Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/d96da6-12b2-446e-8d99-7cb345e8541a/1/1-X3ruYLPk4tHT2Wr0Una0-CBSb0.roa
File: 1-X3ruYLPk4tHT2Wr0Una0-CBSb0.roa (raw, json)
Hash identifier: mlCRS4XUt6CozuxDzTS2Vj9tt4BhTJZ9tQS8lmnnBNU=
Subject key identifier: F9:7D:EB:B9:82:CF:93:8B:47:4F:65:AB:D1:49:DA:D3:E0:81:49:BD
Certificate issuer: /CN=e4a714ffc598b15647bbafe2c6460a87eafbcf97
Certificate serial: 018CC8030901BDE63A644122CA3D3110B554
Authority key identifier: E4:A7:14:FF:C5:98:B1:56:47:BB:AF:E2:C6:46:0A:87:EA:FB:CF:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5KcU_8WYsVZHu6_ixkYKh-r7z5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/d96da6-12b2-446e-8d99-7cb345e8541a/1/1-X3ruYLPk4tHT2Wr0Una0-CBSb0.roa
Signing time: Tue 02 Jan 2024 02:31:31 +0000
ROA not before: Tue 02 Jan 2024 02:31:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8100
IP address blocks: 193.30.161.0/24 maxlen: 24
193.17.68.0/24 maxlen: 24
193.200.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/d96da6-12b2-446e-8d99-7cb345e8541a/1/5KcU_8WYsVZHu6_ixkYKh-r7z5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/d96da6-12b2-446e-8d99-7cb345e8541a/1/5KcU_8WYsVZHu6_ixkYKh-r7z5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/5KcU_8WYsVZHu6_ixkYKh-r7z5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 16:03:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:03:09:01:bd:e6:3a:64:41:22:ca:3d:31:10:b5:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4a714ffc598b15647bbafe2c6460a87eafbcf97
Validity
Not Before: Jan 2 02:31:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f97debb982cf938b474f65abd149dad3e08149bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:8d:fe:ff:2b:20:83:cf:db:5d:3f:91:50:4b:
fc:2c:b4:28:7e:a7:60:c0:82:00:4e:56:3e:1a:d5:
6a:01:6a:e9:ef:6c:12:fa:dc:fe:92:df:fa:f3:f4:
01:c3:f0:3d:71:4a:9a:1f:89:f9:5b:83:83:bc:1b:
57:5c:ad:f2:6b:32:ac:f1:7f:02:41:14:a9:b5:34:
8e:6b:2a:fa:22:37:3c:db:49:02:e3:4d:da:fc:78:
4e:32:3e:97:a2:76:0f:6a:15:94:58:74:62:50:e5:
df:fc:05:bd:a3:e0:a3:4e:d3:93:37:3d:ea:26:3e:
67:62:d0:ea:22:1b:d5:0e:b3:7d:69:20:ca:ca:82:
db:94:d6:75:03:aa:23:b3:9c:45:22:5b:f6:c6:5a:
bb:44:91:73:5a:c1:7e:01:2a:70:81:f8:92:36:65:
e0:d4:24:86:0a:e5:ea:b9:1a:cc:88:25:8d:8f:07:
78:71:47:7d:70:c9:a6:fd:81:48:3e:d8:eb:46:87:
65:c4:39:fb:24:f8:f1:f1:fb:64:7d:9c:5c:21:71:
da:6f:2e:ef:0b:2b:95:07:9e:97:12:ec:d7:78:4d:
f9:f9:34:27:43:cf:21:58:c4:23:c0:ea:d7:2b:17:
f9:fa:5b:25:52:03:17:5e:6e:76:04:0c:22:14:78:
52:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:7D:EB:B9:82:CF:93:8B:47:4F:65:AB:D1:49:DA:D3:E0:81:49:BD
X509v3 Authority Key Identifier:
keyid:E4:A7:14:FF:C5:98:B1:56:47:BB:AF:E2:C6:46:0A:87:EA:FB:CF:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5KcU_8WYsVZHu6_ixkYKh-r7z5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/d96da6-12b2-446e-8d99-7cb345e8541a/1/1-X3ruYLPk4tHT2Wr0Una0-CBSb0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/d96da6-12b2-446e-8d99-7cb345e8541a/1/5KcU_8WYsVZHu6_ixkYKh-r7z5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.17.68.0/24
193.30.161.0/24
193.200.30.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:8d:5c:1e:c6:dc:fd:0d:da:42:cd:d4:f2:8c:bf:4d:31:51:
10:46:60:fd:34:e4:95:e4:db:c0:4d:a6:ed:6c:6b:4f:bf:a5:
1c:e3:fa:99:55:4f:18:46:ca:89:20:ce:54:63:a9:b2:d9:77:
12:ec:ed:72:e4:ee:af:3e:5a:21:99:4e:cd:1d:f8:e9:0d:d2:
6c:9e:a1:18:e0:72:cd:1c:f2:0e:ae:77:72:9d:1f:37:1c:9e:
e4:83:25:59:87:8a:11:cb:54:1b:6b:61:ee:49:ac:da:3f:4e:
d8:c9:b1:78:7b:14:9a:6c:66:a7:20:44:11:9d:ff:68:90:43:
a2:2f:c4:17:b7:d6:05:98:d2:ef:74:a4:b1:89:36:f9:35:a1:
dd:9d:c6:e8:26:c6:ce:dc:d7:76:66:0e:a9:13:61:98:d2:ff:
28:9a:73:af:f6:2b:69:7a:12:83:b4:bd:b5:58:fa:5d:55:7e:
e2:b8:c2:76:e8:48:90:ee:a2:69:9f:94:56:f6:3a:78:53:6c:
7a:c4:70:9d:33:b0:31:f2:be:df:52:75:ad:e1:0d:d8:ce:f5:
13:7f:cc:35:96:ef:1a:56:2c:6e:12:f5:93:7d:eb:33:2c:29:
ee:04:8e:5d:98:d3:4f:17:ac:4a:68:84:9b:96:09:28:d1:77:
1e:33:7e:a6
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu May 2 18:09:20 2024 by rpki-client on console-fra.rpki-client.org