Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/80677b-6479-4016-8631-3624a9872534/1/1OeiRMZ2CJxcqzlooGhqq1qF7ZY.roa
File: 1OeiRMZ2CJxcqzlooGhqq1qF7ZY.roa (raw, json)
Hash identifier: /B+ZbJ8P9jqtrXhLIbljFFVExkw/8zb4dBYp30a9Gyo=
Subject key identifier: D4:E7:A2:44:C6:76:08:9C:5C:AB:39:68:A0:68:6A:AB:5A:85:ED:96
Certificate issuer: /CN=b9f505615de40bb51ac33626ca3637e2b5ff8ca5
Certificate serial: 018CC2DAD7FB7E0BE21EFFD34B99590763EF
Authority key identifier: B9:F5:05:61:5D:E4:0B:B5:1A:C3:36:26:CA:36:37:E2:B5:FF:8C:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ufUFYV3kC7UawzYmyjY34rX_jKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/80677b-6479-4016-8631-3624a9872534/1/1OeiRMZ2CJxcqzlooGhqq1qF7ZY.roa
Signing time: Mon 01 Jan 2024 02:29:31 +0000
ROA not before: Mon 01 Jan 2024 02:29:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61317
IP address blocks: 193.19.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/80677b-6479-4016-8631-3624a9872534/1/ufUFYV3kC7UawzYmyjY34rX_jKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/80677b-6479-4016-8631-3624a9872534/1/ufUFYV3kC7UawzYmyjY34rX_jKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ufUFYV3kC7UawzYmyjY34rX_jKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 27 Apr 2024 07:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:d7:fb:7e:0b:e2:1e:ff:d3:4b:99:59:07:63:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9f505615de40bb51ac33626ca3637e2b5ff8ca5
Validity
Not Before: Jan 1 02:29:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d4e7a244c676089c5cab3968a0686aab5a85ed96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:9b:a8:98:67:69:a6:e8:1e:8a:cb:4a:65:f1:
86:eb:06:01:f2:88:e3:cc:e0:35:b6:cc:e0:81:85:
d3:05:b8:f9:c4:69:3b:55:ad:9a:66:ad:56:8c:c4:
d4:ed:2a:a0:76:dc:ef:08:66:ca:c6:3d:bb:93:68:
02:d5:f4:9a:ab:5a:24:8c:ed:fb:f9:a9:74:db:df:
1d:3d:6b:ab:4e:19:5c:10:59:90:f6:7f:91:d0:16:
43:b2:e3:50:37:79:bb:b5:e3:41:11:04:10:40:bd:
31:01:ff:37:94:5e:7c:0f:0d:73:20:4a:65:c9:ab:
1d:be:8b:09:43:8d:93:f2:d0:98:e3:f0:46:16:c6:
78:33:d9:69:c8:db:be:01:eb:2c:5c:92:62:08:ea:
c1:6d:2b:17:f2:5b:90:a2:61:2b:cb:b7:09:84:44:
44:40:6a:4a:85:f5:dc:81:10:88:c2:81:08:d6:47:
ce:a7:ed:e6:25:55:2d:33:5f:76:b4:1f:32:80:85:
dd:ec:17:17:8e:c3:0d:02:a9:7b:5f:5c:1b:8b:9b:
dd:d0:95:ef:ad:18:23:ed:14:0b:04:34:c7:46:de:
ff:33:f4:f9:5a:e9:b1:f4:e8:c7:27:0b:91:19:8f:
45:44:6a:f3:4f:6e:b6:e0:36:1d:48:11:dd:18:85:
c0:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:E7:A2:44:C6:76:08:9C:5C:AB:39:68:A0:68:6A:AB:5A:85:ED:96
X509v3 Authority Key Identifier:
keyid:B9:F5:05:61:5D:E4:0B:B5:1A:C3:36:26:CA:36:37:E2:B5:FF:8C:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ufUFYV3kC7UawzYmyjY34rX_jKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/80677b-6479-4016-8631-3624a9872534/1/1OeiRMZ2CJxcqzlooGhqq1qF7ZY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/80677b-6479-4016-8631-3624a9872534/1/ufUFYV3kC7UawzYmyjY34rX_jKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.19.191.0/24
Signature Algorithm: sha256WithRSAEncryption
79:0a:92:a2:6f:d1:c2:c0:a7:37:81:6e:43:be:52:47:58:13:
3b:81:96:6a:11:97:40:57:fc:f6:8d:b4:ae:23:89:af:80:54:
c7:8f:52:2c:5f:5e:33:d9:5f:97:24:6d:35:45:d7:b3:d3:83:
30:83:d5:17:c4:c9:60:26:a9:44:65:50:ab:82:c8:b7:29:3a:
90:3d:e7:6e:ef:2e:ec:d3:4f:5b:ac:a0:6d:27:a6:c2:e4:7f:
8c:7f:aa:15:da:86:69:55:9c:11:32:5e:ff:f1:92:54:39:18:
73:aa:51:8c:a5:6b:c6:54:4d:ae:5e:02:2f:3d:e9:4a:38:b5:
b3:f3:be:bb:9c:3d:9f:44:5e:d9:29:cb:48:d3:a0:6e:e2:74:
03:82:7c:0e:d2:2c:ec:22:27:19:25:51:f5:34:0e:07:3f:27:
53:e6:bd:79:14:51:25:77:f7:ce:6a:72:0c:9b:eb:7c:f0:2d:
06:3c:0b:84:45:96:ca:e3:01:5f:6d:cb:59:44:f3:60:d5:68:
f9:fb:05:a4:9d:17:a9:e8:e4:87:56:61:51:20:c5:04:15:6a:
1a:da:19:f3:23:90:b7:41:92:5f:cd:c7:4e:a5:44:73:72:9b:
f8:26:03:16:54:8b:77:b3:37:35:e3:37:fc:ae:0d:36:4e:4d:
ca:0e:91:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 12:08:42 2024 by rpki-client on console-ams.rpki-client.org