Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/ujRoWuHTyTjZeSkEyWzV9CQ8OPk.roa
File: ujRoWuHTyTjZeSkEyWzV9CQ8OPk.roa (raw, json)
Hash identifier: 9QvIJkb1GFUTmBgSkrxyWqLQ9fPJwqqryi1P2WX5i5M=
Subject key identifier: BA:34:68:5A:E1:D3:C9:38:D9:79:29:04:C9:6C:D5:F4:24:3C:38:F9
Certificate issuer: /CN=253a3b5f51808168c212c094a2baaff38e16464a
Certificate serial: 018CC5DC447FD3FDE49D50B69285C5A34912
Authority key identifier: 25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/ujRoWuHTyTjZeSkEyWzV9CQ8OPk.roa
Signing time: Mon 01 Jan 2024 16:29:56 +0000
ROA not before: Mon 01 Jan 2024 16:29:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42135
IP address blocks: 193.232.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.mft
rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 13:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:44:7f:d3:fd:e4:9d:50:b6:92:85:c5:a3:49:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=253a3b5f51808168c212c094a2baaff38e16464a
Validity
Not Before: Jan 1 16:29:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ba34685ae1d3c938d9792904c96cd5f4243c38f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:27:0d:06:29:ba:4d:fb:ea:8d:a1:57:1e:71:
f0:d1:fc:7e:7d:75:21:2a:af:a0:3c:81:4d:23:3f:
d4:38:4c:53:68:38:b2:88:5c:7e:d8:f1:04:92:9f:
3e:82:f9:e1:9a:36:59:be:68:a1:55:03:5c:7a:a5:
b5:80:21:78:a1:40:6c:9c:68:1c:cf:80:9e:b8:44:
f0:b3:6f:77:f5:f9:f8:33:c9:cb:3e:8e:69:bc:18:
98:47:6d:66:18:77:33:e7:2e:b9:a1:d7:04:2d:01:
8f:2b:de:a9:6a:c5:a6:ab:f4:da:bd:89:d6:57:83:
fc:5f:94:eb:f1:f0:26:7d:37:ad:5e:d5:a9:43:03:
e7:e9:5d:55:93:e9:3f:96:1c:d3:34:f3:8e:dd:63:
13:32:63:0a:25:b9:30:a8:89:b7:44:15:6c:45:60:
ab:b0:d2:9a:b2:8a:5f:e5:18:8d:11:ab:47:bd:82:
a9:99:8c:6f:28:25:36:1f:a1:6c:2c:2f:b5:84:48:
1b:4b:a9:bf:de:36:03:71:29:4f:3b:17:04:03:8a:
27:61:b5:f3:e5:ee:27:ba:90:a9:23:ff:74:21:19:
83:c0:b7:2a:7a:92:51:33:04:85:c1:08:03:b3:2d:
11:6f:f5:ea:7e:e8:cc:f0:67:d9:f4:df:4e:53:f5:
3b:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:34:68:5A:E1:D3:C9:38:D9:79:29:04:C9:6C:D5:F4:24:3C:38:F9
X509v3 Authority Key Identifier:
keyid:25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/ujRoWuHTyTjZeSkEyWzV9CQ8OPk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.232.115.0/24
Signature Algorithm: sha256WithRSAEncryption
02:a7:be:c9:41:8a:8d:46:11:50:aa:09:1a:01:8c:e6:c5:27:
b0:9d:7f:f9:0f:a5:7a:e2:61:2b:fe:83:da:48:f6:1c:ab:9d:
2d:32:25:52:b1:51:85:42:05:a2:50:9e:bb:0b:61:1c:cc:5a:
76:b7:71:a2:17:74:80:ab:29:63:8d:6a:11:ee:34:d8:90:99:
33:b4:4a:81:4e:f5:28:50:86:d3:4a:45:84:48:f7:e7:74:b1:
3e:5d:ec:95:a4:2b:19:8c:9f:42:96:51:8c:8f:ed:59:ea:42:
e4:a4:4b:c8:0a:d0:b5:15:33:d3:a8:40:47:ce:e5:0e:1a:b8:
07:0e:da:56:2c:a0:b0:9b:b6:08:04:d5:8c:e4:05:bd:20:53:
66:eb:18:50:36:1e:3e:a2:fb:ac:05:42:35:2d:1b:6f:ac:dd:
f7:bb:51:0a:d2:e9:30:b9:bc:84:0b:88:7c:dc:79:e3:a1:df:
c6:d0:e6:9b:88:36:dc:bf:87:92:e8:ae:0f:24:68:e6:fe:95:
f1:6a:ae:2c:68:16:af:d7:7b:64:f0:f7:e6:a2:f3:9e:17:64:
87:d7:27:96:d9:1c:f1:d2:0a:6d:55:45:b8:87:54:ac:96:da:
fb:7a:1d:c5:cb:54:cb:28:b7:73:36:cc:a2:35:46:34:4e:55:
d4:eb:2b:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 18:35:00 2024 by rpki-client on console-ams.rpki-client.org