Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/ce1643-c08d-40f6-9444-af714ad52f29/1/IAvzKw60vtm0vuuFrXAYGfGynoU.roa
File: IAvzKw60vtm0vuuFrXAYGfGynoU.roa (raw, json)
Hash identifier: Yf0VPpvEXUex/brZhZa0DSQ43+/El1hPq0tFajWjdnY=
Subject key identifier: 20:0B:F3:2B:0E:B4:BE:D9:B4:BE:EB:85:AD:70:18:19:F1:B2:9E:85
Certificate issuer: /CN=b7a8fea8fca800c1fc49ef2d85c92e323752b0ed
Certificate serial: 018CC64B71BE966CA7283AA66ED31A0DBDDD
Authority key identifier: B7:A8:FE:A8:FC:A8:00:C1:FC:49:EF:2D:85:C9:2E:32:37:52:B0:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t6j-qPyoAMH8Se8thckuMjdSsO0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/ce1643-c08d-40f6-9444-af714ad52f29/1/IAvzKw60vtm0vuuFrXAYGfGynoU.roa
Signing time: Mon 01 Jan 2024 18:31:22 +0000
ROA not before: Mon 01 Jan 2024 18:31:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 559
IP address blocks: 193.36.32.0/24 maxlen: 24
193.5.22.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/ce1643-c08d-40f6-9444-af714ad52f29/1/t6j-qPyoAMH8Se8thckuMjdSsO0.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/ce1643-c08d-40f6-9444-af714ad52f29/1/t6j-qPyoAMH8Se8thckuMjdSsO0.mft
rsync://rpki.ripe.net/repository/DEFAULT/t6j-qPyoAMH8Se8thckuMjdSsO0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Jun 2024 08:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:71:be:96:6c:a7:28:3a:a6:6e:d3:1a:0d:bd:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7a8fea8fca800c1fc49ef2d85c92e323752b0ed
Validity
Not Before: Jan 1 18:31:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=200bf32b0eb4bed9b4beeb85ad701819f1b29e85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:3b:f1:0b:b4:e7:a9:2f:2f:9d:90:d7:29:bc:
22:46:eb:65:16:74:2f:f8:4b:2c:96:92:c4:c1:95:
45:da:54:f8:43:e6:8a:a2:27:1d:09:69:dd:23:5a:
1e:6f:c3:9c:e8:8b:34:3d:f8:80:11:48:8e:66:b2:
2c:4e:bc:e7:1f:83:e9:38:ce:8d:99:7c:57:33:7f:
62:7a:8b:c6:5c:5e:ff:c0:53:12:cc:90:17:7d:00:
92:a1:89:98:21:78:a9:e8:fe:26:6b:8b:6d:94:e4:
2d:28:86:a8:4d:dd:49:97:6d:3a:db:8f:ed:74:f4:
e7:5f:c0:be:63:82:c8:12:27:7b:b8:45:0d:b3:ef:
ea:01:3f:3a:e1:25:0e:31:10:3b:b4:04:98:45:c1:
6d:ef:90:72:6c:77:db:31:d4:4c:92:c1:7d:7b:71:
71:1f:6b:4b:cc:76:e4:b2:fd:d0:80:06:ee:3a:62:
c7:06:cd:03:47:d1:19:6a:45:6e:6e:ef:b0:2b:d6:
e2:b2:a9:b0:84:bc:e4:9e:83:65:a4:0b:ad:7d:c1:
4b:45:6a:1e:a1:c0:96:58:1c:69:a4:6b:16:c0:73:
2e:82:68:02:22:c1:ef:85:5f:07:04:15:bd:97:ad:
77:fc:2c:9f:a4:f8:2f:8d:d4:34:12:89:18:4f:4e:
3a:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:0B:F3:2B:0E:B4:BE:D9:B4:BE:EB:85:AD:70:18:19:F1:B2:9E:85
X509v3 Authority Key Identifier:
keyid:B7:A8:FE:A8:FC:A8:00:C1:FC:49:EF:2D:85:C9:2E:32:37:52:B0:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t6j-qPyoAMH8Se8thckuMjdSsO0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/ce1643-c08d-40f6-9444-af714ad52f29/1/IAvzKw60vtm0vuuFrXAYGfGynoU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/ce1643-c08d-40f6-9444-af714ad52f29/1/t6j-qPyoAMH8Se8thckuMjdSsO0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.5.22.0/24
193.36.32.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:48:96:73:9b:ce:59:7a:9f:32:5d:cc:7a:ae:76:3c:ee:cd:
b4:b0:79:7a:50:e4:e9:4e:a5:3e:bb:3f:b9:3d:14:be:2d:3a:
c4:5a:09:0f:77:a3:17:37:76:50:00:59:7f:eb:65:67:17:64:
c1:fe:17:10:24:56:31:ea:94:34:b4:08:b3:8b:f5:42:78:c5:
e7:88:af:58:b0:b4:11:82:68:c7:d5:d2:11:cd:24:35:b0:20:
b2:c3:52:ec:a7:75:92:0a:5f:99:00:5e:70:11:2d:16:e2:cf:
89:df:dd:c9:87:e1:3e:51:14:2a:15:70:43:ec:0f:78:f6:7c:
8b:d1:51:e0:ef:b2:9e:9d:87:cd:67:de:98:f8:13:0c:37:66:
52:5a:68:11:ee:0e:83:68:ed:33:86:a8:40:ab:9d:19:39:79:
07:25:0b:9c:31:f7:7c:ae:e0:e8:c4:94:74:01:2d:e8:e4:d5:
66:83:b6:8e:1e:7a:e5:c3:9e:69:37:6f:c5:ed:ab:5e:71:42:
0b:a9:c8:44:36:e0:6f:e3:a0:c6:32:31:50:04:7f:14:dc:d6:
3d:f6:57:30:8f:d5:20:34:25:1d:6c:f6:99:1b:8e:97:8e:d8:
4b:e7:ba:13:36:a1:7c:96:12:39:c0:9a:c8:13:18:c5:a8:85:
d3:cc:52:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 13:28:35 2024 by rpki-client on console-fra.rpki-client.org