Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/3ljpaRDUE_6hYm31MKMV2bJct8E.roa
File: 3ljpaRDUE_6hYm31MKMV2bJct8E.roa (raw, json)
Hash identifier: 6xjPGQ/iI/JcNSUr5UGe7KcgyohmLe20g0hJYoPpX6A=
Subject key identifier: DE:58:E9:69:10:D4:13:FE:A1:62:6D:F5:30:A3:15:D9:B2:5C:B7:C1
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 018CC42575D0BB3F780665222CF88D9690D9
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/3ljpaRDUE_6hYm31MKMV2bJct8E.roa
Signing time: Mon 01 Jan 2024 08:30:38 +0000
ROA not before: Mon 01 Jan 2024 08:30:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212912
IP address blocks: 193.105.165.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Jun 2024 01:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:75:d0:bb:3f:78:06:65:22:2c:f8:8d:96:90:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Jan 1 08:30:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=de58e96910d413fea1626df530a315d9b25cb7c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:3f:d6:4d:5e:66:03:55:e8:11:18:d4:bc:4a:
62:15:4c:1d:74:fb:86:7a:a8:2b:62:b7:2b:1c:fe:
15:fd:ad:e8:1a:10:39:c4:61:71:d1:f7:6a:c3:88:
fe:eb:14:7d:fe:ac:1f:eb:44:3a:e1:e2:b9:48:96:
73:70:59:f3:d5:c9:1d:ba:80:43:da:c1:38:bf:3b:
60:24:c2:c8:9b:02:2e:b5:1d:1f:a4:fd:2b:e1:75:
26:f5:78:ef:38:a7:28:ab:39:c3:c3:5c:85:f7:8d:
7a:30:56:f7:86:b9:77:62:76:5f:cd:31:2d:7b:55:
1c:6a:fd:53:37:64:11:c6:b8:40:07:47:6d:d9:28:
28:e1:58:6d:c5:f0:e7:81:b4:28:9e:02:c5:55:55:
b8:b3:34:78:e6:7f:14:03:b5:6b:c2:55:78:e2:c0:
02:41:14:a2:05:4f:18:12:cb:df:18:1c:32:c6:56:
bc:8e:e7:6b:51:bd:f8:5d:68:6a:b4:45:db:c0:42:
a7:a0:67:7e:ac:4d:4e:db:3b:fe:9e:cd:e7:11:7b:
c0:30:85:9f:9f:70:ed:b0:6d:ba:dd:f1:78:ad:10:
db:aa:83:4a:3a:dc:27:50:3a:53:72:57:8d:4c:70:
68:4f:5b:53:dc:76:b6:fc:7b:40:29:a4:81:5e:14:
e8:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:58:E9:69:10:D4:13:FE:A1:62:6D:F5:30:A3:15:D9:B2:5C:B7:C1
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/3ljpaRDUE_6hYm31MKMV2bJct8E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.105.165.0/24
Signature Algorithm: sha256WithRSAEncryption
c1:16:5e:c5:9a:c4:ca:ef:f9:b0:2c:d9:c0:2d:e4:86:17:30:
35:80:c1:71:02:08:a0:21:d5:86:77:8e:9c:c0:80:57:74:75:
c1:f0:00:74:aa:d5:01:7b:77:d0:d4:ea:ab:d0:3a:8e:73:42:
42:fc:08:cc:db:b4:1a:2b:b2:b4:79:93:d9:88:8f:e7:3b:77:
78:57:4b:0c:37:ad:2c:76:ee:2e:b8:a0:dc:da:b2:73:a2:3c:
0d:46:00:1e:30:7e:94:ec:8e:86:55:88:f5:44:99:3f:de:f4:
52:c3:3e:0e:e0:14:eb:06:cb:80:00:d9:83:59:00:e3:a4:77:
11:80:2e:3d:2f:1b:eb:81:58:e6:52:ad:99:91:04:74:3e:ab:
98:51:04:3d:c0:14:ae:ea:9d:23:5b:50:b0:2d:5a:c3:79:07:
bc:d1:05:04:53:ae:e4:12:10:cf:80:54:76:2b:33:f6:81:0a:
36:ef:59:1f:a3:ad:c3:58:46:df:dd:3d:06:98:80:25:a9:9d:
70:42:ec:c1:19:86:95:9c:dd:7d:77:08:19:a4:b2:03:9c:39:
fc:b8:da:09:a4:27:34:17:ad:23:ee:52:1e:8a:11:14:89:57:
ed:8d:e6:3e:93:9d:bb:cd:3b:c8:67:e9:8c:04:69:e5:f2:d9:
e3:42:7a:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 4 10:21:34 2024 by rpki-client on console-ams.rpki-client.org