Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/a597c5-3ec4-4b46-8c7b-d92248aabe2d/1/tOSxZOxJKleonEMvQFRBOblqOFM.roa
File: tOSxZOxJKleonEMvQFRBOblqOFM.roa (raw, json)
Hash identifier: S5l7y8jnMRml64IX6+MPcJ6uCfuAdVoXNY848uOybSc=
Subject key identifier: B4:E4:B1:64:EC:49:2A:57:A8:9C:43:2F:40:54:41:39:B9:6A:38:53
Certificate issuer: /CN=a408fc9246042751110d2ec5065d0c47d1d43cd0
Certificate serial: 018CC2DB3E60046F734980B7FAF8676C59E3
Authority key identifier: A4:08:FC:92:46:04:27:51:11:0D:2E:C5:06:5D:0C:47:D1:D4:3C:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pAj8kkYEJ1ERDS7FBl0MR9HUPNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/a597c5-3ec4-4b46-8c7b-d92248aabe2d/1/tOSxZOxJKleonEMvQFRBOblqOFM.roa
Signing time: Mon 01 Jan 2024 02:29:57 +0000
ROA not before: Mon 01 Jan 2024 02:29:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29522
IP address blocks: 193.143.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/a597c5-3ec4-4b46-8c7b-d92248aabe2d/1/pAj8kkYEJ1ERDS7FBl0MR9HUPNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/a597c5-3ec4-4b46-8c7b-d92248aabe2d/1/pAj8kkYEJ1ERDS7FBl0MR9HUPNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/pAj8kkYEJ1ERDS7FBl0MR9HUPNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 25 Jun 2024 04:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:3e:60:04:6f:73:49:80:b7:fa:f8:67:6c:59:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a408fc9246042751110d2ec5065d0c47d1d43cd0
Validity
Not Before: Jan 1 02:29:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b4e4b164ec492a57a89c432f40544139b96a3853
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:f7:63:73:8a:2b:e1:39:ef:a2:cb:04:71:5d:
1b:20:ea:a1:ed:40:95:10:44:fc:de:80:f3:16:e6:
d0:0f:12:0d:9b:ba:41:b7:93:91:39:aa:0b:4a:4d:
96:f7:5c:e1:24:0c:04:bf:cf:a3:e1:22:0b:6c:81:
06:68:86:00:c6:5b:d3:70:42:49:7e:28:bb:86:7d:
1c:12:41:e9:c3:4e:db:ac:5d:ca:a4:39:83:69:58:
63:1d:be:d1:25:6a:b0:9a:99:5c:f6:b4:23:04:53:
c0:6f:e0:3c:02:f6:c4:4a:5f:75:21:e8:d1:fb:aa:
c5:36:76:fb:b9:c3:0f:5a:1a:00:f4:99:b4:3f:97:
0e:b9:80:6e:33:13:1a:8e:9b:dc:db:4b:07:7d:0d:
a1:a3:a1:30:cf:ce:b6:59:77:45:4d:bf:b9:8e:c4:
dd:bf:ba:34:8e:b6:8e:54:0e:93:b5:62:6d:8f:20:
5a:81:75:c8:bb:f0:a2:73:ed:9e:b2:28:e3:aa:a9:
88:91:9e:dc:44:8b:a0:21:52:a3:f4:dd:cc:1d:04:
b0:85:ee:fd:d6:d4:66:0c:13:ec:b1:db:82:79:63:
58:a8:1e:ea:27:cd:52:6a:5c:7a:71:56:79:47:17:
99:b0:c2:bd:a1:d4:8a:af:5d:3f:69:78:fc:ff:50:
05:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:E4:B1:64:EC:49:2A:57:A8:9C:43:2F:40:54:41:39:B9:6A:38:53
X509v3 Authority Key Identifier:
keyid:A4:08:FC:92:46:04:27:51:11:0D:2E:C5:06:5D:0C:47:D1:D4:3C:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pAj8kkYEJ1ERDS7FBl0MR9HUPNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/a597c5-3ec4-4b46-8c7b-d92248aabe2d/1/tOSxZOxJKleonEMvQFRBOblqOFM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/a597c5-3ec4-4b46-8c7b-d92248aabe2d/1/pAj8kkYEJ1ERDS7FBl0MR9HUPNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.143.77.0/24
Signature Algorithm: sha256WithRSAEncryption
be:a8:16:b3:2a:78:a9:14:7e:bb:a0:51:60:32:2f:2b:92:47:
ba:ec:23:55:b2:d3:1b:86:0a:ef:5c:cd:d8:82:ab:93:d1:f2:
3f:6f:c1:71:d3:b2:64:e1:0b:90:f5:00:25:97:96:61:f9:1a:
08:33:e6:b3:26:34:54:80:82:f9:05:c9:dc:e9:36:61:91:37:
8d:59:53:77:8a:ae:c5:fb:28:f0:28:9a:ca:c5:4f:9c:60:8d:
6b:66:5e:dd:eb:bd:1d:cc:b9:57:30:d6:4c:4a:7f:28:f8:43:
dc:00:a3:3d:bc:c0:ae:ff:76:a7:62:0b:79:38:d5:01:3a:38:
d3:7a:e5:b7:66:3b:8f:52:a3:9c:c9:0f:74:f0:8d:c5:52:67:
96:a4:3c:de:fa:18:4c:14:9a:a8:f5:dd:d3:7c:51:7a:3c:e2:
4f:cb:b4:46:ad:06:b8:8e:73:d7:aa:70:bb:a6:91:2b:f3:8c:
ef:40:ac:1d:79:5c:70:12:c4:86:05:bb:bf:c5:5a:55:12:cd:
46:b1:59:85:dc:22:8c:ae:79:24:c1:e3:b5:9a:8d:02:f2:ec:
9e:98:ea:34:c4:61:21:5b:09:b3:77:d4:65:3b:f4:3d:c4:e2:
f5:e7:1c:3d:fd:ed:01:71:62:3e:28:3d:24:c1:e4:70:32:41:
03:e2:f6:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 12:37:40 2024 by rpki-client on console-fra.rpki-client.org