Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/HCgYJXWRc4Aa6hFVo3Qey0KXUFw.roa
File: HCgYJXWRc4Aa6hFVo3Qey0KXUFw.roa (raw, json)
Hash identifier: c4abm2y9hebS1KUXcCZaw7JAnsU0bvMqWrBIvuyhsKg=
Subject key identifier: 1C:28:18:25:75:91:73:80:1A:EA:11:55:A3:74:1E:CB:42:97:50:5C
Certificate issuer: /CN=253a3b5f51808168c212c094a2baaff38e16464a
Certificate serial: 018CC5DC414EE283A4BE742C34F42B35AC24
Authority key identifier: 25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/HCgYJXWRc4Aa6hFVo3Qey0KXUFw.roa
Signing time: Mon 01 Jan 2024 16:29:55 +0000
ROA not before: Mon 01 Jan 2024 16:29:55 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 33844
IP address blocks: 193.232.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.mft
rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 13:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:41:4e:e2:83:a4:be:74:2c:34:f4:2b:35:ac:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=253a3b5f51808168c212c094a2baaff38e16464a
Validity
Not Before: Jan 1 16:29:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1c281825759173801aea1155a3741ecb4297505c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c2:10:5c:ef:a8:3d:0e:60:21:97:ad:61:56:
ac:11:df:01:57:79:9c:ca:b0:c1:5c:b4:a8:e6:34:
b1:96:d7:79:2d:9f:00:ea:17:8d:c8:3c:e9:d5:08:
81:b8:82:70:d0:45:04:5a:40:38:bb:c1:90:c8:cb:
3b:ea:08:6a:7e:44:a6:41:7d:ba:c0:08:a6:0d:a0:
86:7c:15:22:98:e0:95:1f:4f:27:2b:0e:81:48:17:
d1:d9:85:a0:c1:82:72:91:cd:ea:f8:25:b4:5b:a5:
c6:0e:6e:5b:c1:5e:41:a5:5c:39:a8:2a:74:a0:cd:
a2:2f:da:ea:91:ab:e4:53:fa:cb:4c:a0:af:57:b2:
ff:05:be:43:2f:05:c2:92:90:f5:ea:8a:97:5b:ba:
1a:99:77:fa:9a:26:12:be:ef:b4:a7:c9:80:b4:68:
68:d1:0a:3f:9a:b9:cf:83:38:9f:d6:ec:4a:04:d7:
6d:5f:23:77:ba:2a:72:15:4e:58:fc:68:31:e0:2b:
1e:eb:da:b8:63:f1:2c:65:93:35:38:59:b5:0c:e8:
23:5d:d7:1c:c5:70:23:84:47:d5:b0:5b:e6:a3:5d:
a8:d2:8d:2d:bc:0d:31:7f:ca:ca:eb:e8:22:c6:d4:
04:ce:d2:60:db:81:08:3f:e2:37:d7:92:f9:8c:7f:
00:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:28:18:25:75:91:73:80:1A:EA:11:55:A3:74:1E:CB:42:97:50:5C
X509v3 Authority Key Identifier:
keyid:25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/HCgYJXWRc4Aa6hFVo3Qey0KXUFw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.232.123.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:f5:a3:f2:f0:41:2c:6c:a8:a2:e8:6c:e5:64:6c:56:0c:bc:
2e:fc:29:a1:31:8b:e1:20:f1:eb:47:b8:05:0a:6a:d4:f9:fd:
bd:57:5b:f1:9d:fa:0e:6d:a6:23:82:19:52:81:ba:4f:a0:9f:
c9:0c:ed:21:fe:26:9c:e3:11:70:f7:cc:59:35:05:db:4a:02:
c9:dc:11:48:8d:d6:25:8e:6d:9f:2b:3b:0b:3b:c7:d1:23:7e:
a9:48:18:c9:79:87:a6:b4:f3:c0:1f:95:d4:d1:7b:50:7b:2e:
6e:21:e8:e6:bb:e0:1e:21:c6:b3:7b:3c:e1:19:32:5b:64:01:
9d:a4:ca:43:df:57:20:36:09:2e:75:f7:7f:50:cc:1c:54:47:
ae:ab:7b:ba:f3:bd:21:ea:4c:9c:42:49:24:39:74:49:16:58:
f7:8f:2a:d4:17:dd:0c:89:81:02:e9:ef:e9:f6:07:89:fb:da:
9d:94:1f:7a:57:2e:7d:ac:49:da:02:28:14:69:f4:a9:86:7b:
fa:b8:38:08:fa:34:4c:95:e5:39:e5:92:e5:e7:df:fe:29:9d:
79:2b:51:69:bc:64:aa:de:fa:6e:0d:77:03:15:da:36:68:4c:
0a:45:a3:99:86:e2:1b:11:67:53:04:ca:f2:0b:11:f6:96:e3:
a8:f4:76:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 18:52:03 2024 by rpki-client on console-fra.rpki-client.org