Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/qXHHkW-ruRBplMU7atKw7gOlLWs.roa
File: qXHHkW-ruRBplMU7atKw7gOlLWs.roa (raw, json)
Hash identifier: J5vojE6NCOQeuxjbasIcKQe32e1wr3Z8HYvZ+ZUtHxo=
Subject key identifier: A9:71:C7:91:6F:AB:B9:10:69:94:C5:3B:6A:D2:B0:EE:03:A5:2D:6B
Certificate issuer: /CN=5a376c8008d6abd962341563dd2a4dccaf153cba
Certificate serial: 018CC79479F61271E0FD2572C5ABE09EF7EA
Authority key identifier: 5A:37:6C:80:08:D6:AB:D9:62:34:15:63:DD:2A:4D:CC:AF:15:3C:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WjdsgAjWq9liNBVj3SpNzK8VPLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/qXHHkW-ruRBplMU7atKw7gOlLWs.roa
Signing time: Tue 02 Jan 2024 00:30:45 +0000
ROA not before: Tue 02 Jan 2024 00:30:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 40676
IP address blocks: 193.25.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/WjdsgAjWq9liNBVj3SpNzK8VPLo.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/WjdsgAjWq9liNBVj3SpNzK8VPLo.mft
rsync://rpki.ripe.net/repository/DEFAULT/WjdsgAjWq9liNBVj3SpNzK8VPLo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:79:f6:12:71:e0:fd:25:72:c5:ab:e0:9e:f7:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a376c8008d6abd962341563dd2a4dccaf153cba
Validity
Not Before: Jan 2 00:30:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a971c7916fabb9106994c53b6ad2b0ee03a52d6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:12:be:91:58:b5:f8:3a:8c:48:cc:e7:6b:04:
e3:33:fa:14:f8:91:a3:6d:aa:dd:5a:4b:6e:24:ff:
b1:a8:f4:c2:5e:0b:01:69:8c:91:00:7d:25:ce:a6:
14:c6:9d:90:79:d3:e7:f2:50:ac:5b:66:a4:76:98:
7d:fb:33:b1:f1:56:6c:e7:f3:05:83:d2:33:09:db:
88:80:0c:97:1c:ef:64:ef:73:e8:70:80:fd:85:83:
c4:97:f4:31:17:6a:48:9b:d4:5d:81:db:2b:fd:b6:
f3:4b:b3:60:89:09:b5:b9:84:d4:a0:4d:68:ec:2c:
eb:a2:bf:8f:78:6a:08:41:b5:65:72:d4:83:41:ac:
57:cf:75:ce:8a:93:9f:29:9f:0c:e6:83:58:9d:03:
6f:96:62:96:3e:68:cb:e6:57:ed:66:9c:67:37:42:
db:29:98:52:7f:65:62:b9:e2:7e:29:da:c1:12:63:
ea:e7:a7:6b:8d:a1:c8:6e:53:15:77:16:24:2c:25:
51:76:dd:f1:ba:47:d5:bb:40:e1:ea:be:7b:85:bd:
9b:53:e1:32:5e:9d:2e:fb:5b:4a:a3:60:a5:23:66:
10:eb:6a:79:68:17:05:24:ae:71:db:34:db:10:4f:
40:99:f9:55:f3:85:82:21:68:bf:16:82:95:55:26:
dc:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:71:C7:91:6F:AB:B9:10:69:94:C5:3B:6A:D2:B0:EE:03:A5:2D:6B
X509v3 Authority Key Identifier:
keyid:5A:37:6C:80:08:D6:AB:D9:62:34:15:63:DD:2A:4D:CC:AF:15:3C:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WjdsgAjWq9liNBVj3SpNzK8VPLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/qXHHkW-ruRBplMU7atKw7gOlLWs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/WjdsgAjWq9liNBVj3SpNzK8VPLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.25.201.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:7b:46:9f:70:9c:fd:da:0e:d1:4a:91:51:03:c8:37:5a:c1:
c6:d4:19:26:36:05:b1:72:74:36:94:ad:06:94:91:ce:cd:e5:
19:0c:98:76:e6:90:17:44:39:8a:0c:cc:b2:be:b7:52:b4:3e:
f8:bf:0f:6e:a7:5c:00:fb:42:e3:7f:5d:c4:f4:d9:9d:7d:82:
0f:c8:a1:10:f3:07:9d:ed:da:2d:97:63:5e:8d:ea:02:d4:b5:
69:28:9b:10:29:b0:cc:11:26:a0:82:dd:6e:51:46:f0:6c:8e:
f0:df:f2:ad:81:6d:09:ee:87:76:50:77:5d:a7:a6:36:6a:45:
35:9f:15:2e:ba:15:81:88:21:13:8b:83:ab:3a:ab:6c:ff:bf:
cb:42:6b:a8:5d:de:60:92:f4:93:b7:c6:55:ed:22:2e:e8:57:
6c:21:dd:c3:eb:35:14:59:eb:b3:f6:c4:ab:86:80:e4:35:34:
d4:27:5f:62:70:b4:3e:9c:4b:aa:5e:01:3f:50:e5:10:47:03:
03:61:22:1b:03:65:28:97:64:8b:8e:a9:7a:f6:d3:d3:28:a1:
1a:bd:f0:0c:97:d9:b8:97:23:c5:ef:07:7e:f0:95:19:64:96:
69:12:e6:10:c5:30:a2:32:0a:6c:a1:0a:89:59:61:00:66:f8:
a3:aa:31:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 18:55:41 2024 by rpki-client on console-fra.rpki-client.org