Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/foo1sictJkMhfSVXWigaWWi3cW8.roa
File: foo1sictJkMhfSVXWigaWWi3cW8.roa (raw, json)
Hash identifier: vaIBvASpPr7SLw28lmz0JgrlPYCiCxSZv/J+gcFerfY=
Subject key identifier: 7E:8A:35:B2:27:2D:26:43:21:7D:25:57:5A:28:1A:59:68:B7:71:6F
Certificate issuer: /CN=174737d8a484d12534ca40f8dd818a588c3b3de2
Certificate serial: 018CC3B72D3BE44C9E29DFF27F8D0F05D29D
Authority key identifier: 17:47:37:D8:A4:84:D1:25:34:CA:40:F8:DD:81:8A:58:8C:3B:3D:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F0c32KSE0SU0ykD43YGKWIw7PeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/foo1sictJkMhfSVXWigaWWi3cW8.roa
Signing time: Mon 01 Jan 2024 06:30:10 +0000
ROA not before: Mon 01 Jan 2024 06:30:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208890
IP address blocks: 193.228.162.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/F0c32KSE0SU0ykD43YGKWIw7PeI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/F0c32KSE0SU0ykD43YGKWIw7PeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/F0c32KSE0SU0ykD43YGKWIw7PeI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 21:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:2d:3b:e4:4c:9e:29:df:f2:7f:8d:0f:05:d2:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=174737d8a484d12534ca40f8dd818a588c3b3de2
Validity
Not Before: Jan 1 06:30:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7e8a35b2272d2643217d25575a281a5968b7716f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:17:6f:9a:29:56:d5:dd:99:cb:0d:9f:3e:b8:
0e:49:b6:b9:d3:0c:88:91:85:3b:f7:c3:fd:58:3b:
9b:5e:88:78:b6:eb:05:a9:49:92:c3:5d:32:1e:af:
ef:37:87:f3:c9:57:95:6a:96:b4:5c:95:1d:f0:b0:
d3:5e:fa:6e:1e:df:98:63:0d:17:57:95:41:68:f1:
2e:85:3d:e2:b3:d9:52:d7:b2:f5:92:74:39:cf:90:
c4:c4:f5:c7:c5:15:f3:d2:e8:ea:be:1f:e2:49:76:
94:23:5c:9a:97:17:08:1f:aa:b1:16:3c:40:a0:2d:
e1:dc:a6:2e:f1:b4:7d:15:0a:2c:d5:c8:e9:35:a4:
22:fb:c5:d1:dd:e0:22:4c:f8:73:13:8e:f5:e5:db:
4e:b7:38:89:d8:e7:7d:a5:9c:6e:79:ce:f9:b6:1e:
2c:c1:cc:cd:05:d4:4d:da:49:a9:2b:dd:3d:82:d4:
60:c0:c4:8a:ee:b3:d8:db:02:f3:3a:ab:71:10:df:
a7:90:f4:ef:1f:35:1a:9c:b3:f5:f7:f2:ad:2b:c0:
54:e2:17:05:d8:82:60:ec:7a:95:f5:90:af:57:6b:
d7:32:ed:1b:ac:fc:7b:70:85:59:25:81:f9:11:d7:
1e:50:47:e3:9f:85:8c:26:a2:1a:26:2b:ea:e9:34:
13:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:8A:35:B2:27:2D:26:43:21:7D:25:57:5A:28:1A:59:68:B7:71:6F
X509v3 Authority Key Identifier:
keyid:17:47:37:D8:A4:84:D1:25:34:CA:40:F8:DD:81:8A:58:8C:3B:3D:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F0c32KSE0SU0ykD43YGKWIw7PeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/foo1sictJkMhfSVXWigaWWi3cW8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/F0c32KSE0SU0ykD43YGKWIw7PeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.228.162.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:a4:a7:45:79:17:ee:9e:9b:9c:87:3d:bc:10:a7:d4:00:95:
f9:86:5f:f2:44:4d:24:5b:84:bb:21:9d:79:23:53:60:e7:19:
d2:2e:1f:0f:58:65:be:55:54:e8:a3:b8:0a:b7:58:a9:31:d7:
a1:64:44:77:dc:54:20:dd:ca:f0:8a:f9:f4:9c:bb:5c:e2:2a:
e9:f9:b4:67:72:0d:cb:a8:34:8e:52:79:c1:b9:04:4a:53:c6:
b9:b6:4b:7a:b7:a7:72:1e:a4:e5:c7:42:90:93:41:f1:42:03:
c1:af:91:0f:bb:d1:16:ba:bd:9b:21:d5:cf:79:36:22:df:95:
f1:32:a6:06:a4:4b:d9:41:a9:8a:74:e3:29:a5:35:5c:ca:38:
24:a9:9a:c9:44:40:ee:45:3c:1d:a2:47:bb:be:a2:0b:8d:80:
55:98:37:ff:33:af:ab:d6:1a:19:55:2e:17:10:a0:c5:7e:88:
c2:8c:d1:81:83:d7:3a:5b:cf:55:e2:05:7d:8b:6d:83:3e:bd:
60:6f:1c:a4:39:e7:91:5c:8e:ef:10:93:25:ed:14:e5:69:88:
14:84:60:ca:0d:ad:e2:b6:dd:f1:0c:22:e0:82:f2:65:6a:c3:
87:be:5a:08:f9:53:d5:1c:ec:3b:3a:7a:de:fe:ad:00:9d:2f:
f6:61:60:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 01:13:53 2024 by rpki-client on console-ams.rpki-client.org