Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/cpciNVYXrhq_13X0xkr_X-tHAz0.roa
File: cpciNVYXrhq_13X0xkr_X-tHAz0.roa (raw, json)
Hash identifier: kz7T08s22jKlVxwQeTDpSpAn87FDkyPtu6BI0Vn3/1k=
Subject key identifier: 72:97:22:35:56:17:AE:1A:BF:D7:75:F4:C6:4A:FF:5F:EB:47:03:3D
Certificate issuer: /CN=d5f065c8bdb78ff294f7c5454971dbfabfb6c184
Certificate serial: 019006E90C0AA3FD8B19FE0D7EBEBE0C43B1
Authority key identifier: D5:F0:65:C8:BD:B7:8F:F2:94:F7:C5:45:49:71:DB:FA:BF:B6:C1:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1fBlyL23j_KU98VFSXHb-r-2wYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/cpciNVYXrhq_13X0xkr_X-tHAz0.roa
Signing time: Tue 11 Jun 2024 10:47:34 +0000
ROA not before: Tue 11 Jun 2024 10:47:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59432
IP address blocks: 193.178.52.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1fBlyL23j_KU98VFSXHb-r-2wYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 19 Jun 2024 04:03:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:06:e9:0c:0a:a3:fd:8b:19:fe:0d:7e:be:be:0c:43:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5f065c8bdb78ff294f7c5454971dbfabfb6c184
Validity
Not Before: Jun 11 10:47:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=729722355617ae1abfd775f4c64aff5feb47033d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:65:79:55:32:90:f9:2b:3b:62:1e:ab:95:94:
b6:db:64:f4:fe:a4:6d:42:a9:fe:59:db:64:67:f5:
ac:f2:77:1a:db:54:da:17:29:b8:15:c4:17:1f:ec:
c6:9c:7a:8f:a6:c9:cd:ea:21:2f:d3:09:54:b1:32:
a7:0e:46:22:a0:fd:36:ba:8b:d1:37:e5:d1:83:1f:
2c:9d:84:60:08:68:5d:63:c4:3a:00:82:f5:aa:96:
5f:aa:df:88:7c:1a:e8:1a:53:b9:d1:cf:d3:7d:7f:
5e:a0:a0:e4:f5:bc:41:18:01:aa:30:08:28:d4:eb:
35:8a:72:e4:97:4b:13:7b:ed:0a:6f:1b:a6:b4:d3:
41:fa:4c:14:c4:0a:1d:b1:8d:2d:f8:94:1b:b9:ce:
ff:d1:e5:3a:42:96:db:bb:15:81:d4:69:18:f5:15:
92:ab:fc:05:b9:a1:8d:1e:e1:ea:f9:50:c3:8f:99:
b7:b4:0b:49:9b:82:0c:83:b3:af:d0:e4:6c:b1:ad:
7c:24:56:50:42:6d:c3:03:45:13:0d:18:f5:45:8d:
30:dc:7f:99:e2:8e:33:1e:51:0a:f0:a6:b3:50:5e:
eb:05:f5:ad:f3:37:c2:07:4f:80:7a:b2:8f:a2:c7:
ff:bc:dd:e4:36:24:ff:f9:82:18:56:eb:8e:f4:0d:
62:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:97:22:35:56:17:AE:1A:BF:D7:75:F4:C6:4A:FF:5F:EB:47:03:3D
X509v3 Authority Key Identifier:
keyid:D5:F0:65:C8:BD:B7:8F:F2:94:F7:C5:45:49:71:DB:FA:BF:B6:C1:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1fBlyL23j_KU98VFSXHb-r-2wYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/cpciNVYXrhq_13X0xkr_X-tHAz0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.178.52.0/24
Signature Algorithm: sha256WithRSAEncryption
83:b9:c6:06:f7:2a:f7:ae:6c:c7:a1:d6:9e:34:2e:5e:ce:3e:
4d:93:2a:df:e5:f5:77:77:f5:0d:e4:02:4c:95:3d:24:58:82:
fc:01:a0:6f:db:d0:83:a6:74:5a:4a:36:99:6a:9d:bd:58:33:
f5:c9:1b:c7:e1:39:0f:b1:af:64:04:f5:d0:15:d1:ee:cc:9c:
d4:25:15:33:b3:2f:0a:0e:fb:c6:c1:c1:39:8b:03:58:82:d9:
61:c4:29:7b:00:06:b5:9f:90:fe:50:5b:18:1c:1d:ba:77:52:
c2:28:b0:3a:ae:4e:7a:1f:9a:6d:66:d1:0d:a4:db:87:fe:29:
f4:ab:7f:95:5a:f8:bf:2a:d3:d9:0f:4f:9f:77:b9:c7:db:05:
a7:3b:96:80:04:aa:25:a9:df:f5:e3:a1:28:37:2d:5b:85:41:
42:c2:05:2c:c5:fd:b9:c2:47:5d:ca:7d:35:8a:da:e9:fa:70:
f5:40:2b:2e:04:00:17:1b:0a:08:de:df:2b:76:7e:12:8c:e6:
45:13:30:4e:e8:71:ec:ac:7e:86:65:c9:7d:67:73:2b:d3:81:
8d:ae:c0:a0:78:25:9c:a4:88:9e:79:48:36:d7:0e:76:4d:1c:
bc:12:35:8f:55:c1:99:4c:79:49:77:c6:7a:62:2d:8c:8d:e4:
1c:a8:c4:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 18 12:09:49 2024 by rpki-client on console-ams.rpki-client.org