Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/Qo5vD4kK6jJ0CPd10OUNpOApG9c.roa
File: Qo5vD4kK6jJ0CPd10OUNpOApG9c.roa (raw, json)
Hash identifier: 9jlrpOPsPmReFeIjwHhhE8dDDHYc2Zzp+U3OXNugucQ=
Subject key identifier: 42:8E:6F:0F:89:0A:EA:32:74:08:F7:75:D0:E5:0D:A4:E0:29:1B:D7
Certificate issuer: /CN=253a3b5f51808168c212c094a2baaff38e16464a
Certificate serial: 018D8C576AE112035B224F8046C7649742F5
Authority key identifier: 25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/Qo5vD4kK6jJ0CPd10OUNpOApG9c.roa
Signing time: Fri 09 Feb 2024 05:29:15 +0000
ROA not before: Fri 09 Feb 2024 05:29:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50214
IP address blocks: 193.232.65.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.mft
rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 13:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:8c:57:6a:e1:12:03:5b:22:4f:80:46:c7:64:97:42:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=253a3b5f51808168c212c094a2baaff38e16464a
Validity
Not Before: Feb 9 05:29:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=428e6f0f890aea327408f775d0e50da4e0291bd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:03:46:99:db:71:01:23:52:19:d2:be:0d:32:
46:20:75:ae:29:3f:b0:78:4c:85:03:ed:d6:18:f6:
a5:99:ed:5d:47:8d:79:93:28:e5:63:e3:f8:1e:74:
f9:03:8a:f7:44:3d:52:c5:d9:1a:f1:3a:2a:b1:94:
ee:f4:97:aa:5f:0e:71:52:fb:36:1b:66:90:54:c5:
ee:48:a5:ca:78:f5:59:2b:dc:fa:bb:03:8f:d2:1a:
72:b7:9f:2d:89:f4:bd:86:50:10:6e:ff:e4:c9:c5:
f7:61:1d:6d:29:d4:8e:b0:1f:17:86:25:86:99:4e:
7d:10:b6:16:6e:cf:d7:e8:bc:5c:7b:02:88:c0:6b:
0f:b9:2d:e5:e3:86:37:4b:98:7f:23:44:82:50:d4:
b0:85:39:17:8f:51:a2:61:c0:c9:3d:b0:e5:9e:12:
5c:dd:c8:24:76:70:c3:88:ef:58:87:73:59:aa:8a:
73:38:ae:aa:fe:b9:dd:10:e6:59:68:c8:50:1b:ad:
5b:0b:5d:1f:00:56:26:3d:b8:a5:03:a1:8d:ec:7a:
23:cb:ec:0d:a5:da:b0:6c:57:cf:e5:d0:26:5f:9a:
6d:1d:5e:f6:91:5e:82:80:b3:69:60:be:5e:5a:04:
4a:ae:4e:1d:8c:01:1b:a8:05:a2:1e:15:9e:8d:07:
06:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:8E:6F:0F:89:0A:EA:32:74:08:F7:75:D0:E5:0D:A4:E0:29:1B:D7
X509v3 Authority Key Identifier:
keyid:25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/Qo5vD4kK6jJ0CPd10OUNpOApG9c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.232.65.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:09:0c:ce:b2:d8:ed:30:60:c3:17:74:a0:60:5a:d7:ec:c2:
c8:29:02:38:25:9e:a8:f0:00:61:55:22:cf:8d:3d:59:98:4c:
ba:12:9f:70:8b:49:92:78:a4:2d:ff:9f:a6:a1:34:06:1d:c2:
5b:76:e9:65:95:ef:66:ee:46:1e:f0:f2:f3:44:b7:2a:b1:b1:
93:fe:15:21:43:50:42:e5:b6:00:15:13:1c:03:b4:f1:41:45:
5c:2b:da:c0:7a:1b:6e:f8:17:30:7c:ca:ca:f5:8f:1e:68:7f:
c7:1f:58:12:08:d5:c6:a7:23:29:60:f7:1b:66:f5:6c:ef:57:
24:f3:e7:bb:c8:eb:06:7f:4d:1a:44:dc:0a:64:4d:df:f9:41:
e1:3d:fa:8c:ef:b0:d5:d2:14:e4:7d:7a:38:92:0b:db:b2:13:
2a:2e:e9:ba:a0:77:fa:37:77:1a:b7:7d:25:c5:75:b3:c5:8e:
73:3a:22:0a:ad:47:d3:f1:a6:e6:0e:f1:fa:d2:80:2b:5f:99:
c6:dc:ad:17:7b:33:84:70:95:66:70:2a:f6:bf:72:16:10:cd:
22:33:e6:17:4b:1a:a9:95:e2:1f:0d:c3:b5:7a:db:40:1c:cd:
e6:80:42:85:7e:cc:bb:e8:c7:d0:0b:8a:f1:78:7c:73:ba:a8:
6d:9b:78:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 18:52:03 2024 by rpki-client on console-fra.rpki-client.org