Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/22696d-e72f-4cfd-bae0-ad4423765892/1/tK-sYkWBMlg04xDtjA4w24NXU2g.roa
File: tK-sYkWBMlg04xDtjA4w24NXU2g.roa (raw, json)
Hash identifier: yjupCBGvdNJrzR90Ihj3sUnBiBLHwcdWZkDRFQlOXwE=
Subject key identifier: B4:AF:AC:62:45:81:32:58:34:E3:10:ED:8C:0E:30:DB:83:57:53:68
Certificate issuer: /CN=a39dbf6878ab00a452f8b07f890d3ab34837627b
Certificate serial: 018F1A290491D0EFAE74A62CB02429D3BD12
Authority key identifier: A3:9D:BF:68:78:AB:00:A4:52:F8:B0:7F:89:0D:3A:B3:48:37:62:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o52_aHirAKRS-LB_iQ06s0g3Yns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/22696d-e72f-4cfd-bae0-ad4423765892/1/tK-sYkWBMlg04xDtjA4w24NXU2g.roa
Signing time: Fri 26 Apr 2024 11:27:26 +0000
ROA not before: Fri 26 Apr 2024 11:27:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44066
IP address blocks: 193.33.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/22696d-e72f-4cfd-bae0-ad4423765892/1/o52_aHirAKRS-LB_iQ06s0g3Yns.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/22696d-e72f-4cfd-bae0-ad4423765892/1/o52_aHirAKRS-LB_iQ06s0g3Yns.mft
rsync://rpki.ripe.net/repository/DEFAULT/o52_aHirAKRS-LB_iQ06s0g3Yns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Jun 2024 11:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:1a:29:04:91:d0:ef:ae:74:a6:2c:b0:24:29:d3:bd:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a39dbf6878ab00a452f8b07f890d3ab34837627b
Validity
Not Before: Apr 26 11:27:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b4afac624581325834e310ed8c0e30db83575368
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:90:d7:35:24:eb:14:4d:00:63:5d:be:f6:ab:
28:cd:45:0c:b0:45:1e:e2:20:75:7b:16:b2:56:3d:
2b:aa:b7:39:42:65:09:22:73:7a:66:dd:38:74:41:
f6:42:61:0d:ae:d1:fe:e1:04:33:d2:c7:64:27:0f:
cd:71:1d:85:32:14:23:f5:a3:e1:69:d5:4f:bb:d7:
94:fc:88:a8:95:fb:7b:70:80:9c:2a:b7:3c:8e:bd:
b4:7e:e3:5a:be:be:d5:f1:44:10:2b:ee:b6:cf:20:
b7:b9:e5:79:c1:7c:ca:71:99:cf:30:2c:13:e6:bc:
97:2f:a6:91:86:4f:35:2c:c9:3f:88:ef:83:03:26:
05:9d:6d:8f:62:81:0c:a1:26:49:0c:f8:9b:2e:a4:
d0:27:6c:41:8c:a4:34:2f:3c:45:69:02:11:21:02:
7b:a2:e8:4c:dd:10:20:b5:9e:1a:9d:7a:54:5a:84:
67:6b:69:f5:58:44:68:16:d3:a7:b4:e2:f3:c6:80:
d8:19:8b:1e:f6:7a:49:56:77:8f:23:74:d6:98:75:
92:69:49:98:a0:4d:ac:c4:25:cb:8e:e2:7f:82:56:
b9:bd:3f:81:51:d1:12:17:0d:65:ce:79:07:08:34:
6c:f7:28:25:d9:3c:26:b6:57:86:e7:2a:c2:02:17:
37:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:AF:AC:62:45:81:32:58:34:E3:10:ED:8C:0E:30:DB:83:57:53:68
X509v3 Authority Key Identifier:
keyid:A3:9D:BF:68:78:AB:00:A4:52:F8:B0:7F:89:0D:3A:B3:48:37:62:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o52_aHirAKRS-LB_iQ06s0g3Yns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/22696d-e72f-4cfd-bae0-ad4423765892/1/tK-sYkWBMlg04xDtjA4w24NXU2g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/22696d-e72f-4cfd-bae0-ad4423765892/1/o52_aHirAKRS-LB_iQ06s0g3Yns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.33.155.0/24
Signature Algorithm: sha256WithRSAEncryption
34:d3:55:7f:cb:2d:96:4a:15:42:e2:0b:cb:2a:ec:2d:ad:c3:
f3:45:39:3c:8a:28:52:7e:9e:61:8c:42:ee:bf:8b:e7:64:1b:
96:41:04:42:d0:92:ae:ae:e3:63:1d:9b:04:eb:c7:1c:66:4b:
b7:59:2c:db:4c:06:2b:0f:fa:d0:79:68:fa:33:d8:63:b7:f5:
c3:51:5f:2c:26:6e:53:f5:3c:2e:6d:00:55:f2:ac:82:ba:03:
99:82:30:84:c3:67:a7:3c:b4:a7:b5:50:52:1f:fc:b8:bf:62:
5f:3d:26:b3:70:90:05:5a:88:45:a2:85:3a:34:7b:59:bb:b0:
da:e1:99:76:04:e0:c2:47:d3:66:c7:1b:37:54:9a:f0:58:bd:
d3:70:eb:12:d3:59:4a:0f:b1:c7:66:e1:b0:dd:cb:6a:46:95:
b6:b7:3f:f8:2f:e5:e8:e7:31:d8:8c:40:e2:4e:57:9a:58:40:
a8:08:72:68:f2:0e:81:ee:70:00:84:8b:b6:a8:9f:a7:ff:60:
d2:ac:3e:70:77:a9:79:16:3e:a9:1f:12:42:93:5c:17:ae:27:
39:3a:a2:95:69:81:f8:d2:25:3e:79:c3:13:49:17:bf:5b:45:
bd:7d:bf:b3:91:2a:89:0f:2a:60:3a:c4:a9:9c:c0:c6:4f:7a:
11:e8:51:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 20:26:48 2024 by rpki-client on console-fra.rpki-client.org