Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/b1bf57-679f-4564-b701-cb296708dec8/1/CXJmIZSlb3Bm0L_F0PphGkLC-R0.roa
File: CXJmIZSlb3Bm0L_F0PphGkLC-R0.roa (raw, json)
Hash identifier: Z2taV5IouaKLvYvvI13Z5H/JhBaJcu+PDP9dCLn1bo4=
Subject key identifier: 09:72:66:21:94:A5:6F:70:66:D0:BF:C5:D0:FA:61:1A:42:C2:F9:1D
Certificate issuer: /CN=a69749fa2337db33a76474eb812c034e30509d2a
Certificate serial: 018DC7270764B6F75F0AFBE9A0ACDF41A52C
Authority key identifier: A6:97:49:FA:23:37:DB:33:A7:64:74:EB:81:2C:03:4E:30:50:9D:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ppdJ-iM32zOnZHTrgSwDTjBQnSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/b1bf57-679f-4564-b701-cb296708dec8/1/CXJmIZSlb3Bm0L_F0PphGkLC-R0.roa
Signing time: Tue 20 Feb 2024 15:34:00 +0000
ROA not before: Tue 20 Feb 2024 15:34:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34177
IP address blocks: 156.118.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/b1bf57-679f-4564-b701-cb296708dec8/1/ppdJ-iM32zOnZHTrgSwDTjBQnSo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/b1bf57-679f-4564-b701-cb296708dec8/1/ppdJ-iM32zOnZHTrgSwDTjBQnSo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ppdJ-iM32zOnZHTrgSwDTjBQnSo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 04:03:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:c7:27:07:64:b6:f7:5f:0a:fb:e9:a0:ac:df:41:a5:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a69749fa2337db33a76474eb812c034e30509d2a
Validity
Not Before: Feb 20 15:34:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0972662194a56f7066d0bfc5d0fa611a42c2f91d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:12:b6:53:54:9a:a0:b2:d6:e4:a2:e6:09:7d:
0c:31:fc:d7:33:dc:04:a5:76:80:ae:f1:a0:fd:b2:
d6:40:cc:a5:2c:bf:17:4b:86:1f:37:3e:15:40:6c:
9f:79:ac:18:8f:e5:49:83:a4:97:eb:5f:71:0b:0d:
4d:47:84:40:7b:41:2f:d4:d4:1a:8c:9e:1e:c4:e0:
12:83:1c:f8:84:b4:c8:cd:f4:bb:c0:5d:85:fd:e0:
92:b5:c0:ff:89:7d:fe:0f:ae:b2:fe:7c:20:57:74:
e5:15:53:e6:e0:90:2f:8b:19:42:40:e5:c3:57:f6:
32:3c:27:49:41:a5:f5:05:e0:da:ba:89:b9:ff:3b:
d6:7a:df:42:6b:77:04:26:71:a2:89:69:cb:80:85:
0f:89:9e:21:ef:8b:3c:af:29:ec:14:c9:c0:ad:5f:
06:57:7e:0e:c4:f0:62:ed:5d:97:e6:e2:dd:e9:ee:
98:05:89:b6:ec:05:dc:03:03:27:a0:06:8b:07:2d:
ad:04:bf:3b:60:2e:92:1d:13:33:5f:7f:a6:05:97:
a7:09:2d:a6:e1:1b:26:7e:6c:42:c2:03:d1:86:c5:
37:e2:c6:24:cf:42:66:2c:28:fc:32:11:07:dd:4b:
8c:f7:18:c0:76:6c:9d:4f:df:c3:56:97:6f:7d:dc:
6d:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:72:66:21:94:A5:6F:70:66:D0:BF:C5:D0:FA:61:1A:42:C2:F9:1D
X509v3 Authority Key Identifier:
keyid:A6:97:49:FA:23:37:DB:33:A7:64:74:EB:81:2C:03:4E:30:50:9D:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ppdJ-iM32zOnZHTrgSwDTjBQnSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b1bf57-679f-4564-b701-cb296708dec8/1/CXJmIZSlb3Bm0L_F0PphGkLC-R0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b1bf57-679f-4564-b701-cb296708dec8/1/ppdJ-iM32zOnZHTrgSwDTjBQnSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
156.118.2.0/24
Signature Algorithm: sha256WithRSAEncryption
60:f2:fd:ab:63:48:eb:89:af:c1:c6:d3:cf:b8:31:62:d6:59:
e9:4d:e9:26:49:94:0a:df:7a:4c:78:0d:04:a8:a2:28:90:2b:
2e:ac:30:59:d6:23:e3:64:43:3d:0c:95:40:e9:32:50:56:dc:
69:a1:36:0e:e1:2e:dd:72:5a:f7:d0:69:0c:81:e4:45:ae:58:
83:ee:9f:99:44:97:6b:dd:83:43:66:06:ee:dc:c6:cb:6c:a9:
30:eb:b9:f2:87:88:c2:dd:c0:cb:2e:5a:7d:4b:12:d0:bc:91:
75:25:08:5d:83:19:34:b7:61:12:de:16:68:78:73:d0:99:e7:
95:d8:a8:20:72:e9:7d:92:04:0b:93:c6:97:7f:fb:0f:4f:94:
aa:3d:44:e1:fa:a3:37:c3:5a:ac:6e:77:35:dc:28:c6:49:33:
4e:3e:3f:5b:9e:86:a2:06:c1:e6:83:08:23:e1:89:9d:e1:7e:
db:26:ba:6a:bb:f1:79:5e:9d:9e:f0:99:1b:7f:90:ed:de:f6:
af:3e:66:b7:1b:28:c0:53:b4:a9:6d:3f:ef:ac:4f:78:80:2e:
00:ad:10:ee:16:d6:47:e0:1a:88:b7:b4:62:99:b7:28:52:23:
a9:4f:52:59:10:6f:77:16:82:f2:74:dc:c8:09:7b:51:f9:52:
34:33:ab:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 12:06:12 2024 by rpki-client on console-ams.rpki-client.org