Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/9dac05-6f83-498f-9a0a-9f8abe0e9ff0/1/b8sU1eeuYNDamzG72M7jL55xeuY.roa
File: b8sU1eeuYNDamzG72M7jL55xeuY.roa (raw, json)
Hash identifier: MAVLiZpuGXk5rCm1ozIQ3I0+s5ITzcz8vZdXV5KdnDM=
Subject key identifier: 6F:CB:14:D5:E7:AE:60:D0:DA:9B:31:BB:D8:CE:E3:2F:9E:71:7A:E6
Certificate issuer: /CN=6759267f03f76d87fe41b2cb0b295d23c754c59a
Certificate serial: 018CC26D4BE84491FECB65694B247A4701A8
Authority key identifier: 67:59:26:7F:03:F7:6D:87:FE:41:B2:CB:0B:29:5D:23:C7:54:C5:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z1kmfwP3bYf-QbLLCyldI8dUxZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/9dac05-6f83-498f-9a0a-9f8abe0e9ff0/1/b8sU1eeuYNDamzG72M7jL55xeuY.roa
Signing time: Mon 01 Jan 2024 00:29:51 +0000
ROA not before: Mon 01 Jan 2024 00:29:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12529
IP address blocks: 193.169.190.0/24 maxlen: 24
193.169.190.0/23 maxlen: 23
193.169.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/9dac05-6f83-498f-9a0a-9f8abe0e9ff0/1/Z1kmfwP3bYf-QbLLCyldI8dUxZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/9dac05-6f83-498f-9a0a-9f8abe0e9ff0/1/Z1kmfwP3bYf-QbLLCyldI8dUxZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z1kmfwP3bYf-QbLLCyldI8dUxZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 10:03:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:4b:e8:44:91:fe:cb:65:69:4b:24:7a:47:01:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6759267f03f76d87fe41b2cb0b295d23c754c59a
Validity
Not Before: Jan 1 00:29:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6fcb14d5e7ae60d0da9b31bbd8cee32f9e717ae6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:7b:80:a2:31:5a:31:82:d1:42:51:ea:f2:84:
c0:74:ee:27:3a:38:b8:30:48:2c:3a:c8:71:af:06:
ed:dc:56:f1:0f:9e:2b:d4:43:a5:b5:04:dd:8a:21:
06:7a:5e:ce:d1:1c:5f:a6:93:e7:34:73:1e:6c:2e:
6c:6c:cb:c8:b9:a4:bd:a5:46:52:43:ec:90:0e:e3:
83:b7:46:f8:c4:d7:8a:ef:5f:87:7e:dd:21:3c:c0:
94:8e:dd:3d:0f:31:60:96:e6:3a:5b:73:a7:48:14:
88:19:03:98:9f:2b:df:55:a8:c8:f9:58:33:60:44:
93:54:1a:ec:4a:a1:be:17:39:63:1e:81:9f:9e:b9:
64:dc:79:c5:68:fc:10:7e:05:af:43:81:5b:92:ce:
e2:0b:82:dc:df:e6:85:bd:14:65:11:f7:9b:c9:39:
cc:50:47:d6:73:f2:7f:19:68:1a:47:ca:57:22:97:
f0:1d:99:db:13:06:d9:7c:34:e7:66:56:a1:51:ff:
28:dd:58:65:94:42:6d:4b:a7:11:42:41:ec:95:bf:
d5:2f:a0:c9:97:26:8f:4f:cd:a9:cf:f7:cf:d3:a5:
2e:78:ef:8c:d2:7e:40:ca:e0:50:57:32:10:2f:80:
f9:a7:a5:73:57:0f:b1:c5:40:1c:04:c3:3d:a6:0b:
0b:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:CB:14:D5:E7:AE:60:D0:DA:9B:31:BB:D8:CE:E3:2F:9E:71:7A:E6
X509v3 Authority Key Identifier:
keyid:67:59:26:7F:03:F7:6D:87:FE:41:B2:CB:0B:29:5D:23:C7:54:C5:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z1kmfwP3bYf-QbLLCyldI8dUxZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/9dac05-6f83-498f-9a0a-9f8abe0e9ff0/1/b8sU1eeuYNDamzG72M7jL55xeuY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/9dac05-6f83-498f-9a0a-9f8abe0e9ff0/1/Z1kmfwP3bYf-QbLLCyldI8dUxZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.169.190.0/23
Signature Algorithm: sha256WithRSAEncryption
79:26:f6:a7:62:5c:a8:e8:0c:3f:db:a3:e0:93:a2:a3:87:a8:
d9:0a:27:0d:53:a2:a4:32:63:40:f3:65:ca:59:74:a2:6e:80:
c6:61:d2:76:be:80:d5:09:c5:72:99:cd:90:9c:92:6f:49:a3:
e7:42:b5:55:63:d9:7a:db:4b:49:6f:2d:0a:37:40:15:97:09:
de:62:a1:00:88:4d:49:3a:16:49:da:14:0f:39:e0:2d:17:9a:
f6:98:29:27:7a:06:4f:c0:cf:a7:83:dd:28:75:d5:d4:3b:48:
3d:b3:0e:eb:5f:26:67:f7:f5:ef:ca:73:e1:f2:57:b5:a2:b2:
b7:d8:b0:90:0a:73:ea:1b:e2:fc:c1:af:f9:2a:1a:1f:28:d1:
2c:5b:48:65:78:6d:a7:c6:5b:ef:1c:cd:80:f3:80:43:dc:61:
18:ef:b0:14:3d:32:56:44:ff:8b:ca:7a:dd:f9:84:83:ab:47:
c3:0a:cd:0d:38:27:5e:49:96:e4:76:c4:87:2d:00:d2:8d:1d:
c1:e5:d6:bc:28:cc:a1:8e:d4:06:1a:2a:7e:be:7d:cf:8d:93:
49:b3:f3:d1:f6:6e:f8:44:af:77:79:a1:e5:0f:29:95:28:cf:
c2:60:8f:7c:00:61:89:98:fa:a6:5d:da:a3:5e:03:db:b2:01:
5c:36:b1:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 18:50:33 2024 by rpki-client on console-ams.rpki-client.org