Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/39b509-a67c-463b-9688-4b09bd8ed04a/1/XAqAF1imkxoeEdGF_96IqCtE5_4.roa
File: XAqAF1imkxoeEdGF_96IqCtE5_4.roa (raw, json)
Hash identifier: P3DaN3CqcKBdbCyNoXgKW/34UJD5yAqvz81b4N6PlbM=
Subject key identifier: 5C:0A:80:17:58:A6:93:1A:1E:11:D1:85:FF:DE:88:A8:2B:44:E7:FE
Certificate issuer: /CN=8f12dbfc466bd348090edc1ae3292522e9d73bd9
Certificate serial: 018CC2DB0B41ED3C2DDCA50894C6016C403E
Authority key identifier: 8F:12:DB:FC:46:6B:D3:48:09:0E:DC:1A:E3:29:25:22:E9:D7:3B:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jxLb_EZr00gJDtwa4yklIunXO9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/39b509-a67c-463b-9688-4b09bd8ed04a/1/XAqAF1imkxoeEdGF_96IqCtE5_4.roa
Signing time: Mon 01 Jan 2024 02:29:44 +0000
ROA not before: Mon 01 Jan 2024 02:29:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5483
IP address blocks: 193.16.218.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/39b509-a67c-463b-9688-4b09bd8ed04a/1/jxLb_EZr00gJDtwa4yklIunXO9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/39b509-a67c-463b-9688-4b09bd8ed04a/1/jxLb_EZr00gJDtwa4yklIunXO9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/jxLb_EZr00gJDtwa4yklIunXO9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Jun 2024 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:0b:41:ed:3c:2d:dc:a5:08:94:c6:01:6c:40:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f12dbfc466bd348090edc1ae3292522e9d73bd9
Validity
Not Before: Jan 1 02:29:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5c0a801758a6931a1e11d185ffde88a82b44e7fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:5a:d6:ff:d6:c0:b2:d4:86:e6:b8:79:00:0a:
8f:1f:6e:81:59:34:74:94:7d:98:1b:53:1e:68:68:
96:65:b2:f2:d4:6f:de:98:be:38:05:64:23:88:e8:
18:c1:ae:06:ae:ce:55:25:43:96:6d:65:5f:ad:b4:
6a:26:7d:0d:25:ba:09:68:71:df:59:f9:86:79:9c:
e6:71:6f:d2:07:d3:8b:fe:5c:fd:89:aa:2f:8e:04:
52:0b:a4:6a:85:70:e6:93:21:cd:26:35:ac:27:2b:
bd:22:72:5d:c6:85:8b:cb:5e:2e:e6:37:1e:c3:5d:
eb:84:6c:1e:77:8b:04:f2:e4:12:ed:fa:e5:e8:f0:
8c:b0:5b:20:a7:59:a0:de:09:36:96:2c:57:a7:5d:
55:2e:d8:a8:35:39:dc:a7:ff:6d:7f:d9:4e:cd:5b:
0d:7d:0e:d7:56:01:3d:0f:52:91:5e:d4:c0:c9:59:
13:2e:d6:33:4b:5c:e1:41:fa:e8:ad:83:e8:69:20:
e0:1a:ba:a8:60:25:fa:90:ce:ee:8f:96:51:aa:48:
e0:87:67:54:bd:8f:a7:e4:81:e8:31:15:61:dc:a6:
7c:09:d0:df:25:49:bf:2e:92:17:f9:b5:52:cd:4a:
b5:29:7c:be:0e:6a:28:9f:68:08:7d:a3:18:a3:d5:
c7:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:0A:80:17:58:A6:93:1A:1E:11:D1:85:FF:DE:88:A8:2B:44:E7:FE
X509v3 Authority Key Identifier:
keyid:8F:12:DB:FC:46:6B:D3:48:09:0E:DC:1A:E3:29:25:22:E9:D7:3B:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jxLb_EZr00gJDtwa4yklIunXO9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/39b509-a67c-463b-9688-4b09bd8ed04a/1/XAqAF1imkxoeEdGF_96IqCtE5_4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/39b509-a67c-463b-9688-4b09bd8ed04a/1/jxLb_EZr00gJDtwa4yklIunXO9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.16.218.0/24
Signature Algorithm: sha256WithRSAEncryption
13:01:4a:a3:c7:b1:e0:fe:c0:a9:91:85:2c:cc:a5:47:78:26:
13:30:2b:df:65:3e:66:12:1c:02:28:92:a3:c7:ee:73:48:7c:
27:15:01:e4:23:d7:9c:34:52:97:14:6c:e8:b9:fe:61:ef:cb:
3f:f6:71:47:f0:48:07:bd:bd:82:9c:b1:89:23:e6:88:bd:7d:
48:30:bf:23:da:5b:39:cb:b0:b3:80:4a:4e:77:c7:77:1f:8e:
ad:cb:31:24:b2:cc:7f:21:a7:6d:7b:01:af:ca:34:73:6f:c4:
5c:c3:4e:c1:d9:62:d8:0d:55:df:38:58:b0:bb:46:ca:67:27:
fd:e0:d0:e4:ce:72:01:21:3d:e0:9d:e1:7e:ad:c4:1c:f7:01:
f7:31:22:51:16:96:eb:a7:a5:a9:02:8f:13:e7:01:e9:55:e1:
43:bf:75:aa:74:dc:0e:29:5e:d9:de:5e:54:81:04:cf:f3:88:
c6:71:5f:fd:65:45:2a:1d:8c:47:a6:2d:e3:0f:3c:c7:e7:5d:
f5:01:1c:3c:4d:1d:23:f6:ca:20:83:6e:4a:f4:75:85:66:92:
1a:92:d2:25:02:fa:5d:5c:48:6f:0c:07:59:43:4d:a8:97:e3:
37:7a:3d:54:e4:9c:dd:22:7b:47:1e:c6:4b:da:3d:f2:ea:c9:
5c:7e:2e:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 09:45:53 2024 by rpki-client on console-ams.rpki-client.org