Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/x4JssPS1Vv0_F4C9HGGD5KkxgOY.roa
File: x4JssPS1Vv0_F4C9HGGD5KkxgOY.roa (raw, json)
Hash identifier: a0eU8Gvnf13n93mQil8HRMU+mT/EILLUEul9u9Kc2Mk=
Subject key identifier: C7:82:6C:B0:F4:B5:56:FD:3F:17:80:BD:1C:61:83:E4:A9:31:80:E6
Certificate issuer: /CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1
Certificate serial: 018E42D739515B1D550C204BDDAE46E97BC1
Authority key identifier: F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/x4JssPS1Vv0_F4C9HGGD5KkxgOY.roa
Signing time: Fri 15 Mar 2024 15:59:44 +0000
ROA not before: Fri 15 Mar 2024 15:59:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 193.160.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.mft
rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:42:d7:39:51:5b:1d:55:0c:20:4b:dd:ae:46:e9:7b:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1
Validity
Not Before: Mar 15 15:59:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c7826cb0f4b556fd3f1780bd1c6183e4a93180e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:83:5f:33:fc:b3:9b:8f:57:ad:b3:c7:68:36:
36:e2:56:b6:0b:43:a2:5e:ab:8d:09:45:a4:32:cc:
6b:09:d0:ae:2d:26:3c:87:c4:ef:bc:be:1a:53:2c:
9b:49:56:13:54:59:26:b8:6b:94:79:4c:af:26:77:
4b:f5:f7:ee:38:a0:8c:2c:e5:12:73:73:b8:dd:9a:
f2:48:48:a7:c7:22:3a:5c:0a:bd:ed:e4:35:ae:8c:
93:42:d7:76:e7:ea:69:d4:77:dc:8b:cb:31:8c:48:
a5:18:28:3e:4e:86:88:3a:78:17:0c:1d:33:75:64:
10:b0:97:e4:24:4b:6b:32:15:85:b3:39:cb:aa:35:
18:44:03:1d:e0:0d:d1:ac:c2:e5:a4:ea:aa:d6:31:
e0:27:ef:27:c8:de:96:c2:8f:89:93:fc:df:6d:df:
04:c5:a3:9b:4f:05:23:7d:5a:3a:83:e2:c4:37:46:
ec:a1:b0:83:16:7c:9e:66:cd:de:ea:d0:53:e1:3c:
be:21:a1:27:64:83:cc:05:ff:bb:56:82:5d:a4:9a:
02:2e:df:6e:87:f6:ac:87:da:a7:1e:72:0f:54:a1:
0f:c7:41:b0:be:14:f8:89:12:62:b5:5b:32:4d:7a:
ce:34:e1:01:59:b3:49:0f:f3:57:3f:e2:0a:57:3e:
ee:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:82:6C:B0:F4:B5:56:FD:3F:17:80:BD:1C:61:83:E4:A9:31:80:E6
X509v3 Authority Key Identifier:
keyid:F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/x4JssPS1Vv0_F4C9HGGD5KkxgOY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.160.8.0/24
Signature Algorithm: sha256WithRSAEncryption
70:f7:3b:ed:e3:19:26:6c:fa:0e:09:ac:5e:29:7d:eb:b2:4e:
04:e4:f3:a6:f1:af:75:7b:6d:0a:35:de:bd:3d:05:b8:4f:27:
d4:e3:d6:b1:68:d8:cc:fe:39:ba:71:39:29:52:24:9d:a0:7a:
79:cf:4a:cb:4c:97:c1:10:8a:cc:4a:83:ad:86:c9:b9:ac:17:
2d:97:71:7c:60:a5:68:2d:31:a2:77:6f:34:6b:7b:a9:7a:fe:
00:e5:83:af:e7:7b:c6:a7:0b:b8:84:d2:bd:e5:d8:29:de:46:
7e:20:60:83:e0:71:42:87:7a:3e:8f:c8:57:39:41:2a:05:77:
0a:29:fa:97:d8:29:5a:d3:0e:ba:69:49:92:03:3b:32:27:5e:
47:d7:2d:f4:75:1a:96:f2:a7:f4:44:0b:8a:66:37:87:4f:86:
bd:d7:d7:e4:cf:02:45:dd:28:13:c5:d3:e1:8b:a6:a1:ff:46:
44:88:43:2f:fa:c4:86:11:8e:eb:91:99:13:d6:1d:e7:ad:01:
10:a5:93:2f:02:f6:6b:a2:42:57:d9:09:72:6b:d4:97:15:47:
8a:72:bc:dc:6b:3d:6b:78:1c:d6:85:a9:a6:b8:f1:a5:8e:53:
5c:3c:65:5a:33:d4:78:ce:e8:40:20:00:62:c2:a5:32:cd:71:
64:2d:7c:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 17:39:29 2024 by rpki-client on console-ams.rpki-client.org