Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/QF5knuQFZ1MzmZtVJ1bogqbMSj8.roa
File: QF5knuQFZ1MzmZtVJ1bogqbMSj8.roa (raw, json)
Hash identifier: E7j2A0fb63PUius9/NjwAnAHElJQjbTAwKyb/Xyqlb4=
Subject key identifier: 40:5E:64:9E:E4:05:67:53:33:99:9B:55:27:56:E8:82:A6:CC:4A:3F
Certificate issuer: /CN=b72588c00eef715809eb5fdd6d6717cc28c0dfac
Certificate serial: 018CC34965C7701A2E004F44FDBD76C7FB62
Authority key identifier: B7:25:88:C0:0E:EF:71:58:09:EB:5F:DD:6D:67:17:CC:28:C0:DF:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tyWIwA7vcVgJ61_dbWcXzCjA36w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/QF5knuQFZ1MzmZtVJ1bogqbMSj8.roa
Signing time: Mon 01 Jan 2024 04:30:16 +0000
ROA not before: Mon 01 Jan 2024 04:30:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198580
IP address blocks: 193.32.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.mft
rsync://rpki.ripe.net/repository/DEFAULT/tyWIwA7vcVgJ61_dbWcXzCjA36w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 21:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:65:c7:70:1a:2e:00:4f:44:fd:bd:76:c7:fb:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72588c00eef715809eb5fdd6d6717cc28c0dfac
Validity
Not Before: Jan 1 04:30:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=405e649ee405675333999b552756e882a6cc4a3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:6d:69:14:69:44:3f:5b:04:25:74:26:c7:a2:
42:89:9c:02:06:f0:1f:1c:14:b4:89:57:38:90:50:
40:33:c8:5a:b6:f0:bd:6b:5d:8a:af:05:4f:52:40:
b3:f5:b5:64:8e:c3:bf:bc:8f:2a:4e:5f:9b:85:4c:
76:a2:66:48:84:06:1e:6d:8e:cb:14:27:5f:fc:df:
cc:53:b6:ad:b3:7f:70:ff:ff:56:aa:ff:05:40:d4:
bf:bb:58:9d:96:2a:0e:a6:47:8d:56:2d:0f:ea:1a:
b3:ef:41:43:7c:17:98:36:1a:b6:84:74:86:84:a1:
e1:9c:d2:08:34:a6:c0:db:1f:b6:53:86:a9:39:14:
79:65:15:f9:03:90:2a:52:98:40:ae:1a:e3:f5:55:
1d:fd:7b:c8:6b:1f:e4:ca:69:b6:19:5e:22:65:9d:
b3:c8:c5:2d:0e:0f:9d:02:b6:b0:9c:d9:ad:65:9b:
13:22:ed:3c:70:e6:42:16:2c:0d:8f:0d:bd:b0:3d:
77:fd:fa:2c:0a:76:a9:d8:b4:99:16:52:9a:71:5f:
ef:87:82:db:94:33:10:26:f0:28:32:71:8c:7f:46:
ac:e6:c8:1c:03:da:fa:4c:f5:71:ae:8a:ed:14:3d:
c0:62:71:fd:56:27:0b:5c:14:3a:89:d1:b8:b8:e5:
7d:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:5E:64:9E:E4:05:67:53:33:99:9B:55:27:56:E8:82:A6:CC:4A:3F
X509v3 Authority Key Identifier:
keyid:B7:25:88:C0:0E:EF:71:58:09:EB:5F:DD:6D:67:17:CC:28:C0:DF:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tyWIwA7vcVgJ61_dbWcXzCjA36w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/QF5knuQFZ1MzmZtVJ1bogqbMSj8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.32.203.0/24
Signature Algorithm: sha256WithRSAEncryption
15:60:24:99:75:1b:5a:dd:8f:59:47:6e:28:ed:1c:e1:d7:b1:
08:08:7e:af:65:00:bb:33:19:8a:ba:01:fb:d3:2e:02:f6:98:
a7:6d:4b:34:6f:8a:d4:73:48:32:39:3c:e4:05:74:54:57:dc:
0a:f4:ad:e6:6f:a5:27:96:18:e7:83:92:03:33:90:bb:7e:d0:
f7:bb:44:32:3c:90:18:07:76:38:88:b2:cf:29:e0:41:58:0d:
f3:bb:4f:b8:9e:04:f2:d6:4a:ba:ff:4b:df:a5:1d:29:09:57:
fe:e8:3b:72:59:93:e6:5e:00:90:0f:fe:6e:3f:ca:7d:fe:8a:
7c:f9:bf:3c:1f:01:93:ab:f1:97:f8:a0:d2:70:f8:c3:36:0b:
1c:05:b0:2a:2d:b3:9f:f2:d6:09:a5:51:5c:e1:0b:75:73:6a:
0d:d4:34:5a:d5:ad:d5:bc:1b:67:b4:1f:5b:6a:4b:79:cf:cd:
e6:19:8a:61:89:37:f9:ed:0c:e4:e3:84:97:ba:cc:bb:4c:40:
50:36:0d:db:66:fc:bd:b2:98:6d:62:00:f5:26:45:11:2d:f8:
72:05:52:42:52:be:bf:b1:31:de:79:02:a0:b3:86:e2:d5:60:
19:34:08:29:ce:db:11:23:14:57:25:28:5a:c5:ee:8c:47:d7:
a5:e5:8c:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 00:50:35 2024 by rpki-client on console-fra.rpki-client.org