Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/d9cc5b-f868-43fe-9c5c-37b96ffba76a/1/1-Jb5pMTHdjzL90lRBnW2HRKuSZo.roa
File: 1-Jb5pMTHdjzL90lRBnW2HRKuSZo.roa (raw, json)
Hash identifier: oH6BwNZQb6essdSZtGHFA6V3yGgGc7hucBUAPamSYdU=
Subject key identifier: F8:96:F9:A4:C4:C7:76:3C:CB:F7:49:51:06:75:B6:1D:12:AE:49:9A
Certificate issuer: /CN=0ded66d2c5a493a09534357e5ca26f03d1a4ddd4
Certificate serial: 018CC3B6F9AF3CCAECAE755301D2F57B6C83
Authority key identifier: 0D:ED:66:D2:C5:A4:93:A0:95:34:35:7E:5C:A2:6F:03:D1:A4:DD:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/d9cc5b-f868-43fe-9c5c-37b96ffba76a/1/1-Jb5pMTHdjzL90lRBnW2HRKuSZo.roa
Signing time: Mon 01 Jan 2024 06:29:57 +0000
ROA not before: Mon 01 Jan 2024 06:29:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15404
IP address blocks: 193.176.112.0/23 maxlen: 23
193.176.114.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/d9cc5b-f868-43fe-9c5c-37b96ffba76a/1/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/d9cc5b-f868-43fe-9c5c-37b96ffba76a/1/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 14:49:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:f9:af:3c:ca:ec:ae:75:53:01:d2:f5:7b:6c:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ded66d2c5a493a09534357e5ca26f03d1a4ddd4
Validity
Not Before: Jan 1 06:29:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f896f9a4c4c7763ccbf749510675b61d12ae499a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:43:75:e1:12:a9:0f:73:03:69:1f:bf:4e:20:
27:24:44:45:18:80:b8:bd:05:9d:e0:53:78:ee:b8:
63:e5:38:a6:c9:f9:8b:72:e1:b9:ee:c1:c6:4a:e8:
9c:fb:28:48:b2:b6:c4:2a:fa:37:64:95:09:ec:26:
5e:4c:26:b8:50:69:0c:d4:cf:a3:c9:22:1f:a3:20:
63:5e:50:1b:87:e0:f2:74:f1:e9:9c:fe:07:8b:be:
48:0b:f0:82:0e:73:56:b2:86:60:28:53:68:8b:ca:
1a:81:2a:d6:78:1c:8d:29:25:85:a3:9a:bd:72:95:
96:7b:6b:38:95:1f:ff:cc:d4:ac:69:a2:89:34:e2:
d9:d8:3a:b2:29:d1:fc:ae:c7:53:29:4d:76:4a:f3:
4e:5d:d6:e1:6a:1e:0d:68:4a:5d:48:8a:02:15:01:
d8:e8:94:c8:93:43:f1:f7:23:ff:23:e0:20:82:c5:
29:cf:7f:ea:d3:8f:83:55:76:3b:8c:49:04:51:9e:
14:50:28:3e:31:5c:7e:ec:35:35:be:a5:6c:c7:b0:
93:32:5a:df:76:3c:b9:b4:70:e5:f1:0a:fd:ab:d4:
fb:e1:54:0e:e9:c5:1c:ae:bd:68:17:af:85:7c:6f:
29:cd:d0:cd:17:dc:8f:41:61:6f:b5:db:41:6b:8d:
91:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:96:F9:A4:C4:C7:76:3C:CB:F7:49:51:06:75:B6:1D:12:AE:49:9A
X509v3 Authority Key Identifier:
keyid:0D:ED:66:D2:C5:A4:93:A0:95:34:35:7E:5C:A2:6F:03:D1:A4:DD:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d9cc5b-f868-43fe-9c5c-37b96ffba76a/1/1-Jb5pMTHdjzL90lRBnW2HRKuSZo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d9cc5b-f868-43fe-9c5c-37b96ffba76a/1/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.176.112.0/22
Signature Algorithm: sha256WithRSAEncryption
0f:f0:44:91:ac:4c:37:5f:2d:8d:ee:d5:eb:c3:6f:40:47:5d:
78:ad:7b:50:03:f2:7f:a3:2b:96:04:75:87:0c:0e:57:3b:47:
a6:92:83:91:fb:f1:eb:26:02:51:63:0d:b4:b6:83:b1:34:88:
84:4c:a0:79:59:e7:60:d3:bb:ff:16:44:41:47:fd:04:2e:c2:
65:e3:4b:5c:e9:e1:0f:d2:72:04:b8:d7:5f:3c:e8:ac:dc:9a:
0f:67:c1:32:87:64:0a:5f:4b:38:4a:d6:da:6f:31:c4:b2:1d:
fe:e6:d7:13:66:65:50:e2:e3:21:46:21:17:9e:57:db:38:86:
b3:33:40:a9:ef:07:db:f6:e2:33:73:ae:98:7a:a7:4f:dd:eb:
68:36:a8:59:ce:6e:a0:9b:94:49:78:6c:4a:3e:4f:eb:ae:86:
45:2e:bf:ea:56:74:f3:99:7a:d0:ba:2e:cd:c5:9f:40:03:f7:
6b:49:dc:f2:bd:fc:00:75:ee:c0:66:2d:35:a5:ca:5d:67:a9:
0e:8a:24:9d:49:fa:17:71:59:bc:dc:5f:a8:c3:0d:bf:fe:55:
ee:52:d8:7d:c6:5f:34:79:b4:41:7c:fc:0d:9a:f3:43:32:37:
81:43:7b:3a:15:27:c3:ab:95:7b:fe:9f:4b:df:17:ac:72:83:
f7:f7:9d:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 18:40:28 2024 by rpki-client on console-ams.rpki-client.org