Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/1KPRYiPqNgQkD01y-4yIJyq1o-w.roa
File: 1KPRYiPqNgQkD01y-4yIJyq1o-w.roa (raw, json)
Hash identifier: vYNmtXPqjQQxCJ3MQHJ0qJWlREkvvbPGFOjD9GAfJTM=
Subject key identifier: D4:A3:D1:62:23:EA:36:04:24:0F:4D:72:FB:8C:88:27:2A:B5:A3:EC
Certificate issuer: /CN=cf1df6667da38e57a25b1945fa40e593e5adfa00
Certificate serial: 018CC8DEDDE7484B6C4359CE03DA1C795478
Authority key identifier: CF:1D:F6:66:7D:A3:8E:57:A2:5B:19:45:FA:40:E5:93:E5:AD:FA:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/1KPRYiPqNgQkD01y-4yIJyq1o-w.roa
Signing time: Tue 02 Jan 2024 06:31:38 +0000
ROA not before: Tue 02 Jan 2024 06:31:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197171
IP address blocks: 195.246.124.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:dd:e7:48:4b:6c:43:59:ce:03:da:1c:79:54:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf1df6667da38e57a25b1945fa40e593e5adfa00
Validity
Not Before: Jan 2 06:31:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d4a3d16223ea3604240f4d72fb8c88272ab5a3ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:cb:66:eb:ab:39:07:33:3b:68:eb:fa:40:55:
ee:11:e8:15:09:58:1c:30:eb:0e:1a:c4:47:89:58:
08:07:0c:1c:91:13:98:7a:ad:9a:b0:7f:0b:a3:f9:
f0:a2:5c:6e:24:d8:90:05:95:37:ef:c5:f7:f6:0f:
26:68:91:b0:ae:9e:87:5c:d8:b0:59:5b:cd:c8:c5:
cb:cc:5e:7c:66:70:b7:0e:b7:a2:ab:e9:e7:36:77:
3f:f6:e8:51:a1:38:0f:48:19:80:4a:b7:99:c2:74:
24:07:e5:2f:49:04:ea:d0:d0:15:74:6b:79:d8:38:
b4:4c:98:34:34:6c:f8:93:b6:51:6d:8d:bf:6f:3f:
3d:d4:92:3c:a8:43:e7:14:9f:f4:0e:6b:59:5d:eb:
a7:63:3d:19:d4:a5:4d:42:ff:22:b8:be:ae:f5:9a:
81:5d:bc:81:0a:64:67:f5:3c:37:dd:05:d1:bc:71:
7b:bd:fe:e9:aa:81:36:c0:21:df:a4:0a:88:73:fb:
1b:9b:34:04:a7:02:ee:d1:d7:67:1f:01:3b:58:6b:
ad:e7:5e:bf:50:7c:4f:7a:ce:01:e2:24:f4:29:23:
19:86:f0:17:78:8e:0b:ec:d9:23:62:1a:c4:23:67:
a0:d0:50:69:5f:db:b8:6c:d2:9f:01:8d:1a:c0:ae:
ad:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:A3:D1:62:23:EA:36:04:24:0F:4D:72:FB:8C:88:27:2A:B5:A3:EC
X509v3 Authority Key Identifier:
keyid:CF:1D:F6:66:7D:A3:8E:57:A2:5B:19:45:FA:40:E5:93:E5:AD:FA:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/1KPRYiPqNgQkD01y-4yIJyq1o-w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.246.124.0/23
Signature Algorithm: sha256WithRSAEncryption
02:96:bf:ab:41:9d:a0:3b:48:7b:5d:af:c0:26:48:7e:c0:12:
6f:6e:e8:e0:c9:23:a3:c1:ea:f2:a6:88:04:a8:67:5d:83:55:
08:ba:b0:74:df:73:c7:04:55:71:68:43:f0:42:58:39:5a:a7:
dc:fc:0a:ed:9b:dd:02:ff:f3:cc:45:ca:28:49:16:5b:69:42:
f1:87:a6:89:49:42:a6:ce:db:dd:0c:fc:0d:fe:06:4a:e0:c9:
6e:f3:8b:fc:82:d2:a1:c4:e8:e1:65:2e:fe:fb:cb:a1:56:22:
67:ec:95:fb:78:73:65:4f:45:45:ec:d9:5f:c8:0f:a7:8b:c6:
0d:a2:71:55:dd:8d:be:f8:53:15:bb:8d:9f:cf:f7:fa:fe:4d:
27:9f:0d:9e:f8:c9:e5:86:17:35:8b:26:74:bd:b4:38:72:a5:
b8:b2:4e:16:c1:4d:74:9a:24:df:54:65:d7:53:89:c1:f7:ba:
ca:76:b3:88:85:9c:6b:02:00:b8:ae:f8:df:63:25:8d:91:c8:
c7:1a:91:4b:09:08:3b:6c:a8:4c:a4:70:a6:37:e6:53:94:41:
08:77:95:ab:c7:20:d6:f3:df:9e:5e:90:af:4d:5e:a3:05:31:
2d:6c:33:42:28:c4:92:e5:35:cd:37:43:32:4b:71:b0:5c:01:
82:58:d5:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 18:04:29 2024 by rpki-client on console-fra.rpki-client.org