Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/e6f13e-ebeb-4e26-9f91-8183751813d9/1/1-hxxjJzKyQlTdDnz8-mAUPrFxK4.roa
File: 1-hxxjJzKyQlTdDnz8-mAUPrFxK4.roa (raw, json)
Hash identifier: Scc0GGCHJDQsG05xdFEcKvGI/mpK/79ZrkvCXbvEuEM=
Subject key identifier: FA:1C:71:8C:9C:CA:C9:09:53:74:39:F3:F3:E9:80:50:FA:C5:C4:AE
Certificate issuer: /CN=b53b0a45f060e10eccf126b6f667589b80328c95
Certificate serial: 018CC3B6B9BDC352952F121CB1B6C33F63D3
Authority key identifier: B5:3B:0A:45:F0:60:E1:0E:CC:F1:26:B6:F6:67:58:9B:80:32:8C:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tTsKRfBg4Q7M8Sa29mdYm4AyjJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/e6f13e-ebeb-4e26-9f91-8183751813d9/1/1-hxxjJzKyQlTdDnz8-mAUPrFxK4.roa
Signing time: Mon 01 Jan 2024 06:29:41 +0000
ROA not before: Mon 01 Jan 2024 06:29:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25066
IP address blocks: 193.201.109.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/e6f13e-ebeb-4e26-9f91-8183751813d9/1/tTsKRfBg4Q7M8Sa29mdYm4AyjJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/e6f13e-ebeb-4e26-9f91-8183751813d9/1/tTsKRfBg4Q7M8Sa29mdYm4AyjJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/tTsKRfBg4Q7M8Sa29mdYm4AyjJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 15:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:b9:bd:c3:52:95:2f:12:1c:b1:b6:c3:3f:63:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b53b0a45f060e10eccf126b6f667589b80328c95
Validity
Not Before: Jan 1 06:29:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fa1c718c9ccac909537439f3f3e98050fac5c4ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:e1:54:52:3d:2f:b8:36:7a:22:34:fc:0d:0f:
9a:e9:db:34:ea:c5:72:fb:dd:80:51:67:5e:0b:12:
31:28:2c:d9:ea:66:11:92:36:39:0e:39:23:d4:c0:
d9:73:5a:b4:b9:bb:b7:8f:d3:1f:0e:e4:b7:2d:1c:
b2:ab:94:51:72:3c:02:e9:3d:e4:16:97:2e:70:a8:
2d:96:77:82:34:41:0c:4f:7c:5f:37:d9:18:60:7e:
12:08:fa:17:ac:bf:ec:93:ee:20:51:50:d5:28:39:
95:42:3d:4f:22:e7:87:fb:0d:7a:6b:6d:b0:5c:63:
a9:69:4c:e1:ee:15:f5:7b:3b:09:fe:e9:95:bc:55:
d5:c8:f3:e9:a5:d0:9b:4c:da:7c:79:25:eb:b4:be:
9a:9b:ab:7c:8c:4d:e2:59:a0:79:f6:41:a0:23:92:
d7:d7:3c:84:98:5a:ab:fe:01:b8:ea:5f:2f:1f:99:
bb:28:98:8c:16:50:d6:f1:06:c0:31:6e:50:88:ca:
27:ee:9e:ce:8c:43:f1:38:16:5c:e2:94:ba:5e:67:
52:4a:79:a5:2f:0e:b5:7a:da:de:69:9d:e2:1c:1b:
b7:83:ad:86:d5:dd:75:99:c3:ca:fb:73:5a:5b:93:
20:9e:f9:0e:83:21:3e:98:5c:d3:15:c4:29:79:6c:
50:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:1C:71:8C:9C:CA:C9:09:53:74:39:F3:F3:E9:80:50:FA:C5:C4:AE
X509v3 Authority Key Identifier:
keyid:B5:3B:0A:45:F0:60:E1:0E:CC:F1:26:B6:F6:67:58:9B:80:32:8C:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tTsKRfBg4Q7M8Sa29mdYm4AyjJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e6f13e-ebeb-4e26-9f91-8183751813d9/1/1-hxxjJzKyQlTdDnz8-mAUPrFxK4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e6f13e-ebeb-4e26-9f91-8183751813d9/1/tTsKRfBg4Q7M8Sa29mdYm4AyjJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.201.109.0/24
Signature Algorithm: sha256WithRSAEncryption
66:0f:81:0c:fb:8f:0a:53:ab:ec:e6:63:c5:f2:23:08:6e:25:
dc:e1:ac:de:45:9e:55:73:0c:b0:4b:86:02:5d:9d:82:35:b5:
00:96:9c:98:d0:7e:3c:2f:c0:8d:37:98:5d:fa:ba:12:7f:e2:
7e:a3:e1:aa:14:b5:22:f3:f8:7c:a3:a5:1f:b1:0e:58:a3:9d:
1c:70:76:e0:5d:37:34:e0:a4:29:80:89:94:1c:70:22:b0:76:
3e:7f:34:d4:02:24:6e:b1:87:44:b3:1f:2f:64:2f:e3:3d:ab:
27:7e:18:cd:68:25:5a:86:b8:a6:24:ae:b1:3c:62:ed:83:21:
f4:5d:a0:e1:29:06:63:da:16:6b:bc:49:c6:b8:83:81:39:42:
dd:b4:d2:19:8e:16:b6:40:e7:d8:3d:bc:33:2d:67:49:6e:52:
08:f5:e0:d9:90:8c:ff:11:14:3f:c2:7d:9d:65:ac:a0:1f:a5:
3f:41:fc:48:36:59:a6:1d:f8:6a:c5:9d:03:4c:23:f5:4e:de:
a3:6d:a5:1c:ba:37:7b:ac:31:5e:ef:fd:d1:f2:af:de:66:89:
6e:45:78:39:57:bf:32:1a:22:7f:c2:e8:f6:ac:96:ca:0d:7e:
5d:45:4d:81:5f:be:14:d4:e0:2c:e0:b0:bd:e7:84:39:58:5e:
f6:ba:2d:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 18:28:18 2024 by rpki-client on console-fra.rpki-client.org