Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/r9TRukFPgCmNrHvcMMf_DppB690.roa
File: r9TRukFPgCmNrHvcMMf_DppB690.roa (raw, json)
Hash identifier: EWB7WIReTyQuKc10OD/fNzVe4p+VWtP51gol/nqAwDs=
Subject key identifier: AF:D4:D1:BA:41:4F:80:29:8D:AC:7B:DC:30:C7:FF:0E:9A:41:EB:DD
Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Certificate serial: 018D34E5CCD444FC59FA46C2A709BF8E15F9
Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/r9TRukFPgCmNrHvcMMf_DppB690.roa
Signing time: Tue 23 Jan 2024 05:58:11 +0000
ROA not before: Tue 23 Jan 2024 05:58:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215762
IP address blocks: 46.23.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.mft
rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 May 2024 04:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:34:e5:cc:d4:44:fc:59:fa:46:c2:a7:09:bf:8e:15:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Validity
Not Before: Jan 23 05:58:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=afd4d1ba414f80298dac7bdc30c7ff0e9a41ebdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ec:08:6c:5b:18:6a:e7:09:d5:30:54:c1:fb:
75:e3:d7:a3:62:f4:00:cb:fc:7b:19:d7:0d:aa:96:
20:4e:85:4e:cd:bd:cc:e7:90:2a:44:83:b6:85:d6:
d1:24:53:a2:e3:ee:89:50:26:a0:48:58:a8:32:eb:
81:a7:c5:c7:85:51:e8:ad:a8:f5:7b:4f:62:0f:93:
e2:f2:7b:00:53:50:ab:26:2e:bf:52:0f:0a:85:ae:
a2:03:05:bd:e1:71:84:eb:1e:b4:c2:f2:35:4e:34:
dd:b1:cb:fd:6c:df:72:d4:38:b1:58:dc:41:b4:b8:
c2:87:9d:35:2a:12:c7:a7:b7:ff:c4:05:3b:27:e5:
71:24:bc:f4:ff:72:f2:d6:7f:ca:cd:32:7f:17:d5:
ca:71:12:aa:f5:cc:f3:af:62:57:44:47:59:02:4e:
a9:90:99:ce:2f:d9:a2:49:f4:72:95:b6:0a:13:30:
27:9e:1b:88:f5:71:52:98:af:81:c4:76:e8:e6:d1:
5a:76:02:52:80:9b:ac:41:85:9e:d4:ef:62:02:6d:
03:db:8e:14:b3:3d:2f:1d:ad:4c:39:57:12:3d:93:
a7:1c:28:7c:7e:38:32:8a:ee:02:fd:67:b6:b8:ed:
43:9f:fe:ae:1e:12:f4:54:36:87:fb:6f:ec:d1:a6:
ab:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:D4:D1:BA:41:4F:80:29:8D:AC:7B:DC:30:C7:FF:0E:9A:41:EB:DD
X509v3 Authority Key Identifier:
keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/r9TRukFPgCmNrHvcMMf_DppB690.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.23.108.0/24
Signature Algorithm: sha256WithRSAEncryption
34:97:f2:35:f1:df:12:60:a8:97:3b:c0:33:14:e4:df:f3:6e:
49:24:f4:ac:d5:3a:a1:80:60:bd:b6:ae:3e:f5:cc:45:30:14:
a4:1a:04:8e:97:e1:d1:5c:b4:a9:19:be:f7:c2:9a:c0:30:17:
81:7e:c9:3c:9f:be:ec:44:a8:8d:58:30:df:e4:cc:21:1a:5c:
c8:3e:99:ca:d1:d5:b0:87:5c:04:e7:ee:fb:58:70:50:0b:d8:
6b:73:72:5a:95:43:14:da:74:39:ac:c7:c2:82:4c:23:f5:b5:
e1:cd:7f:2f:18:9e:3b:68:2c:4b:6c:3d:ef:0d:96:08:1e:04:
af:45:6a:57:18:38:7f:9f:93:6e:ed:5d:e6:0f:12:78:ff:72:
3e:b5:27:08:61:7d:ab:a4:6a:55:1c:e6:dc:eb:c3:f1:d7:80:
23:0b:db:65:f5:42:f8:24:c4:f0:c5:5f:88:93:17:85:a2:e7:
64:d4:5d:4a:94:d2:7b:76:8c:97:85:32:f2:07:98:94:07:43:
36:f9:f5:d0:6e:52:53:d1:c2:e8:cd:8b:66:27:bb:ae:d6:01:
4e:b5:c2:af:49:10:61:84:5e:7c:d9:52:a6:0b:c9:09:c5:9b:
ad:bc:37:a1:72:20:f8:63:d2:5a:1a:4b:01:d5:16:45:97:fd:
d9:8e:17:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 12:57:23 2024 by rpki-client on console-ams.rpki-client.org