Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/aa270a-c089-4778-9343-b7362edbd8ac/1/eC0n_FZCq7XnaPNxOp9QSo4OHYY.roa
File: eC0n_FZCq7XnaPNxOp9QSo4OHYY.roa (raw, json)
Hash identifier: XyvnwHVRg8f1BBgRDhVGawv82rVlIyqImGqWZHzfGsY=
Subject key identifier: 78:2D:27:FC:56:42:AB:B5:E7:68:F3:71:3A:9F:50:4A:8E:0E:1D:86
Certificate issuer: /CN=a0c8cda814e777d9fe154b92e9959ce120b0ad58
Certificate serial: 018CCA2B7756EA2002DD172E76B328ECB8EA
Authority key identifier: A0:C8:CD:A8:14:E7:77:D9:FE:15:4B:92:E9:95:9C:E1:20:B0:AD:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oMjNqBTnd9n-FUuS6ZWc4SCwrVg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/aa270a-c089-4778-9343-b7362edbd8ac/1/eC0n_FZCq7XnaPNxOp9QSo4OHYY.roa
Signing time: Tue 02 Jan 2024 12:34:55 +0000
ROA not before: Tue 02 Jan 2024 12:34:55 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206934
IP address blocks: 193.30.90.0/23 maxlen: 24
193.30.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/aa270a-c089-4778-9343-b7362edbd8ac/1/oMjNqBTnd9n-FUuS6ZWc4SCwrVg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/aa270a-c089-4778-9343-b7362edbd8ac/1/oMjNqBTnd9n-FUuS6ZWc4SCwrVg.mft
rsync://rpki.ripe.net/repository/DEFAULT/oMjNqBTnd9n-FUuS6ZWc4SCwrVg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 19 Jun 2024 04:03:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2b:77:56:ea:20:02:dd:17:2e:76:b3:28:ec:b8:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0c8cda814e777d9fe154b92e9959ce120b0ad58
Validity
Not Before: Jan 2 12:34:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=782d27fc5642abb5e768f3713a9f504a8e0e1d86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:9b:a3:c7:20:4b:86:d9:38:3f:1d:0c:36:08:
96:11:e6:93:00:9b:66:56:e8:ae:dd:d5:67:8e:6d:
3b:b1:9a:0a:ad:8f:1c:96:a4:30:b7:c7:5c:39:ec:
8c:58:02:96:b5:aa:f1:0a:97:f6:f5:14:ed:33:90:
19:e3:c2:2d:bb:18:0d:1c:56:c5:26:36:83:fa:90:
de:d1:c6:a2:07:bb:d9:85:b7:00:80:e2:a4:be:ef:
99:55:fb:be:d0:1c:1f:c2:25:52:9a:f3:65:02:b6:
66:6a:f7:a4:27:6b:45:aa:a2:52:0c:3b:82:45:b6:
4c:5d:74:3a:45:06:dd:16:d8:f4:eb:60:7d:22:43:
fe:5c:32:9c:67:f3:38:ef:13:a4:10:d8:7b:53:7a:
87:34:36:23:20:38:02:0b:d5:32:a3:6a:0e:ab:12:
ca:be:37:12:d5:07:e8:a9:39:24:d0:d1:63:af:44:
1c:90:fc:1f:02:88:89:ff:3f:86:24:b1:ad:51:63:
c9:cb:42:48:71:7d:b6:cc:93:7f:a2:c8:f7:76:6e:
80:0f:2b:03:75:13:b2:18:00:48:78:26:7e:22:9b:
c1:ee:7a:b3:85:dc:fe:62:21:0c:ad:32:cb:99:7c:
42:88:a5:af:c9:a3:50:45:2b:c5:cc:5b:02:ee:89:
e7:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:2D:27:FC:56:42:AB:B5:E7:68:F3:71:3A:9F:50:4A:8E:0E:1D:86
X509v3 Authority Key Identifier:
keyid:A0:C8:CD:A8:14:E7:77:D9:FE:15:4B:92:E9:95:9C:E1:20:B0:AD:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oMjNqBTnd9n-FUuS6ZWc4SCwrVg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/aa270a-c089-4778-9343-b7362edbd8ac/1/eC0n_FZCq7XnaPNxOp9QSo4OHYY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/aa270a-c089-4778-9343-b7362edbd8ac/1/oMjNqBTnd9n-FUuS6ZWc4SCwrVg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.30.23.0/24
193.30.90.0/23
Signature Algorithm: sha256WithRSAEncryption
0d:ba:51:a1:13:32:7a:d3:62:80:5c:47:4c:67:0e:bd:f4:65:
91:9a:e9:66:2a:12:55:e7:4d:21:91:ba:9b:d8:30:d9:e6:ef:
d1:e6:46:2f:ea:47:54:10:41:02:df:91:09:d5:b6:12:6e:4a:
19:85:53:85:ab:1b:77:0c:39:c6:aa:a6:c6:af:85:ee:95:0a:
7f:b8:cc:fc:e4:93:cf:20:71:a9:1d:7b:f2:3e:2b:09:04:4e:
1e:94:54:e7:d0:d4:33:55:8e:4a:26:8a:c2:de:83:1b:1b:ae:
c9:58:7e:56:1b:f4:84:11:5e:fd:bf:56:80:b2:1f:2c:5d:2b:
ab:93:02:8e:bd:a7:8a:20:58:67:c1:90:66:dd:7c:69:67:a3:
ac:e4:17:90:83:18:70:42:c0:46:1d:57:57:4b:2b:4e:c9:24:
16:23:88:70:ce:a5:e8:1d:5b:b1:e5:a2:1b:63:fd:c9:5a:1d:
bf:0b:94:1b:c9:30:d6:e9:04:55:3d:d1:cf:a2:0d:89:d6:a7:
1c:1c:66:52:f4:e2:9d:68:b6:04:1b:0c:76:3e:f5:e9:48:be:
d9:28:b1:93:e0:ab:02:69:79:44:41:84:38:b1:c8:5a:2b:f9:
55:8e:ac:b7:93:f9:b5:38:c3:09:78:80:e6:d3:58:28:93:ba:
c5:16:71:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 18 11:00:38 2024 by rpki-client on console-ams.rpki-client.org