Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/c8b40c-2c0b-47ff-b921-e631463b123b/1/7tJMLAYiBsNIOgcgwiQ8xJqSWQ0.roa
File: 7tJMLAYiBsNIOgcgwiQ8xJqSWQ0.roa (raw, json)
Hash identifier: 63zmTKJ6GKt1z9NK9tTAmpRTH5K08kwrovo/E+7DsAU=
Subject key identifier: EE:D2:4C:2C:06:22:06:C3:48:3A:07:20:C2:24:3C:C4:9A:92:59:0D
Certificate issuer: /CN=1170356135adf47ed9708cb0a13680894c2339ea
Certificate serial: 018CC50142DF602B7A06424A1B1E65BD7B77
Authority key identifier: 11:70:35:61:35:AD:F4:7E:D9:70:8C:B0:A1:36:80:89:4C:23:39:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EXA1YTWt9H7ZcIywoTaAiUwjOeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/c8b40c-2c0b-47ff-b921-e631463b123b/1/7tJMLAYiBsNIOgcgwiQ8xJqSWQ0.roa
Signing time: Mon 01 Jan 2024 12:30:43 +0000
ROA not before: Mon 01 Jan 2024 12:30:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20902
IP address blocks: 193.192.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/c8b40c-2c0b-47ff-b921-e631463b123b/1/EXA1YTWt9H7ZcIywoTaAiUwjOeo.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/c8b40c-2c0b-47ff-b921-e631463b123b/1/EXA1YTWt9H7ZcIywoTaAiUwjOeo.mft
rsync://rpki.ripe.net/repository/DEFAULT/EXA1YTWt9H7ZcIywoTaAiUwjOeo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Jun 2024 03:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:42:df:60:2b:7a:06:42:4a:1b:1e:65:bd:7b:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1170356135adf47ed9708cb0a13680894c2339ea
Validity
Not Before: Jan 1 12:30:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=eed24c2c062206c3483a0720c2243cc49a92590d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:89:64:3b:28:b6:ab:92:2c:5d:66:68:d9:49:
69:ed:cb:67:79:b0:df:02:4b:7b:70:6a:5d:47:a4:
cc:a6:b5:a8:7f:bd:a1:ed:da:61:ca:4b:f3:84:ea:
c4:2a:df:79:27:2a:60:38:90:80:bc:72:1a:a5:9d:
9e:42:1f:ed:76:e6:8f:8b:26:2b:d4:58:c2:bb:38:
dc:f4:52:f1:d5:36:63:3c:7d:df:92:7b:86:18:03:
b4:79:0e:17:f0:f2:dd:be:d1:36:1c:a9:a4:31:64:
87:bb:eb:24:ab:27:9e:05:60:70:c9:33:d2:96:69:
76:7c:42:0b:ed:b9:9b:9a:8f:fb:bd:8b:7a:01:3c:
15:e9:80:7c:4a:ad:68:f1:3e:74:af:2e:28:7f:cf:
54:3f:ba:03:ca:e5:9f:e5:cd:02:a6:d1:a6:a6:ac:
e4:21:bb:21:69:8b:d9:af:d7:d3:8c:e8:e3:bb:d4:
e1:5e:2c:d7:b2:5f:85:48:78:92:be:fd:c8:6d:37:
75:70:10:cc:66:98:e3:66:98:1a:e2:ab:8c:ab:17:
bb:ad:e4:e6:a4:96:c0:35:b3:f1:c7:a2:f1:e6:c2:
cf:63:34:69:79:ac:9d:1a:dc:53:ea:4c:b3:5c:86:
ed:46:7b:ab:0c:a0:90:0c:4b:e0:e8:74:74:2b:b6:
4a:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:D2:4C:2C:06:22:06:C3:48:3A:07:20:C2:24:3C:C4:9A:92:59:0D
X509v3 Authority Key Identifier:
keyid:11:70:35:61:35:AD:F4:7E:D9:70:8C:B0:A1:36:80:89:4C:23:39:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EXA1YTWt9H7ZcIywoTaAiUwjOeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/c8b40c-2c0b-47ff-b921-e631463b123b/1/7tJMLAYiBsNIOgcgwiQ8xJqSWQ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/c8b40c-2c0b-47ff-b921-e631463b123b/1/EXA1YTWt9H7ZcIywoTaAiUwjOeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.192.14.0/24
Signature Algorithm: sha256WithRSAEncryption
95:a9:4f:bc:c0:3d:1d:8e:5e:b7:e4:e1:c1:f7:93:5f:42:06:
51:02:c2:eb:75:a1:65:aa:fb:d2:ed:75:e5:c9:ee:fb:07:f8:
b1:30:61:b3:e5:22:47:5e:a9:87:39:d4:3f:e1:8c:8c:35:74:
a4:b5:61:6e:33:32:90:7b:a0:35:06:20:a8:70:e0:86:d7:81:
27:5a:88:da:4e:36:8f:6d:6e:47:71:f2:4b:8e:fb:5c:d6:90:
6d:19:fc:49:6f:72:7d:47:fc:6a:32:1a:e6:97:8f:ec:15:54:
d1:98:c6:12:10:02:88:f2:20:9c:2b:ae:0c:9c:0d:2e:d4:be:
57:01:ec:a9:42:a5:00:b9:71:14:fc:39:7d:f9:47:31:28:2c:
70:29:44:b1:f6:e5:d6:42:dc:e6:2f:d6:97:96:65:95:ae:9a:
c8:34:9f:c9:99:a2:aa:4a:87:6a:3c:0d:c6:e6:b5:11:59:06:
46:fd:6c:2a:d7:74:c0:23:84:1b:35:5d:6a:36:09:9a:7f:11:
6e:66:40:13:3f:78:cc:4d:4a:fe:13:19:44:7f:ef:fe:86:e9:
f6:6b:0e:4c:90:a9:2a:a3:56:0a:bc:9f:50:87:1f:d7:7c:c0:
85:ac:33:c7:cb:31:86:71:18:1f:2f:09:1d:35:b5:c7:4e:12:
8f:8d:c5:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 20 10:39:32 2024 by rpki-client on console-ams.rpki-client.org