A0:9C:D2:89:07:1C:5E:57:38:1E:13:63:5D:0C
X509v3 Authority Key Identifier:
keyid:1A:79:A0:AC:33:12:C1:65:3F:30:0B:04:51:0D:9B:F2:C9:C2:A5:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GnmgrDMSwWU_MAsEUQ2b8snCpV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/329968-247c-4dea-99d2-60107b4ea4eb/1/RRtn066IoJzSiQccXlc4HhNjXQw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/329968-247c-4dea-99d2-60107b4ea4eb/1/GnmgrDMSwWU_MAsEUQ2b8snCpV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.76.43.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:68:16:75:7c:2c:eb:d7:8d:be:53:c4:b2:ae:7f:02:88:0e:
c1:ba:53:3f:7a:15:c5:9d:de:4f:45:ae:5f:db:36:60:65:a3:
ef:28:4e:49:02:71:3b:25:a9:54:14:91:78:ba:a1:ea:88:e7:
25:cf:df:1b:7e:e4:7a:17:ae:f7:f7:38:94:36:e8:2f:13:9d:
0d:db:f3:93:3f:66:37:46:a2:df:f5:67:f0:40:a6:21:6d:ee:
27:ae:f7:db:0b:60:a8:51:9b:f2:1f:78:5b:d0:66:79:af:56:
cc:0c:35:bb:0e:68:a1:71:f2:7c:85:ad:99:cf:f1:57:39:ec:
55:82:1a:b6:64:e7:8a:d7:3c:38:a2:51:4f:a7:2c:6b:03:29:
66:23:34:a7:ef:9b:8c:4a:d7:d7:ce:7c:f0:0d:8d:03:9f:76:
23:6b:23:3a:ab:87:2b:06:64:68:79:8b:8c:4a:61:11:ae:b8:
14:41:e8:77:11:65:50:62:08:36:1b:fc:4b:00:94:09:4b:bd:
7f:a8:32:49:e6:57:0a:6b:2f:b6:54:05:51:c6:52:57:a8:b6:
29:14:92:df:95:1d:a8:ee:29:90:c9:36:7f:39:2a:7e:b2:35:
83:c2:ac:24:8d:35:bf:90:e9:e3:9b:25:a4:fc:cd:2a:b2:63:
ba:08:c7:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 08:12:07 2024 by rpki-client on console-ams.rpki-client.org