Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/1-W3FbsJzx0XkH4-q7VLMTatKeOI.roa
File: 1-W3FbsJzx0XkH4-q7VLMTatKeOI.roa (raw, json)
Hash identifier: mHaDaTdhxzlIYrEAk/fAnKyWm/YdOUjxazVf7hYFpes=
Subject key identifier: F9:6D:C5:6E:C2:73:C7:45:E4:1F:8F:AA:ED:52:CC:4D:AB:4A:78:E2
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 018CC64B83FB99FBFD0AC5CEC0D44AAC3A97
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/1-W3FbsJzx0XkH4-q7VLMTatKeOI.roa
Signing time: Mon 01 Jan 2024 18:31:26 +0000
ROA not before: Mon 01 Jan 2024 18:31:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41097
IP address blocks: 193.192.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.mft
rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 21:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:83:fb:99:fb:fd:0a:c5:ce:c0:d4:4a:ac:3a:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Jan 1 18:31:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f96dc56ec273c745e41f8faaed52cc4dab4a78e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:09:20:aa:42:43:ed:f8:25:a9:f3:ff:ff:a1:
12:32:35:26:9a:23:91:21:63:46:f5:71:b1:a0:ce:
1f:2a:4a:75:40:0c:4f:da:e4:ef:6e:9d:74:29:33:
b8:56:15:a4:3e:32:c2:5e:00:f3:79:00:f7:5c:80:
f0:3d:27:ea:ef:bb:4f:41:51:09:6d:e9:c8:24:35:
55:b3:dd:e6:0b:6a:62:a0:de:b6:88:d8:c8:01:94:
a2:2e:9c:fe:01:59:68:dc:1a:60:de:17:49:3a:2f:
81:f1:76:9d:65:19:75:0c:fe:6f:62:8b:51:ca:3d:
8b:72:cb:cc:d1:83:16:de:f3:9d:e9:00:07:73:be:
5c:12:94:12:47:cf:29:27:5d:e7:a3:ab:32:cb:5b:
28:a2:8e:00:af:8f:4f:2d:e3:45:8c:58:d4:33:ae:
54:5f:f4:38:25:ba:c7:8d:dd:12:be:50:29:40:93:
6a:83:1a:1d:59:77:2b:3f:24:f5:db:99:72:56:b0:
94:21:39:13:cc:d8:c8:f7:0e:a5:4c:73:49:ff:91:
f1:96:61:81:6f:4e:10:7c:61:0b:ea:2b:93:39:4d:
4c:cc:24:7e:cd:ad:95:12:74:e5:4f:86:a9:6f:86:
50:b8:30:8b:1e:13:b0:a2:68:fa:e0:b3:1e:9e:69:
4e:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:6D:C5:6E:C2:73:C7:45:E4:1F:8F:AA:ED:52:CC:4D:AB:4A:78:E2
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/1-W3FbsJzx0XkH4-q7VLMTatKeOI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.192.191.0/24
Signature Algorithm: sha256WithRSAEncryption
17:3e:1e:26:7d:d2:7e:bb:ac:79:c4:3f:75:3d:90:9e:e2:38:
c1:55:e9:51:37:54:8d:54:6d:a1:d9:58:03:12:b9:4f:a6:96:
f3:d4:b4:88:bd:0e:29:3f:cc:c4:fa:ca:fa:9f:c0:4d:82:e4:
dc:3a:2d:6a:e3:1f:72:e7:1b:ac:03:45:a7:90:e8:cd:27:b3:
4c:d5:61:11:f4:cd:42:ae:42:6f:5a:a0:7e:da:a5:5d:b0:40:
2a:cc:77:37:9d:74:6f:78:04:d6:48:37:5a:39:52:69:f1:22:
a5:5e:42:c3:23:e3:49:d5:11:3c:17:38:1e:fa:9b:15:4d:00:
e0:a0:2d:36:d0:c4:7f:cd:aa:c7:f7:06:ff:f5:f6:fd:64:98:
9c:dd:5d:31:e5:1c:c1:87:64:0f:ec:a3:16:ec:d3:df:42:0c:
ec:9b:64:ea:a6:6e:bf:a5:46:4e:4b:c7:01:15:cc:fb:9d:92:
85:1f:7d:12:78:e0:3b:a2:8d:91:eb:a5:b6:fd:b8:d9:51:ab:
d5:16:bf:29:71:b4:a5:31:0d:46:e7:02:b6:5a:16:23:a6:82:
7e:87:a4:ae:61:2a:6b:5b:f7:57:60:87:ec:17:13:e6:8e:36:
60:06:74:9d:c5:15:e4:d4:23:82:e9:38:ae:1d:47:46:ab:ce:
93:a7:e2:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 01:26:06 2024 by rpki-client on console-ams.rpki-client.org