Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/iD2r0Tn8yso8JHfwOOwwFjr6vFo.roa
File: iD2r0Tn8yso8JHfwOOwwFjr6vFo.roa (raw, json)
Hash identifier: 6acXAbktnxfq5LoZI3zpZ73zrQ9SV/NsW067yh/csgk=
Subject key identifier: 88:3D:AB:D1:39:FC:CA:CA:3C:24:77:F0:38:EC:30:16:3A:FA:BC:5A
Certificate issuer: /CN=0dd441c3ffae829842249e944b03851081f4d9e0
Certificate serial: 018CC5DCA9E4E0F2B95B25010F8ACD072662
Authority key identifier: 0D:D4:41:C3:FF:AE:82:98:42:24:9E:94:4B:03:85:10:81:F4:D9:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DdRBw_-ugphCJJ6USwOFEIH02eA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/iD2r0Tn8yso8JHfwOOwwFjr6vFo.roa
Signing time: Mon 01 Jan 2024 16:30:22 +0000
ROA not before: Mon 01 Jan 2024 16:30:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 63339
IP address blocks: 193.23.118.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.mft
rsync://rpki.ripe.net/repository/DEFAULT/DdRBw_-ugphCJJ6USwOFEIH02eA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 May 2024 04:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:a9:e4:e0:f2:b9:5b:25:01:0f:8a:cd:07:26:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dd441c3ffae829842249e944b03851081f4d9e0
Validity
Not Before: Jan 1 16:30:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=883dabd139fccaca3c2477f038ec30163afabc5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:fa:06:1e:76:bc:71:ce:9c:60:32:9b:c9:ef:
5a:a7:42:0b:6f:bc:e5:56:da:c1:b9:89:c1:cd:9c:
e0:b1:b3:1e:5e:d6:2b:eb:78:a6:95:69:eb:b7:17:
89:9a:f3:19:74:da:d9:9e:ff:f8:ad:a2:e2:71:b7:
e8:a0:17:ac:bc:38:fb:e6:df:75:96:aa:11:cd:a6:
ed:cb:27:5b:54:e0:8a:17:db:cd:2b:67:bc:e2:ed:
59:bd:35:e2:6d:53:54:e7:64:69:35:d4:a1:10:cf:
ef:35:ff:00:48:9c:68:de:ec:cf:94:6f:35:13:35:
65:6d:39:e9:95:dd:6e:67:36:96:86:a0:d5:19:4a:
25:43:59:d4:42:da:ec:7f:49:d5:01:bf:d2:d9:b8:
06:c9:f0:31:0b:e5:b7:3a:1d:c1:9b:0e:b0:30:71:
49:8e:12:b1:e4:3c:bd:02:80:43:cb:40:57:fd:20:
cc:b1:2e:ad:9d:2f:20:64:c4:7d:20:15:27:16:69:
f8:53:0f:75:11:ff:03:18:7f:24:18:71:ca:dd:d7:
33:c6:e2:1c:ec:d3:92:94:80:0a:8e:db:47:a6:cb:
c6:20:46:13:0c:ea:58:2c:73:35:99:e8:ab:bb:83:
b0:46:8a:04:da:cb:0d:36:15:1f:9e:ad:c5:b1:25:
eb:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:3D:AB:D1:39:FC:CA:CA:3C:24:77:F0:38:EC:30:16:3A:FA:BC:5A
X509v3 Authority Key Identifier:
keyid:0D:D4:41:C3:FF:AE:82:98:42:24:9E:94:4B:03:85:10:81:F4:D9:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DdRBw_-ugphCJJ6USwOFEIH02eA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/iD2r0Tn8yso8JHfwOOwwFjr6vFo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.23.118.0/24
Signature Algorithm: sha256WithRSAEncryption
72:ca:9a:fe:e4:7c:a5:99:d8:b3:8a:f2:7c:00:dc:0b:25:13:
fe:89:0a:e7:bf:29:b5:b5:24:8c:1c:2e:8c:71:71:56:13:77:
be:f5:3f:00:d1:53:cc:eb:86:0c:46:ea:ac:11:cc:d7:e3:81:
1a:d5:6b:d7:66:84:ad:e3:e7:a4:37:2c:24:b7:7c:df:2b:01:
fb:b6:c8:cc:63:9d:ec:03:8f:6d:60:0e:13:09:64:c1:9e:2f:
44:bb:08:15:47:b7:f2:ff:b7:f2:82:21:c5:b7:e3:39:a8:ca:
ac:a2:52:9a:2b:04:7e:d4:ff:dc:26:46:0b:78:4d:6c:ba:52:
1b:e7:de:7c:2b:7d:62:c1:cd:9b:ca:04:3d:f6:be:c1:74:0c:
9c:3f:e7:ff:25:23:19:0d:20:24:a0:bc:d2:cf:c7:0a:67:cd:
cf:a0:67:30:39:3d:40:a8:df:70:c9:42:09:75:7d:fb:8c:fe:
88:43:87:63:21:e9:63:02:2e:18:c4:61:17:1a:27:38:56:f3:
49:9a:ec:ce:20:de:23:0c:4f:f3:92:03:11:db:2a:4c:37:0e:
97:c4:60:b2:eb:e8:b4:0b:45:71:b9:65:6d:9e:e0:87:3d:b5:
11:84:75:df:7b:4f:63:09:dd:93:d0:12:51:80:06:7d:4e:b1:
fa:5e:98:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 29 10:48:59 2024 by rpki-client on console-ams.rpki-client.org