Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/481408-b215-4d1a-b330-115aac92e9bf/1/7ct3ZV784nzzPnhEOC1_GYSdMCc.roa
File: 7ct3ZV784nzzPnhEOC1_GYSdMCc.roa (raw, json)
Hash identifier: 8AenxQS1Z7xB8pxl99gDJpcmlgBs3JzNx08atWsYjI8=
Subject key identifier: ED:CB:77:65:5E:FC:E2:7C:F3:3E:78:44:38:2D:7F:19:84:9D:30:27
Certificate issuer: /CN=470c2c983b627169218571c6b82947aeeea5f7ce
Certificate serial: 018CC3490E8FA0691759078375190AC9EE34
Authority key identifier: 47:0C:2C:98:3B:62:71:69:21:85:71:C6:B8:29:47:AE:EE:A5:F7:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RwwsmDticWkhhXHGuClHru6l984.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/481408-b215-4d1a-b330-115aac92e9bf/1/7ct3ZV784nzzPnhEOC1_GYSdMCc.roa
Signing time: Mon 01 Jan 2024 04:29:54 +0000
ROA not before: Mon 01 Jan 2024 04:29:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43341
IP address blocks: 193.26.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/481408-b215-4d1a-b330-115aac92e9bf/1/RwwsmDticWkhhXHGuClHru6l984.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/481408-b215-4d1a-b330-115aac92e9bf/1/RwwsmDticWkhhXHGuClHru6l984.mft
rsync://rpki.ripe.net/repository/DEFAULT/RwwsmDticWkhhXHGuClHru6l984.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 01 Jul 2024 05:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:0e:8f:a0:69:17:59:07:83:75:19:0a:c9:ee:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=470c2c983b627169218571c6b82947aeeea5f7ce
Validity
Not Before: Jan 1 04:29:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=edcb77655efce27cf33e7844382d7f19849d3027
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:60:d9:26:66:41:fa:10:61:76:ae:5f:a3:fb:
99:60:eb:09:39:08:79:23:0a:14:fc:e8:e4:89:3a:
92:c1:7e:8e:22:d8:64:b8:40:ce:80:b5:ea:e3:9f:
0d:8a:74:d8:0c:b8:ed:47:55:ee:3a:fc:a0:a7:a7:
fc:3a:1c:f6:82:d6:e2:33:b3:0a:bf:11:7f:db:a5:
a1:12:f8:ba:c2:50:0b:58:be:d2:30:9f:87:fe:4a:
5c:a6:87:df:9d:63:52:17:00:e2:af:63:e6:bd:21:
e5:d6:dd:3c:35:24:30:0a:b7:3f:a8:60:7a:48:31:
06:6d:d8:08:de:17:90:cd:c0:7f:ea:d9:93:f8:e6:
38:a2:72:b4:12:d1:d7:a3:bd:0f:3f:5a:69:27:f8:
85:78:7b:0b:88:d0:40:1f:3e:cd:38:8c:b7:da:aa:
94:cc:1d:12:d8:30:7b:53:b1:a3:4a:80:99:26:f5:
f4:39:aa:11:85:8f:d2:4c:d9:16:55:3b:18:c6:dd:
fe:0b:22:d4:15:8f:0d:80:96:de:37:15:f8:fa:6b:
21:d6:d5:b7:92:ee:3e:4b:2b:99:e1:14:0c:85:0e:
1f:f8:11:df:f6:18:db:59:95:83:5f:21:30:e1:92:
4b:12:0e:49:30:7c:d7:7a:c3:0e:9a:4e:2a:e8:59:
15:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:CB:77:65:5E:FC:E2:7C:F3:3E:78:44:38:2D:7F:19:84:9D:30:27
X509v3 Authority Key Identifier:
keyid:47:0C:2C:98:3B:62:71:69:21:85:71:C6:B8:29:47:AE:EE:A5:F7:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RwwsmDticWkhhXHGuClHru6l984.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/481408-b215-4d1a-b330-115aac92e9bf/1/7ct3ZV784nzzPnhEOC1_GYSdMCc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/481408-b215-4d1a-b330-115aac92e9bf/1/RwwsmDticWkhhXHGuClHru6l984.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.26.123.0/24
Signature Algorithm: sha256WithRSAEncryption
34:4a:bd:ae:67:0e:25:2a:7a:fb:e2:bf:85:e2:59:5d:ff:69:
93:cb:e7:5c:50:87:e4:70:f8:80:ae:af:a2:bb:96:0d:85:49:
29:89:41:09:bf:05:e6:51:63:4c:0f:b5:64:d0:9e:7b:12:d9:
5e:52:d9:a5:f7:13:ac:87:cc:b5:97:e9:f7:c5:ed:fe:bb:e9:
2d:6c:af:18:f0:22:3c:30:82:81:47:a2:c4:49:8e:16:e1:63:
77:23:69:64:20:98:79:72:ab:9c:e6:59:f8:b7:74:d5:ff:63:
bd:0e:6e:31:c0:b8:52:82:5e:ab:19:b3:f0:2a:27:26:62:b7:
cc:9b:44:68:3a:b3:e8:d5:9a:a5:c2:1b:29:a1:86:27:8b:b8:
17:5b:72:56:6a:9b:39:23:47:ed:bc:19:a6:23:2f:fe:37:82:
55:f4:a3:12:7d:4c:15:b8:c1:e3:6a:6f:b1:f8:0e:6c:3e:c5:
55:4b:4e:bf:15:70:9b:00:02:b6:ca:98:f5:7c:cb:a3:ab:f2:
73:de:09:fa:6e:ac:16:ff:e2:5a:4e:99:bd:cc:dd:f7:70:29:
ac:95:89:3b:03:47:f5:bb:1d:9f:f6:e0:44:e2:a3:c4:74:5f:
6e:2e:4f:28:a4:da:4a:5b:cc:4c:c3:33:96:bf:6c:2b:07:89:
34:9f:05:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 30 09:21:49 2024 by rpki-client on console-fra.rpki-client.org