Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/8da624-31c5-4509-bc5a-2049f6abfd9d/1/dGYPKrauH7Fsl2KUZz7xK7-C6vc.roa
File: dGYPKrauH7Fsl2KUZz7xK7-C6vc.roa (raw, json)
Hash identifier: Tx6HPfXHmRDnkKx6nvkHZiImGFV5jnm8aIDGUzqqzxY=
Subject key identifier: 74:66:0F:2A:B6:AE:1F:B1:6C:97:62:94:67:3E:F1:2B:BF:82:EA:F7
Certificate issuer: /CN=93b474d05571df3d44f63cca21b40b6e12c392d9
Certificate serial: 018CC49389DF1F2087F08909937D6670936E
Authority key identifier: 93:B4:74:D0:55:71:DF:3D:44:F6:3C:CA:21:B4:0B:6E:12:C3:92:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k7R00FVx3z1E9jzKIbQLbhLDktk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/8da624-31c5-4509-bc5a-2049f6abfd9d/1/dGYPKrauH7Fsl2KUZz7xK7-C6vc.roa
Signing time: Mon 01 Jan 2024 10:30:52 +0000
ROA not before: Mon 01 Jan 2024 10:30:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 33925
IP address blocks: 193.189.98.0/23 maxlen: 23
31.14.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/8da624-31c5-4509-bc5a-2049f6abfd9d/1/k7R00FVx3z1E9jzKIbQLbhLDktk.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/8da624-31c5-4509-bc5a-2049f6abfd9d/1/k7R00FVx3z1E9jzKIbQLbhLDktk.mft
rsync://rpki.ripe.net/repository/DEFAULT/k7R00FVx3z1E9jzKIbQLbhLDktk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 10:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:89:df:1f:20:87:f0:89:09:93:7d:66:70:93:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93b474d05571df3d44f63cca21b40b6e12c392d9
Validity
Not Before: Jan 1 10:30:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=74660f2ab6ae1fb16c976294673ef12bbf82eaf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:78:85:c7:4d:ec:95:d9:56:f4:35:80:9d:3d:
71:58:3e:89:f9:ca:0f:9d:56:05:35:ac:5e:8a:76:
91:48:03:20:0c:39:38:c0:5c:aa:8e:9f:0b:95:4c:
66:c2:8d:63:95:25:96:64:67:84:43:0f:a6:5d:94:
74:32:42:a2:2e:47:b6:db:69:1d:99:c7:0e:93:6e:
03:d7:bd:75:02:12:ae:00:f2:93:13:31:83:55:5f:
bc:c4:db:0e:2c:8a:05:99:75:88:57:b9:40:bf:d8:
8f:ec:ef:9e:3e:21:25:71:b1:71:41:0a:2e:bc:04:
69:d1:00:9a:66:d7:ca:d2:75:c1:70:d0:cc:fd:c6:
55:ba:7c:f1:82:27:c9:b8:0e:52:9d:79:a1:a6:99:
a3:46:a1:33:33:2e:61:cd:50:64:56:42:ae:02:26:
4a:ac:22:e7:12:8b:a0:5c:d5:97:52:a0:0a:e6:46:
c0:19:8d:07:ef:87:2e:9e:6a:25:17:ef:54:b0:e6:
a5:ad:6b:b0:53:92:c6:91:a0:04:37:45:14:d1:79:
0f:4b:a8:32:bc:e7:f0:cf:d1:c4:27:3c:44:1c:4b:
40:ac:1c:5b:1e:7c:8b:ad:df:45:58:68:c0:4a:5d:
44:a6:22:6a:90:ba:3b:81:5a:db:6b:16:eb:42:26:
f7:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:66:0F:2A:B6:AE:1F:B1:6C:97:62:94:67:3E:F1:2B:BF:82:EA:F7
X509v3 Authority Key Identifier:
keyid:93:B4:74:D0:55:71:DF:3D:44:F6:3C:CA:21:B4:0B:6E:12:C3:92:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k7R00FVx3z1E9jzKIbQLbhLDktk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/8da624-31c5-4509-bc5a-2049f6abfd9d/1/dGYPKrauH7Fsl2KUZz7xK7-C6vc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/8da624-31c5-4509-bc5a-2049f6abfd9d/1/k7R00FVx3z1E9jzKIbQLbhLDktk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.14.8.0/24
193.189.98.0/23
Signature Algorithm: sha256WithRSAEncryption
06:0e:99:82:8c:b3:c4:b7:9d:db:a8:49:ed:41:cc:53:70:e5:
e5:e2:86:41:cb:ee:d8:ba:14:70:19:3e:d5:33:5b:1a:d9:d4:
1d:36:bb:ce:13:58:53:57:39:9b:d2:33:fc:78:45:23:86:a7:
8f:9c:05:6f:f6:02:07:b3:7d:2f:82:68:af:2d:fb:17:39:d6:
3c:89:8e:30:f9:a6:fa:8d:25:1d:92:e1:43:61:fa:ca:f7:fc:
91:89:81:65:11:96:ba:41:36:81:f5:06:88:15:9d:a0:f2:8b:
01:b4:f4:a5:fd:e5:df:11:77:94:5f:b1:c7:83:91:94:62:9d:
d2:d0:33:23:65:83:d6:f4:d7:c4:3d:e3:d1:14:5b:e2:f5:0f:
84:3e:c0:30:75:1d:9b:1f:05:16:82:e3:9f:6a:60:4b:ed:99:
94:5c:c3:bd:6c:05:bf:75:dd:3c:78:3c:07:f9:d6:90:69:06:
ac:08:b9:4e:dc:6c:e4:ce:f6:53:86:5c:d2:e7:a7:25:55:2b:
f0:14:1f:fa:55:a2:c0:48:4b:e7:16:80:f8:e4:12:1d:e3:cf:
f2:f2:fd:95:24:26:c5:0c:e3:7d:1c:6d:d0:4d:8d:4e:43:de:
f1:da:fb:ed:27:45:4e:18:77:c6:eb:c8:52:7f:92:e5:52:26:
2b:a8:f4:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 17:42:23 2024 by rpki-client on console-ams.rpki-client.org