Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/8c4ec4-d637-4d3f-9de8-05559c1f5915/1/sJV1Yq2y3q70JWktFlE_RKmffZM.roa
File: sJV1Yq2y3q70JWktFlE_RKmffZM.roa (raw, json)
Hash identifier: uoQ4D1/x96jD+bERttR8DmK+6fsmqD30ReLCI4dpkjo=
Subject key identifier: B0:95:75:62:AD:B2:DE:AE:F4:25:69:2D:16:51:3F:44:A9:9F:7D:93
Certificate issuer: /CN=6a366fdfcaa20e80e8bfc330a4d8b1be7de6a1d0
Certificate serial: 018CC8DEF97858A5136E07E1C9A311148092
Authority key identifier: 6A:36:6F:DF:CA:A2:0E:80:E8:BF:C3:30:A4:D8:B1:BE:7D:E6:A1:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ajZv38qiDoDov8MwpNixvn3modA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/8c4ec4-d637-4d3f-9de8-05559c1f5915/1/sJV1Yq2y3q70JWktFlE_RKmffZM.roa
Signing time: Tue 02 Jan 2024 06:31:45 +0000
ROA not before: Tue 02 Jan 2024 06:31:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199351
IP address blocks: 176.124.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/8c4ec4-d637-4d3f-9de8-05559c1f5915/1/ajZv38qiDoDov8MwpNixvn3modA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/8c4ec4-d637-4d3f-9de8-05559c1f5915/1/ajZv38qiDoDov8MwpNixvn3modA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ajZv38qiDoDov8MwpNixvn3modA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 09:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:f9:78:58:a5:13:6e:07:e1:c9:a3:11:14:80:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a366fdfcaa20e80e8bfc330a4d8b1be7de6a1d0
Validity
Not Before: Jan 2 06:31:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b0957562adb2deaef425692d16513f44a99f7d93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:b0:10:48:34:6a:ab:c6:27:a5:71:c0:e4:57:
cb:3b:96:db:94:1a:0a:dc:dc:69:46:77:21:01:60:
c5:c5:f9:5f:18:c2:fe:4a:45:09:1c:06:9c:f7:91:
2c:cb:97:aa:1c:ac:55:1f:bb:f6:7f:9b:fe:bd:7c:
a3:ae:c3:5e:76:f5:90:b3:73:bf:26:b1:ae:f7:ed:
55:15:8b:e0:d5:d5:4c:91:94:57:62:88:19:7c:b5:
f7:09:a9:56:50:dc:b4:8b:0a:92:b3:bf:83:cf:82:
2a:78:f9:61:df:09:e8:0b:3e:56:4e:9c:47:2a:ef:
8a:60:6d:87:26:9f:59:fa:93:e5:ec:d8:91:a0:37:
55:19:59:60:89:cf:bd:c4:3d:46:06:4c:15:3a:aa:
9d:ce:19:a8:d4:f0:7b:68:d2:28:17:97:d0:a8:af:
25:80:63:e6:ba:64:b3:4a:c4:e4:aa:ff:e7:3e:95:
9d:64:1b:7f:9f:67:4a:c6:ad:4e:2d:9e:7c:f6:b6:
b8:a0:1b:5e:e8:7c:ff:04:12:ea:da:c2:69:5b:dc:
9c:62:a1:2e:3d:cd:52:ec:e9:eb:40:32:3d:2d:23:
c6:44:e6:8b:33:3e:69:b4:c0:0c:7c:32:c9:88:1d:
a2:a0:6e:d5:09:c8:91:c3:38:35:a8:d1:0e:d4:75:
b5:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:95:75:62:AD:B2:DE:AE:F4:25:69:2D:16:51:3F:44:A9:9F:7D:93
X509v3 Authority Key Identifier:
keyid:6A:36:6F:DF:CA:A2:0E:80:E8:BF:C3:30:A4:D8:B1:BE:7D:E6:A1:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ajZv38qiDoDov8MwpNixvn3modA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8c4ec4-d637-4d3f-9de8-05559c1f5915/1/sJV1Yq2y3q70JWktFlE_RKmffZM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8c4ec4-d637-4d3f-9de8-05559c1f5915/1/ajZv38qiDoDov8MwpNixvn3modA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.124.231.0/24
Signature Algorithm: sha256WithRSAEncryption
c7:3f:9f:e2:7d:4f:4c:7f:c4:d1:81:31:c0:eb:e9:f8:af:08:
db:f5:a2:cb:26:b1:f9:93:fa:9f:ec:e4:4e:5f:52:e0:09:7b:
54:77:1f:cb:57:3b:87:35:20:c5:7a:f7:6f:85:6c:ac:ae:e9:
06:6c:68:5c:ca:98:b7:23:bb:c4:db:38:31:e0:f1:c6:3f:f8:
a3:b6:e5:f6:07:a1:3b:5c:44:76:43:77:47:de:4f:12:ac:8b:
2f:27:db:ab:47:05:34:9f:17:22:04:f8:d1:db:7b:45:6a:53:
4d:b5:03:5e:5b:88:2f:74:e0:0d:fe:6b:5f:ba:52:2e:a3:9e:
af:12:97:a2:78:d8:28:4b:90:79:22:87:36:69:dc:ab:23:30:
08:bf:15:25:53:d7:13:4a:3f:b5:49:54:52:9f:b2:8a:45:d8:
a1:52:10:d2:5e:c9:04:c4:5a:a7:6e:9d:83:69:31:33:ee:80:
59:dd:ba:f1:12:3f:19:6c:84:97:ea:b5:a1:b2:89:70:f4:3f:
55:ab:85:01:51:c3:d5:5b:8c:f8:21:21:58:00:bd:36:79:84:
a2:19:b6:b8:27:e7:37:06:bd:ba:1c:f4:5f:05:a6:67:f1:40:
04:d1:3d:4f:1b:ec:42:2b:97:94:51:11:7e:27:f4:c8:a1:4f:
6d:a9:c0:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 14:05:54 2024 by rpki-client on console-ams.rpki-client.org