Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f2700b-9853-4172-9a61-a691448b2ec4/1/hAc7ak5kWsKT6JxTG3hpojUMtWE.roa
File: hAc7ak5kWsKT6JxTG3hpojUMtWE.roa (raw, json)
Hash identifier: WaA12oUNzh3ugWP/6qxVSFwuC/6IlOZZcUnme1rBMGU=
Subject key identifier: 84:07:3B:6A:4E:64:5A:C2:93:E8:9C:53:1B:78:69:A2:35:0C:B5:61
Certificate issuer: /CN=a5a975239fdd443b7d3d82e392a9e4ae39218ef6
Certificate serial: 018CC64A789A427C49ED77E69E82DE9C09CF
Authority key identifier: A5:A9:75:23:9F:DD:44:3B:7D:3D:82:E3:92:A9:E4:AE:39:21:8E:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pal1I5_dRDt9PYLjkqnkrjkhjvY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f2700b-9853-4172-9a61-a691448b2ec4/1/hAc7ak5kWsKT6JxTG3hpojUMtWE.roa
Signing time: Mon 01 Jan 2024 18:30:18 +0000
ROA not before: Mon 01 Jan 2024 18:30:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 193.36.66.0/24 maxlen: 24
193.36.67.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f2700b-9853-4172-9a61-a691448b2ec4/1/pal1I5_dRDt9PYLjkqnkrjkhjvY.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/f2700b-9853-4172-9a61-a691448b2ec4/1/pal1I5_dRDt9PYLjkqnkrjkhjvY.mft
rsync://rpki.ripe.net/repository/DEFAULT/pal1I5_dRDt9PYLjkqnkrjkhjvY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 22:03:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:78:9a:42:7c:49:ed:77:e6:9e:82:de:9c:09:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5a975239fdd443b7d3d82e392a9e4ae39218ef6
Validity
Not Before: Jan 1 18:30:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=84073b6a4e645ac293e89c531b7869a2350cb561
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:02:0d:36:ce:5a:1e:b4:55:e8:ac:44:88:4e:
18:ce:80:55:56:44:5b:92:3c:eb:88:2d:da:e9:12:
52:30:9c:22:04:8f:48:2f:da:d0:c4:21:1a:a9:4e:
48:3b:05:40:04:06:34:b0:96:ae:8e:b4:32:f4:0b:
19:4b:d5:7b:5f:4c:b5:57:1d:d8:fe:65:e8:c8:1c:
58:8a:c0:85:5d:6e:f3:1c:1c:c2:c8:70:67:50:de:
c8:f6:f1:9f:2b:20:54:2d:01:32:b8:ee:8a:ce:80:
4f:f5:dc:b3:e6:a1:27:2a:6e:ac:29:43:dc:bc:cc:
1d:78:49:6b:75:b2:c1:9d:3f:d4:56:6f:c3:a5:cc:
dd:3a:ef:31:99:f1:3f:8d:a3:9e:42:8e:f7:94:bd:
d1:90:eb:0a:5a:76:05:56:0d:f6:98:1d:8d:bb:7c:
f3:8f:77:08:9d:2f:c2:35:85:9b:3c:39:d0:f4:09:
70:cf:36:f9:ec:d5:41:c1:77:76:3e:3e:ee:df:8a:
0d:92:31:07:b8:1c:36:7e:ed:4e:c1:24:6f:21:bb:
43:39:ed:01:f5:c8:b4:b1:5a:57:49:3b:0c:74:39:
0d:fd:c4:f1:f4:b2:84:65:e0:b3:3a:85:f2:2e:4c:
48:11:85:de:89:fb:f1:b9:a0:ef:94:97:93:ba:d3:
31:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:07:3B:6A:4E:64:5A:C2:93:E8:9C:53:1B:78:69:A2:35:0C:B5:61
X509v3 Authority Key Identifier:
keyid:A5:A9:75:23:9F:DD:44:3B:7D:3D:82:E3:92:A9:E4:AE:39:21:8E:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pal1I5_dRDt9PYLjkqnkrjkhjvY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f2700b-9853-4172-9a61-a691448b2ec4/1/hAc7ak5kWsKT6JxTG3hpojUMtWE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f2700b-9853-4172-9a61-a691448b2ec4/1/pal1I5_dRDt9PYLjkqnkrjkhjvY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.36.66.0/23
Signature Algorithm: sha256WithRSAEncryption
68:84:f1:e1:bf:1c:3f:f5:ac:4a:e7:66:e2:75:59:a8:e7:42:
ce:cb:3f:15:82:e9:02:fd:a2:46:e6:a6:d0:0a:29:97:bc:d7:
65:87:9b:72:24:75:3e:c9:0d:24:3d:49:0d:cd:7d:0a:1f:c7:
8e:39:4b:d6:22:ec:16:fc:dc:49:d6:22:ba:77:03:50:95:d6:
06:e0:12:d8:81:fe:67:52:95:54:b6:91:24:44:08:e9:8a:9b:
73:ae:a9:9c:df:c3:12:ef:66:b1:8b:71:5a:f2:9f:a3:97:a2:
67:45:f1:3e:29:c9:40:c8:c1:cb:d4:7a:a0:f2:20:6c:17:f9:
f0:d4:82:b1:8b:03:25:d1:c4:03:05:fa:e2:45:e6:c2:c0:91:
5f:90:30:e2:57:ff:27:cb:33:bd:6b:73:72:7f:3d:4f:5e:cc:
8c:c4:d8:0f:80:74:55:f7:0b:6d:05:c6:81:87:1e:02:03:70:
e8:84:28:ff:1e:af:d9:f9:d0:c4:c1:35:0b:38:2d:54:ac:04:
74:5f:02:a2:99:00:02:0c:8d:17:ec:54:0f:f3:51:ba:23:66:
40:62:a1:a3:71:2c:4f:30:08:d0:54:d0:65:ca:2a:f0:e0:26:
ac:a1:16:03:2a:a4:30:8b:71:7c:d4:8a:94:ab:d7:74:d2:18:
cc:ac:51:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 01:26:42 2024 by rpki-client on console-fra.rpki-client.org