Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/_hTYaHq0bG36PVfpUYO_Iu1VM4k.roa
File: _hTYaHq0bG36PVfpUYO_Iu1VM4k.roa (raw, json)
Hash identifier: UbCtcvYuCocDLa9jKkENqfK7ggiJQ1VoCCI9xi2w+uA=
Subject key identifier: FE:14:D8:68:7A:B4:6C:6D:FA:3D:57:E9:51:83:BF:22:ED:55:33:89
Certificate issuer: /CN=5eee0d7e73084a42e4c7f7118f2383fcff369ba4
Certificate serial: 018CC50013932353FDEBB47C96A7A830335C
Authority key identifier: 5E:EE:0D:7E:73:08:4A:42:E4:C7:F7:11:8F:23:83:FC:FF:36:9B:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/_hTYaHq0bG36PVfpUYO_Iu1VM4k.roa
Signing time: Mon 01 Jan 2024 12:29:25 +0000
ROA not before: Mon 01 Jan 2024 12:29:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61317
IP address blocks: 193.160.102.0/24 maxlen: 24
193.160.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 23:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:13:93:23:53:fd:eb:b4:7c:96:a7:a8:30:33:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5eee0d7e73084a42e4c7f7118f2383fcff369ba4
Validity
Not Before: Jan 1 12:29:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fe14d8687ab46c6dfa3d57e95183bf22ed553389
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:36:9d:6d:c3:24:3b:77:53:62:f8:85:b0:57:
54:f5:98:ee:50:f7:8d:f9:7d:6b:b6:ea:27:3a:1b:
29:8c:67:9f:55:be:74:e3:a6:8f:96:85:19:00:c6:
74:f6:0d:f2:a7:74:97:c4:5c:a7:e5:b6:7a:42:11:
75:4a:e6:e0:f1:3c:fb:83:47:c9:50:a3:48:61:09:
65:76:26:c8:f6:34:9f:88:49:4b:9a:41:f0:96:9b:
df:39:22:93:aa:e5:70:18:e3:db:85:b6:83:c9:c2:
84:5a:1e:60:39:0f:5b:91:60:b3:52:e5:2a:cd:d9:
54:dd:9c:1b:d6:f5:10:c1:83:20:b5:69:73:c9:3d:
31:0d:03:a9:92:cd:a4:62:dd:86:fc:9e:1c:5b:32:
54:be:be:77:c4:35:c1:0f:b4:b9:79:0e:64:99:35:
01:f1:e7:68:9e:6d:40:9f:87:e4:bb:cf:a3:d6:70:
f7:ba:d3:bb:80:d2:2e:e9:2c:35:31:17:ca:e0:9e:
80:42:57:9c:f3:d1:aa:e3:37:09:23:48:c0:95:4b:
a8:33:b0:89:47:24:41:e4:ec:71:7d:30:f2:c4:47:
8c:2d:d4:ff:d9:27:e0:4d:d6:a6:65:f8:40:ca:79:
9f:51:2e:28:36:1a:2f:68:5f:f5:35:b1:fd:68:ae:
17:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:14:D8:68:7A:B4:6C:6D:FA:3D:57:E9:51:83:BF:22:ED:55:33:89
X509v3 Authority Key Identifier:
keyid:5E:EE:0D:7E:73:08:4A:42:E4:C7:F7:11:8F:23:83:FC:FF:36:9B:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/_hTYaHq0bG36PVfpUYO_Iu1VM4k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.160.102.0/24
193.160.113.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:61:e2:66:39:01:f6:d9:6d:a2:9e:00:a3:b9:1f:a3:ad:c9:
fd:68:48:4d:b9:1e:8f:84:fe:71:6f:37:85:70:e0:54:dd:0a:
a7:96:69:0a:bc:1e:0f:7e:69:43:cf:12:63:53:b9:ce:02:41:
30:3c:39:2c:89:41:d3:0e:8b:d3:d2:6b:05:2c:d9:70:32:7a:
a0:cb:7b:43:f5:c0:a2:26:d1:f9:4a:e3:84:d3:9e:a8:0c:94:
cf:30:81:e5:a3:e6:71:7d:5c:dc:91:3f:71:5d:e8:dc:fa:68:
67:d1:21:5a:9e:fa:1d:61:31:cd:52:3e:4a:72:32:c8:bd:6e:
22:01:d1:bd:f9:86:8f:64:fc:08:d0:3c:eb:ba:e7:df:dc:77:
54:8a:2b:3c:60:1b:58:53:12:09:1a:1c:ce:2e:b7:af:70:9f:
1e:56:1b:ee:b1:58:d8:15:81:96:bb:e7:4c:49:ef:23:a0:19:
36:59:a9:81:08:31:0d:54:1a:0e:af:0a:59:6b:14:3d:3a:9b:
be:d5:5b:c0:e1:9b:03:bc:05:0c:9c:c3:c9:13:90:4d:40:7a:
97:94:31:95:3e:31:4b:b5:56:77:95:2d:cf:ad:f2:84:20:d9:
b0:32:4c:26:99:b1:e3:7c:c9:0f:35:1f:49:46:ad:e2:12:61:
dd:14:02:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 07:02:00 2024 by rpki-client on console-fra.rpki-client.org